Linux Docker

在 /opt/larkxr-cluster/nginx/conf.d/ 目录下新建 https.conf 文件，并将下面的 Nginx 配置复制到文件中。
需要重点修改的部分如下：
**监听端口**
* listen 443 ssl;：443 端口可修改为其他端口。如果更改端口，需要在 docker-compose.yml 中增加端口映射。
例如监听 8586 端口，则在 services.nginx.ports 中添加：- 8586:8586

**证书路径（容器内路径）**
* ssl_certificate /etc/nginx/cert/cloudlark.pingxingyun.com_bundle.crt;
* ssl_certificate_key /etc/nginx/cert/cloudlark.pingxingyun.com.key;
* 以上为 容器内证书路径。你需要在 docker-compose.yml 中做目录映射，在 services.nginx.volumes 中添加：- /opt/larkxr-cluster/nginx/cert:/etc/nginx/cert

以下为Nginx中的完整结构体：

```
server {
    listen 443 ssl;
    server_name localhost;

error_page 497 400 https://$http_host$request_uri;

ssl_certificate     /etc/nginx/cert/cloudlark.pingxingyun.com_bundle.crt;
    ssl_certificate_key /etc/nginx/cert/cloudlark.pingxingyun.com.key;

ssl_session_cache shared:SSL:1m;
    ssl_session_timeout 5m;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;

resolver_timeout 5s;
    keepalive_timeout 60;

# 查看后端服务状态
    location /nginxstatus {
        stub_status on;
        access_log off;
    }

location /static {
        index index.html;
        alias ./admin-front;
    }

# 利用精确匹配，实现使用域名直接访问静态页面，而不用加 /index
    location = / {
        root ./admin-front/index;
        index index.html;
    }
    location = /index.html {
        root ./admin-front/index;
    }

location /webclient {
        index index.html;
        root ./admin-front;
    }

# Minio 图片转发
    location ^~ /image/ {
        proxy_pass http://172.29.0.30:9000/image/;
    }

location / {
        proxy_pass http://larkxr-admin/;
        proxy_cookie_path / /;
        proxy_http_version 1.1;
        proxy_set_header Host $host:$server_port;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header REMOTE-HOST $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Scheme $scheme;
        proxy_set_header X-Real-Proto https;
        proxy_redirect http:// https://;
        client_max_body_size 100m;

proxy_connect_timeout 2;
        proxy_send_timeout 60;
        proxy_read_timeout 60;
    }

# WebSocket
    location /websocket {
        proxy_pass http://larkxr-admin;
        proxy_http_version 1.1;
        proxy_set_header Host $host:$server_port;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header REMOTE-HOST $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Real-Proto https;

proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection 'upgrade';

client_max_body_size 1m;

proxy_connect_timeout 2;
        proxy_send_timeout 60;
        proxy_read_timeout 60;
    }

location ^~ /appli/upload {
        proxy_pass http://larkxr-admin/appli/upload;
        proxy_cookie_path / /;
        proxy_http_version 1.1;
        proxy_set_header Host $host:$server_port;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header REMOTE-HOST $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Scheme $scheme;
        proxy_set_header X-Real-Proto https;

client_max_body_size 10240m;

proxy_connect_timeout 2;
        proxy_send_timeout 60;
        proxy_read_timeout 7200;
    }

location ^~ /appli/sliceUpload {
        proxy_pass http://larkxr-admin/appli/sliceUpload;
        proxy_cookie_path / /;
        proxy_http_version 1.1;
        proxy_set_header Host $host:$server_port;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header REMOTE-HOST $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Real-Proto https;
        proxy_set_header X-Forwarded-Scheme $scheme;

client_max_body_size 10240m;

proxy_connect_timeout 2;
        proxy_send_timeout 60;
        proxy_read_timeout 7200;
    }
}
```

**完成后执行以下操作：**
* 重启nginx服务
   
```
cd /opt/larkxr-cluster
docker compose restart nginx
```

* 启用 Admin 代理模式并重启
  * 修改 /opt/larkxr-cluster/admin/application.yaml，设置：proxy.enable=true
  * 重启 admin 服务：
  * 
```
cd /opt/larkxr-cluster
docker compose restart larkxr-admin
```