refactor: overhaul nginx configuration for improved performance and structure

- Reorganized nginx.conf to enhance readability and maintainability.
- Added Brotli compression support alongside Gzip for better asset delivery.
- Configured upstream servers for SpringBoot API and WebSocket handling.
- Updated static resource caching settings and improved error handling for API requests.
- Included detailed comments in Chinese for better understanding of configuration options.

Author: windbytes

nginx.conf

@@ -1,43 +1,222 @@
-server {
-  listen 80;
-  server_name _;
-
-  root /usr/share/nginx/html;
-  index index.html;
-
-  # Gzip static assets in runtime.
-  gzip on;
-  gzip_min_length 1024;
-  gzip_types
-    text/plain
-    text/css
-    text/javascript
-    application/javascript
-    application/json
-    application/xml
-    image/svg+xml;
-
-  # Cache hashed static resources.
-  location /static/ {
-    expires 30d;
-    add_header Cache-Control "public, max-age=2592000, immutable";
-    try_files $uri =404;
-  }
-
-  # Proxy API requests to backend service.
-  location /api/ {
-    proxy_pass ${BACKEND_API_URL}/;
-    proxy_http_version 1.1;
-    proxy_set_header Host $host;
-    proxy_set_header X-Real-IP $remote_addr;
-    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-    proxy_set_header X-Forwarded-Proto $scheme;
-    proxy_set_header Upgrade $http_upgrade;
-    proxy_set_header Connection "upgrade";
-  }
-
-  # SPA fallback.
-  location / {
-    try_files $uri $uri/ /index.html;
-  }
+# load_module /etc/nginx/modules/ngx_http_brotli_filter_module.so;
+# load_module /etc/nginx/modules/ngx_http_brotli_static_module.so;
+user www-data;
+worker_processes auto;
+pid /run/nginx.pid;
+
+events {
+    worker_connections 1024;
+}
+
+http {
+
+    ##
+    # 基础配置
+    ##
+
+    include       /etc/nginx/mime.types;
+    default_type  application/octet-stream;
+
+    sendfile on;
+    tcp_nopush on;
+    tcp_nodelay on;
+
+    keepalive_timeout 65;
+
+    server_tokens off;
+
+    ##
+    # 日志
+    ##
+
+    access_log /var/log/nginx/access.log;
+    error_log  /var/log/nginx/error.log warn;
+
+    ##
+    # GZIP 压缩
+    ##
+
+    gzip on;
+    gzip_comp_level 6;
+    gzip_min_length 1k;
+    gzip_buffers 16 8k;
+    gzip_http_version 1.1;
+    gzip_vary on;
+    gzip_proxied any;
+
+    gzip_types
+        text/plain
+        text/css
+        text/xml
+        text/javascript
+        application/json
+        application/javascript
+        application/x-javascript
+        application/xml
+        application/xml+rss
+        application/rss+xml
+        image/svg+xml;
+
+    ##
+    # Brotli 压缩（需要 nginx 安装 brotli 模块）
+    #
+    # Debian 默认 nginx 通常没有启用 brotli
+    # 需要安装：
+    #
+    # apt install nginx-module-brotli
+    #
+    # 或自行编译模块
+    ##
+
+    brotli on;
+    brotli_comp_level 6;
+    brotli_static on;
+
+    brotli_types
+        text/plain
+        text/css
+        text/xml
+        text/javascript
+        application/javascript
+        application/json
+        application/xml
+        application/rss+xml
+        application/atom+xml
+        image/svg+xml;
+
+    ##
+    # upstream
+    ##
+
+    upstream springboot_backend {
+        server ip:port; # 后端 API 服务地址
+    }
+
+    upstream websocket_backend {
+        server ip:port; # 后端 WebSocket 服务地址
+    }
+
+    ##
+    # HTTP
+    ##
+
+    server {
+
+        listen 80;
+        server_name fusionadmin.cn integration.net.cn syndra.cn;
+
+        ##
+        # React 打包目录
+        ##
+
+        root /home/syndra/web;
+        index index.html;
+
+        ##
+        # React Router 支持
+        ##
+
+        location / {
+            try_files $uri $uri/ /index.html;
+        }
+
+        ##
+        # SpringBoot API 代理
+        ##
+
+        location /api/ {
+
+            proxy_pass http://springboot_backend/;
+
+            proxy_http_version 1.1;
+
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+
+            proxy_connect_timeout 60s;
+            proxy_send_timeout 60s;
+            proxy_read_timeout 60s;
+        }
+
+        ##
+        # WebSocket 代理
+        ##
+
+        location /api/ws/ {
+
+            proxy_pass http://websocket_backend/;
+
+            proxy_http_version 1.1;
+
+            proxy_set_header Upgrade $http_upgrade;
+            proxy_set_header Connection "upgrade";
+
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+
+            proxy_read_timeout 86400;
+        }
+
+        ##
+        # 静态资源缓存
+        ##
+
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg|woff|woff2|ttf)$ {
+
+            expires 30d;
+
+            add_header Cache-Control "public, no-transform";
+        }
+    }
+
+    ##
+    # HTTPS 配置（暂时注释）
+    ##
+
+    # server {
+    #
+    #     listen 443 ssl http2;
+    #     server_name your-domain.com;
+    #
+    #     root /home/syndra/web;
+    #     index index.html;
+    #
+    #     ssl_certificate     /home/syndra/ssl/fullchain.pem;
+    #     ssl_certificate_key /home/syndra/ssl/privkey.pem;
+    #
+    #     ssl_protocols TLSv1.2 TLSv1.3;
+    #     ssl_ciphers HIGH:!aNULL:!MD5;
+    #
+    #     location / {
+    #         try_files $uri $uri/ /index.html;
+    #     }
+    #
+    #     location /api/ {
+    #
+    #         proxy_pass http://springboot_backend/;
+    #
+    #         proxy_http_version 1.1;
+    #
+    #         proxy_set_header Host $host;
+    #         proxy_set_header X-Real-IP $remote_addr;
+    #         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    #         proxy_set_header X-Forwarded-Proto $scheme;
+    #     }
+    #
+    #     location /api/ws/ {
+    #
+    #         proxy_pass http://websocket_backend/;
+    #
+    #         proxy_http_version 1.1;
+    #
+    #         proxy_set_header Upgrade $http_upgrade;
+    #         proxy_set_header Connection "upgrade";
+    #
+    #         proxy_set_header Host $host;
+    #     }
+    # }
+
 }