From 55b2ac03cc781dcb521a926db8dc59ad27e831e1 Mon Sep 17 00:00:00 2001
From: luocai <luocai@reconova.com>
Date: Sun, 18 Feb 2024 15:06:19 +0800
Subject: [PATCH] update nginx.conf

---
 Server/conf/nginx.conf | 25 +++++++++++++++++++++++++
 1 file changed, 25 insertions(+)

diff --git a/Server/conf/nginx.conf b/Server/conf/nginx.conf
index a584d70..06c7f24 100644
--- a/Server/conf/nginx.conf
+++ b/Server/conf/nginx.conf
@@ -58,6 +58,9 @@ http {
         server 127.0.0.1:8087;
     }
 
+    upstream typesense {
+        server 127.0.0.1:8108;
+    }
 
     init_by_lua_file lua/settings.lua;
 
@@ -272,6 +275,28 @@ http {
         }
     }
 
+    server {
+        listen 443 ssl;
+        server_name typesense.amass.fun;
+
+        client_header_timeout 120s;         
+        client_body_timeout 120s;           
+        client_max_body_size 512m;   
+
+        ssl_certificate cert/typesense.amass.fun.pem;
+        ssl_certificate_key cert/typesense.amass.fun.key;
+        ssl_session_timeout 5m; #缓存有效期
+        ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4; #加密算法
+        ssl_protocols TLSv1 TLSv1.1 TLSv1.2; #安全链接可选的加密协议
+        ssl_prefer_server_ciphers on; #使用服务器端的首选算法
+        
+        location / {
+            proxy_set_header X-Forwarded-For $remote_addr;
+            proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_pass http://typesense;
+        }
+    }
+
     server {
         listen 443 ssl;
         server_name amass.fun;