user  root;
worker_processes  4;

error_log  /var/log/nginx/error.log;
#pid        logs/nginx.pid;

events {
    use  epoll;
    worker_connections  65536;
    accept_mutex on;
    multi_accept on;
}

http {
    include       mime.types;
    default_type  application/octet-stream;
    limit_conn_zone $binary_remote_addr zone=addr:20m;
    #log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
    #                  '$status $body_bytes_sent "$http_referer" '
    #                  '"$http_user_agent" "$http_x_forwarded_for"';

    #access_log  logs/access.log  main;

    sendfile        on;
    sendfile_max_chunk 100k;
    tcp_nopush     on;

    keepalive_timeout  30;
    client_header_buffer_size 128k;
    large_client_header_buffers 4 128k;
    client_max_body_size 30m;
    client_body_buffer_size 128k;
    underscores_in_headers on;
    server_name_in_redirect off;
    gzip  on;
    #fastcgi_intercept_errors on;
    #error_page 403 404 500 502 504 = https://test.xyh-health.cn/nginx/err/;
    include /etc/nginx/conf.d/*.conf;

    upstream gateway {
        server 127.0.0.1:8308;
    }
    server {
        listen    80;
        keepalive_requests 120;
        server_name 127.0.0.1;
        
        location / {
            root /opt/html/;
        }
    }       
    server {
        listen 443 ssl  http2 default_server;
        server_name test.xyh-health.cn test.xyh.tk;
        add_header X-Frame-Options "SAMEORIGIN";
       # proxy_intercept_errors on;
        charset utf-8;

    location ^~ /yx/ {
        root /opt/html/;
    }
    location /hys-cms/ {
        proxy_pass http://localhost:8082/hys-cms/;
    }
    location / {
        proxy_pass   http://gateway/;
        proxy_set_header Host      $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        # limit_conn addr 30;
        fastcgi_intercept_errors on;
        error_page 404 /opt/html/nginx/err/error.html;
     }
        ssl_certificate /etc/letsencrypt/live//fullchain.pem; # managed by Certbot
        ssl_certificate_key /etc/letsencrypt/live//privkey.pem; # managed by Certbot
        include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
       
        ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
    
    }

}