chore: import verified syly2 maintenance baseline without embedded credentials

2026-10-29 22:22:49 +08:00
commit da8224efd8
5265 changed files with 1199963 additions and 0 deletions
@@ -0,0 +1,33 @@
+worker_processes 1;
+pid /var/run/nginx.pid;
+events { worker_connections 256; }
+http {
+  include /etc/nginx/mime.types;
+  server_tokens off;
+  access_log off;
+  error_log /dev/stderr warn;
+  client_max_body_size 10m;
+  proxy_connect_timeout 5s;
+  proxy_read_timeout 60s;
+  server {
+    listen 8445 ssl;
+    server_name _;
+    absolute_redirect off;
+    ssl_certificate /etc/nginx/tls/server.crt;
+    ssl_certificate_key /etc/nginx/tls/server.key;
+    ssl_protocols TLSv1.2 TLSv1.3;
+    add_header Content-Security-Policy "default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob:; connect-src 'self'; form-action 'self'; frame-src 'self'; base-uri 'self'" always;
+    add_header X-Frame-Options SAMEORIGIN always;
+    location = / { return 302 /syly/; }
+    location = /syly/ { return 302 /syly/loginController.do?login; }
+    location /syly/ {
+      proxy_pass http://app:8080;
+      proxy_set_header Host $http_host;
+      proxy_set_header X-Forwarded-Host $host;
+      proxy_set_header X-Forwarded-Port 8445;
+      proxy_set_header X-Forwarded-Proto $scheme;
+      proxy_set_header X-Forwarded-For $remote_addr;
+    }
+    location / { return 404; }
+  }
+}