server {
     listen 443 ssl; 
     server_name excalidraw.haimaotv.com; 
     ssl_certificate /opt/nginx-1.24.0/excalidraw.haimaotv.com_bundle.crt; 
     ssl_certificate_key /opt/nginx-1.24.0/excalidraw.haimaotv.com.key; 
     ssl_session_timeout 5m;
     ssl_protocols TLSv1.2 TLSv1.3; 
     ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE; 
     ssl_prefer_server_ciphers on;

     location / {
      //解决跨域
       if ($request_method = 'OPTIONS') {
                add_header Access-Control-Allow-Origin 'https://ottepg-moss.cedock.com';
                add_header Access-Control-Allow-Headers '*';
                add_header Access-Control-Allow-Methods '*';
                add_header Access-Control-Allow-Credentials 'true';
                return 204;
        }
		if ($request_method != 'OPTIONS') {
			add_header Access-Control-Allow-Origin 'https://ottepg-moss.cedock.com' always;
			add_header Access-Control-Allow-Credentials 'true';
		}

        proxy_pass http://127.0.0.1:3002; # 将请求代理转发到本地3002端口的服务
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        //支持websocket
	    proxy_http_version 1.1;
	    proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "Upgrade";
        proxy_cache_bypass $http_upgrade;
      }
    }