fix: finalize standard HTTPS deployment

This commit is contained in:
Codex Local
2026-08-26 11:19:43 +08:00
parent 8955b57ddc
commit 8607ec33e7
3 changed files with 9 additions and 5 deletions
+1 -1
View File
@@ -21,4 +21,4 @@ docker compose -f compose.yaml -f deploy/server/compose.override.yaml \
mock-provider api worker web gateway
```
安全组和主机防火墙只保留TCP 80、443以及受限来源的SSH 22。如果云安全组暂未放行443,可临时将宿主机80映射到网关443,并使用`https://SERVER_IP:80`;放行443后应恢复标准HTTPS地址。正式环境仍应配置自有域名、生产OIDC和真实外部服务,并切换到Kubernetes生产覆盖层。
安全组和主机防火墙只保留TCP 80、443以及受限来源的SSH 22。HTTP 80仅用于跳转到标准HTTPS 443。正式环境仍应配置自有域名、生产OIDC和真实外部服务,并切换到Kubernetes生产覆盖层。
+1 -1
View File
@@ -159,7 +159,7 @@ services:
gateway:
image: nginx:1.30-alpine
ports:
- "80:443"
- "80:80"
- "443:443"
volumes:
- ./deploy/server/nginx.conf:/etc/nginx/conf.d/default.conf:ro