config

docker-compose.prod.yml

@@ -18,5 +18,16 @@ services:
     volumes:
       - mongodb_data:/data/db
 
+  nginx:
+    image: nginx:alpine
+    ports:
+      - "80:80"
+    volumes:
+      - ./nginx:/etc/nginx/conf.d
+      - ./logs/nginx:/var/log/nginx
+
+    depends_on:
+      - nextjs
+
 volumes:
   mongodb_data:

nginx/default.conf

@@ -0,0 +1,34 @@
+server {
+    listen 80;
+    server_name match.dzhhzy.com;
+
+    # Proxy settings
+    location / {
+        proxy_pass http://nextjs:3000;
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection 'upgrade';
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_cache_bypass $http_upgrade;
+    }
+
+    # Security headers
+    add_header X-Frame-Options "SAMEORIGIN" always;
+    add_header X-XSS-Protection "1; mode=block" always;
+    add_header X-Content-Type-Options "nosniff" always;
+    add_header Referrer-Policy "no-referrer-when-downgrade" always;
+
+    # Gzip compression
+    gzip on;
+    gzip_vary on;
+    gzip_proxied any;
+    gzip_comp_level 6;
+    gzip_types text/plain text/css text/xml application/json application/javascript application/rss+xml application/atom+xml image/svg+xml;
+
+    # 日志格式
+    access_log /var/log/nginx/match.dzhhzy.com.access.log;
+    error_log /var/log/nginx/match.dzhhzy.com.error.log;
+}