# 启用SSL
server.ssl.enabled=true
# SSL证书路径（放在项目指定目录下）
server.ssl.key-store=${user.dir}/data/ssl/webapp.jks
## 证书密码（生成时设置的密码）
server.ssl.key-store-password=3qae2co8m59597
## 证书类型
server.ssl.key-store-type=JKS

server {
        listen       443 ssl;
        server_name  localhost;
		
		server_name hl0109.cn www.hl0109.cn;

        ssl_certificate      D:/ssl/webapp.crt;
        ssl_certificate_key  D:/ssl/webapp.key;

        ssl_session_cache    shared:SSL:1m;
        ssl_session_timeout  5m;

        ssl_ciphers  HIGH:!aNULL:!MD5;
        ssl_prefer_server_ciphers  on;

        location / {
            root   html;
            index  index.html index.htm;
        }
		
		# 代理后端API请求
        location /server_data/ {
			# 后端服务地址
			proxy_pass http://localhost:9001/server_data/;
			
			# 重要：设置代理请求头
			proxy_set_header Host $host;
			proxy_set_header X-Real-IP $remote_addr;
			proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
			proxy_set_header X-Forwarded-Proto $scheme;
		}
		
		error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }
    }