# 勤务系统 2.0 Demo —— Nginx（建议放到 conf.d，随 http{} 加载）
# 纯静态站。中台账号已写进前端，浏览器自己登录。
# 运维只需改下面两个 upstream 地址（OAuth / DMS，一般是同一网关）。

map $http_token $dms_token {
    ""      $cookie_DmsToken;
    default $http_token;
}

upstream shba_oauth {
    server 121.43.55.7:2101;   # OAuth，对应路径 /proxy_oauth
}

upstream shba_dms {
    server 121.43.55.7:2101;   # DMS，对应路径 /proxy_dms
}

server {
    listen 80;
    server_name _;
    root /opt/shba-duty/dist;
    index index.html;

    client_max_body_size 32m;
    proxy_connect_timeout 30s;
    proxy_read_timeout 120s;
    proxy_send_timeout 120s;

    location /proxy_oauth/ {
        proxy_pass http://shba_oauth;
        proxy_http_version 1.1;
        proxy_set_header Host $proxy_host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header Connection "";
    }

    location /proxy_dms/ {
        proxy_pass http://shba_dms;
        proxy_http_version 1.1;
        proxy_set_header Host $proxy_host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header Connection "";
        proxy_set_header Token $dms_token;
        proxy_set_header token $dms_token;
        client_max_body_size 32m;
    }

    location / {
        try_files $uri $uri/ /index.html;
    }
}