env PROXY_TARGET;
worker_processes auto;

#error_log  logs/error.log;
#error_log  logs/error.log  notice;
#error_log  logs/error.log  info;

#pid        logs/nginx.pid;
events {
    worker_connections 1024;
}


http {
    include mime.types;
    default_type application/octet-stream;
    client_max_body_size 10240M;
    #使其不显示版本号
    server_tokens off;
    #log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
    #                  '$status $body_bytes_sent "$http_referer" '
    #                  '"$http_user_agent" "$http_x_forwarded_for"';

    #access_log  logs/access.log  main;

    sendfile on;
    #tcp_nopush     on;

    keepalive_timeout 65;

    #开启压缩模式
    gzip on;
    gzip_static on;
    gzip_min_length 1k;
    gzip_buffers 16 8k;
    gzip_http_version 1.1;
    gzip_comp_level 4;
    gzip_types text/plain application/javascript application/x-javascript text/css text/javascript application/xml;
    gzip_vary on;
    gzip_proxied expired no-cache no-store private auth;
    gzip_disable "MSIE [1-6]\.";

    # 定义信任的代理IP段 - 增强版
    set_real_ip_from 0.0.0.0/0;
    real_ip_header X-Real-IP;
    real_ip_recursive on;

    
    server {
        listen 80;
        location / {
            root /usr/share/nginx/html;
            index index.html index.htm;
            try_files $uri $uri/ /index.html;
            # 关键：正确设置转发头部
            proxy_set_header Host $http_host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_set_header X-Forwarded-Proto $scheme;
            
            # 针对Docker环境的额外头部
            proxy_set_header X-Original-Remote-Addr $remote_addr;
            
            # 新增：确保不覆盖现有头部
            proxy_pass_header X-Forwarded-For;
        }
        location /rest {
            resolver 127.0.0.11 valid=30s;  # Docker默认DNS服务器
            set_by_lua $proxy_target 'return os.getenv("PROXY_TARGET")';
            proxy_pass $proxy_target;
            rewrite ^/rest/(.*)$ /$1 break;
            #proxy_set_header Host $host:$server_port;
            # 关键：正确设置转发头部
            proxy_set_header Host $http_host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_set_header X-Forwarded-Proto $scheme;
            
            # 针对Docker环境的额外头部
            proxy_set_header X-Original-Remote-Addr $remote_addr;
            
            # 流式输出关键配置 - 支持Server-Sent Events (SSE)和流式响应
            proxy_buffering off;  # 禁用代理缓冲，允许实时流式传输
            proxy_cache off;  # 禁用缓存
            proxy_read_timeout 300s;  # 增加读取超时时间（5分钟）
            proxy_send_timeout 300s;  # 增加发送超时时间（5分钟）
            proxy_http_version 1.1;  # 使用HTTP/1.1以支持分块传输
            chunked_transfer_encoding on;  # 启用分块传输编码
            
            # 设置响应头，禁用nginx内部缓冲
            add_header X-Accel-Buffering no;
            
            # 新增：确保不覆盖现有头部
            proxy_pass_header X-Forwarded-For;
        }
        # 新增诊断接口
        location /ip-debug {
            add_header Content-Type text/plain;
            return 200 "remote_addr: $remote_addr
\n
http_x_forwarded_for: $http_x_forwarded_for
\n
http_x_real_ip: $http_x_real_ip
\n
proxy_add_x_forwarded_for: $proxy_add_x_forwarded_for
\n
http_referer: $http_referer
\n
http_user_agent: $http_user_agent
\n
http_x_forwarded_for: $http_x_forwarded_for
\n
http_x_real_ip: $http_x_real_ip
\n
http_x_forwarded_proto: $http_x_forwarded_proto
\n
http_x_original_remote_addr: $http_x_original_remote_addr
\n
http_host: $http_host
\n
http_port: $http_port
\n
http_scheme: $http_scheme
\n
http_request_uri: $http_request_uri
\n
http_request_method: $http_request_method
\n
http_request_body: $http_request_body
\n
http_request_body_file: $http_request_body_file
\n";
        }
        error_page 500 502 503 504 /50x.html;
        location = /50x.html {
            root html;
        }
    }
}