/etc/nginx/conf.d/default.conf

# 虚拟主机配置
server {
    listen 80;
    server_name localhost;
    server_tokens off;

    # 安全头加固（确保所有响应携带）
    add_header X-Content-Type-Options "nosniff" always;
    add_header X-Frame-Options "SAMEORIGIN" always;
    add_header X-XSS-Protection "1; mode=block" always;

    # 根路径配置（入口文件 index.html）
    location / {
        root /usr/share/nginx/html;
        index index.html;
        try_files $uri $uri/ /index.html;
        # 入口文件不缓存，确保获取最新版本
        add_header Cache-Control "no-cache, no-store, must-revalidate" always;
        add_header Pragma "no-cache" always;
    }

    # 带哈希的静态资源（适配“文件名-哈希.扩展名”格式）
    # 哈希规则：Vite 生成的 base64 字符集（A-Za-z0-9-_）
    location ~* ^.+-[A-Za-z0-9-_]+\.(js|css|ico|svg|png|jpg|jpeg|gif)$ {
        root /usr/share/nginx/html;
        # 长期缓存（1年），标记资源不可变（哈希变化即失效）
        add_header Cache-Control "public, immutable, max-age=31536000" always;
        add_header ETag "" always;  # 禁用ETag，减少验证请求
    }

    # 不带哈希的静态资源（如未哈希的图片、ico等）
    location ~* \.(js|css|ico|svg|png|jpg|jpeg|gif)$ {
        root /usr/share/nginx/html;
        # 短缓存（1小时），平衡缓存与更新
        add_header Cache-Control "public, max-age=3600" always;
    }

    # 反向代理：backend服务
    location /backend/ {
        proxy_pass http://host:port/;
        proxy_set_header Host $http_host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_connect_timeout 30s;
        proxy_send_timeout 30s;
        proxy_read_timeout 60s;
        proxy_buffering on;
        proxy_buffer_size 16k;
        proxy_buffers 4 64k;
        proxy_busy_buffers_size 128k;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
    }

    # 错误页配置
    error_page 404 /404.html;
    location = /404.html {
        root /usr/share/nginx/html;
    }
    error_page 500 502 503 504 /50x.html;
    location = /50x.html {
        root /usr/share/nginx/html;
    }
}