fix: finalize standard HTTPS deployment
This commit is contained in:
@@ -21,4 +21,4 @@ docker compose -f compose.yaml -f deploy/server/compose.override.yaml \
|
||||
mock-provider api worker web gateway
|
||||
```
|
||||
|
||||
安全组和主机防火墙只保留TCP 80、443以及受限来源的SSH 22。如果云安全组暂未放行443,可临时将宿主机80映射到网关443,并使用`https://SERVER_IP:80`;放行443后应恢复标准HTTPS地址。正式环境仍应配置自有域名、生产OIDC和真实外部服务,并切换到Kubernetes生产覆盖层。
|
||||
安全组和主机防火墙只保留TCP 80、443以及受限来源的SSH 22。HTTP 80仅用于跳转到标准HTTPS 443。正式环境仍应配置自有域名、生产OIDC和真实外部服务,并切换到Kubernetes生产覆盖层。
|
||||
|
||||
@@ -159,7 +159,7 @@ services:
|
||||
gateway:
|
||||
image: nginx:1.30-alpine
|
||||
ports:
|
||||
- "80:443"
|
||||
- "80:80"
|
||||
- "443:443"
|
||||
volumes:
|
||||
- ./deploy/server/nginx.conf:/etc/nginx/conf.d/default.conf:ro
|
||||
|
||||
Reference in New Issue
Block a user