server {
  listen       80;
  listen       [::]:80;
  server_name   nezha.host.domain;
  client_max_body_size 50m;
  #proxy_set_header X-Real-IP $remote_addr;
  #proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  return 301 https://$host$request_uri;
}

server {
  listen        443 ssl;
  listen        [::]:443 ssl;
  http2 on;
  server_name   nezha.host.domain;
  ssl_certificate       "/home/Web/.ssl/host.domain.pem";
  ssl_certificate_key   "/home/Web/.ssl/host.domain.key";
  ssl_stapling on;
  ssl_session_timeout   1d;
  ssl_session_cache     shared:SSL:1m;
  ssl_protocols TLSv1.2 TLSv1.3;

  underscores_in_headers on;
  proxy_set_header X-Forwarded-Proto https; #抵达此处时, 无论如何都应该为 https
  #set_real_ip_from 172.245.48.0/20;   # CF
  #real_ip_header CF-Connecting-IP;    # CF
  real_ip_header X-Forwarded-For;
  #ssl_ciphers          PROFILE=SYSTEM;
  #ssl_prefer_server_ciphers    on;
  #client_max_body_size 50m;
  proxy_set_header X-Real-IP $remote_addr;
  proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

  # grpc 相关
  location ^~ /proto.NezhaService/ {
    grpc_set_header Host $host;
    #grpc_set_header nz-realip $http_CF_Connecting_IP; # 替换为你的 CDN 提供的私有 header，此处为 CloudFlare 默认
    grpc_set_header nz-realip $remote_addr; # 如果你使用nginx作为最外层，就把上面一行注释掉，启用此行
    grpc_read_timeout 600s;
    grpc_send_timeout 600s;
    grpc_socket_keepalive on;
    client_max_body_size 10m;
    grpc_buffer_size 4m;
    grpc_pass grpc://dashboard;
  }
  # websocket 相关
  location ~* ^/api/v1/ws/(server|terminal|file)(.*)$ {
    proxy_set_header Host $host;
    #proxy_set_header nz-realip $http_cf_connecting_ip; # 替换为你的 CDN 提供的私有 header，此处为 CloudFlare 默认
    proxy_set_header nz-realip $remote_addr; # 如果你使用nginx作为最外层，就把上面一行注释掉，启用此行
    proxy_set_header Origin https://$host;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection "upgrade";
    proxy_read_timeout 3600s;
    proxy_send_timeout 3600s;
    proxy_pass http://127.0.0.1:8008;
  }

  location / {
    proxy_set_header Host $host;
    #proxy_set_header nz-realip $http_cf_connecting_ip; # 替换为你的 CDN 提供的私有 header，此处为 CloudFlare 默认
    proxy_set_header nz-realip $remote_addr; # 如果你使用nginx作为最外层，就把上面一行注释掉，启用此行
    proxy_read_timeout 3600s;
    proxy_send_timeout 3600s;
    proxy_buffer_size 128k;
    proxy_buffers 4 256k;
    proxy_busy_buffers_size 256k;
    proxy_max_temp_file_size 0;
    proxy_pass http://127.0.0.1:8008;
  }
}

upstream dashboard {
  server 127.0.0.1:8008;
  keepalive 512;
}