Harmon/insar-management-system-v2
0
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs: update production workflow design and runtime changes

Browse Source
This commit is contained in:
Harmon
2026-06-14 18:47:00 +08:00
parent 58a87706ef
commit b1c59051b9
41 changed files with 2042 additions and 134 deletions
Download Patch File Download Diff File Expand all files Collapse all files
nginx/nginx.conf
+68 -3
View File
@@ -24,18 +24,44 @@ http {
server {
listen 80;
server_name localhost;
include "D:/Code/Insar_management_system_v2/nginx/client_allow.conf";
error_page 403 /__access_denied.html;
add_header X-Frame-Options "SAMEORIGIN" always;
add_header X-Content-Type-Options "nosniff" always;
add_header X-XSS-Protection "1; mode=block" always;
add_header Referrer-Policy "strict-origin-when-cross-origin" always;
# CSP: allow both legacy tile port 8900 and current tile-server port 8910
# If tile server address changes, update the sources below accordingly
add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: http://127.0.0.1:8900 http://127.0.0.1:8910 https://*.tile.openstreetmap.org https://*.tile.opentopomap.org; connect-src 'self' http://127.0.0.1:8900 http://127.0.0.1:8910; font-src 'self' data:; worker-src blob:;" always;
add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://*.tile.openstreetmap.org https://*.tile.opentopomap.org; connect-src 'self'; font-src 'self' data:; worker-src blob:;" always;
root "D:/Code/Insar_management_system_v2/frontend/dist";
index index.html;
location = /index.html {
try_files /index.html =404;
add_header Cache-Control "no-store, no-cache, must-revalidate" always;
}
location /assets/ {
try_files $uri @asset_not_found;
add_header Cache-Control "public, max-age=31536000, immutable" always;
}
location @asset_not_found {
add_header Cache-Control "no-store, no-cache, must-revalidate" always;
return 404;
}
location = /__access_denied.html {
internal;
allow all;
root "D:/Code/Insar_management_system_v2/frontend/dist";
try_files /access_denied.html =403;
default_type text/html;
sub_filter_once off;
sub_filter "__CLIENT_IP__" "$remote_addr";
sub_filter "__REQUEST_HOST__" "$host";
}
location / {
try_files $uri $uri/ /index.html;
}
@@ -49,6 +75,45 @@ http {
proxy_set_header X-Forwarded-Proto $scheme;
}
location /tiles/ {
proxy_pass http://127.0.0.1:8910;
proxy_http_version 1.1;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_cache_valid 200 365d;
expires 365d;
add_header Cache-Control "public, max-age=31536000, immutable" always;
}
location /geojson/ {
proxy_pass http://127.0.0.1:8910;
proxy_http_version 1.1;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
}
location /shp/ {
proxy_pass http://127.0.0.1:8910;
proxy_http_version 1.1;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
}
location /vectors/ {
proxy_pass http://127.0.0.1:8910;
proxy_http_version 1.1;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
}
# SSE: disable buffering so events are pushed immediately
location /api/tasks/active/stream {
proxy_pass http://127.0.0.1:18000;