xinyouhe/x-server-mobile
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

chore: 重组项目文件结构，文档和部署文件归档

Browse Source 
文件结构优化：
- docs/ 归档所有项目文档（PROJECT.md, PROJECT_ISSUES.md 等）
- deploy/ 归档所有部署相关文件（docker-compose.prod.yml, nginx 配置等）
- scripts/ 归档脚本文件（deploy.sh, rollback.sh）
- tests/ 归档测试文件（test_data.php）

更新引用路径：
- CLAUDE.md 更新文档路径引用
- 部署文档更新配置文件路径引用

清理文件：
- 移除非必要的测试文件（TestController, 测试脚本等）
- 移除重复/错误的目录

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
root
2026-02-27 18:01:17 +08:00
parent 1004aea725
commit 4ceb5eac7e
18 changed files with 4982 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
deploy/x-server-mobile-prod.conf
+183
View File
@@ -0,0 +1,183 @@
# X-Server Mobile 线上环境 OpenResty 配置
# 文件位置: /usr/local/openresty/nginx/conf/conf.d/x-server-mobile.conf
# HTTP 重定向到 HTTPS
server {
listen 80;
server_name xsm.hnxinyouhe.com;
# Let's Encrypt ACME 挑战
location /.well-known/acme-challenge/ {
root /var/www/certbot;
}
# 强制 HTTPS
location / {
return 301 https://$server_name$request_uri;
}
}
# HTTPS 主服务
server {
listen 443 ssl http2;
server_name xsm.hnxinyouhe.com;
# ============================================
# SSL 证书配置
# ============================================
# Let's Encrypt 证书路径
ssl_certificate /etc/letsencrypt/live/xsm.hnxinyouhe.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/xsm.hnxinyouhe.com/privkey.pem;
# 如果使用自签名证书，取消下面的注释并注释上面的 Let's Encrypt 配置
# ssl_certificate /etc/nginx/ssl/xsm.hnxinyouhe.com.crt;
# ssl_certificate_key /etc/nginx/ssl/xsm.hnxinyouhe.com.key;
# SSL 协议和加密套件
ssl_protocols TLSv1.2 TLSv1.3;
ssl_ciphers 'ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384';
ssl_prefer_server_ciphers off;
# SSL 会话缓存
ssl_session_cache shared:SSL:10m;
ssl_session_timeout 10m;
ssl_session_tickets off;
# OCSP Stapling
ssl_stapling on;
ssl_stapling_verify on;
ssl_trusted_certificate /etc/letsencrypt/live/xsm.hnxinyouhe.com/chain.pem;
resolver 8.8.8.8 8.8.4.4 valid=300s;
resolver_timeout 5s;
# ============================================
# 日志配置
# ============================================
access_log /opt/x-server-mobile/logs/nginx_access.log combined;
error_log /opt/x-server-mobile/logs/nginx_error.log warn;
# ============================================
# 安全头
# ============================================
add_header X-Frame-Options "SAMEORIGIN" always;
add_header X-Content-Type-Options "nosniff" always;
add_header X-XSS-Protection "1; mode=block" always;
add_header Referrer-Policy "no-referrer-when-downgrade" always;
# ============================================
# Gzip 压缩
# ============================================
gzip on;
gzip_vary on;
gzip_min_length 1024;
gzip_comp_level 6;
gzip_types
text/plain
text/css
text/xml
text/javascript
application/json
application/javascript
application/xml+rss
application/rss+xml
font/truetype
font/opentype
application/vnd.ms-fontobject
image/svg+xml;
# ============================================
# 静态资源（长期缓存）
# ============================================
location ~* \.(js|css|png|jpg|jpeg|gif|webp|svg|ico|woff|woff2|ttf|eot)$ {
root /opt/x-server-mobile/frontend;
expires 7d;
add_header Cache-Control "public, immutable";
access_log off;
}
# ============================================
# 飞书回调路由（必须在 API 之前）
# ============================================
location /login {
proxy_pass http://127.0.0.1:8787;
proxy_http_version 1.1;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header Host $host;
}
location /login/callback {
proxy_pass http://127.0.0.1:8787;
proxy_http_version 1.1;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header Host $host;
}
location /login/qrcode {
proxy_pass http://127.0.0.1:8787;
proxy_http_version 1.1;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header Host $host;
}
# 飞书卡片回调
location /feishu/card/callback {
proxy_pass http://127.0.0.1:8787;
proxy_http_version 1.1;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header Host $host;
}
# ============================================
# API 代理
# ============================================
location /api/ {
proxy_pass http://127.0.0.1:8787;
proxy_http_version 1.1;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header Host $host;
# 超时配置
proxy_connect_timeout 60s;
proxy_send_timeout 60s;
proxy_read_timeout 60s;
# 缓冲配置
proxy_buffering on;
proxy_buffer_size 4k;
proxy_buffers 8 4k;
proxy_busy_buffers_size 8k;
}
# ============================================
# 前端 SPA（所有其他请求返回 index.html）
# ============================================
location / {
root /opt/x-server-mobile/frontend;
# SPA 路由支持
try_files $uri $uri/ /index.html;
# 禁用 HTML 缓存
add_header Cache-Control "no-cache, no-store, must-revalidate";
add_header Pragma "no-cache";
add_header Expires "0";
}
}