feat: expand companion platform, device controls, and memoir workflows
ci / verify (push) Canceled after 0s
ci / verify (push) Canceled after 0s
Add customer and operator login, BLE provisioning, device fleet controls, call memory, memoir generation, and refreshed family and maintenance portals. Include API contracts, migrations, firmware sources, tests, assets, and deployment documentation.
This commit is contained in:
@@ -1,5 +1,6 @@
|
||||
server {
|
||||
listen 80;
|
||||
location ^~ /.well-known/acme-challenge/ { root /var/www/acme; }
|
||||
server_name _;
|
||||
# First-boot clock bootstrap only. The response is authenticated by TIME1.
|
||||
location = /api/v1/device/time-challenges {
|
||||
@@ -14,18 +15,18 @@ server {
|
||||
proxy_buffering off;
|
||||
}
|
||||
location / {
|
||||
return 301 https://121.41.46.238$request_uri;
|
||||
return 301 https://82.157.201.114$request_uri;
|
||||
}
|
||||
}
|
||||
|
||||
server {
|
||||
listen 443 ssl;
|
||||
server_name 121.41.46.238;
|
||||
server_name 82.157.201.114;
|
||||
server_tokens off;
|
||||
client_max_body_size 256m;
|
||||
|
||||
ssl_certificate /etc/letsencrypt/live/121.41.46.238/fullchain.pem;
|
||||
ssl_certificate_key /etc/letsencrypt/live/121.41.46.238/privkey.pem;
|
||||
ssl_certificate /etc/letsencrypt/live/82.157.201.114/fullchain.pem;
|
||||
ssl_certificate_key /etc/letsencrypt/live/82.157.201.114/privkey.pem;
|
||||
ssl_protocols TLSv1.2 TLSv1.3;
|
||||
ssl_session_cache shared:SSL:10m;
|
||||
ssl_session_timeout 1d;
|
||||
@@ -58,6 +59,15 @@ server {
|
||||
proxy_buffering off;
|
||||
}
|
||||
|
||||
location /f/ {
|
||||
proxy_pass $api_backend;
|
||||
proxy_buffering off;
|
||||
proxy_request_buffering off;
|
||||
proxy_read_timeout 15m;
|
||||
send_timeout 15m;
|
||||
access_log off;
|
||||
}
|
||||
|
||||
# The voice provider can call only this signed, conversation-scoped tool.
|
||||
# Do not expose the rest of the /internal namespace.
|
||||
location = /internal/v1/tools/memory-search {
|
||||
@@ -85,6 +95,30 @@ server {
|
||||
proxy_buffering off;
|
||||
}
|
||||
|
||||
# Dify workflow console; authenticated by its own console session.
|
||||
location = /dify { return 302 /apps; }
|
||||
# Keep Dify session refresh separate from the platform OIDC callback.
|
||||
location = /auth/refresh {
|
||||
proxy_pass http://story-dify-nginx:80;
|
||||
proxy_buffering off;
|
||||
proxy_read_timeout 900s;
|
||||
}
|
||||
location ~ ^/(?:apps|app|signin|init|install|reset-password|activate|datasets|tools|plugins|explore|snippets|agents|_next|logo|images|vs|marketplace|in-site-message|screenshots|education)(?:/|$) {
|
||||
proxy_pass http://story-dify-nginx:80;
|
||||
proxy_buffering off;
|
||||
proxy_read_timeout 900s;
|
||||
}
|
||||
location ^~ /console/api {
|
||||
proxy_pass http://story-dify-nginx:80;
|
||||
proxy_buffering off;
|
||||
proxy_read_timeout 900s;
|
||||
}
|
||||
location ^~ /v1/ {
|
||||
proxy_pass http://story-dify-nginx:80;
|
||||
proxy_buffering off;
|
||||
proxy_read_timeout 900s;
|
||||
}
|
||||
|
||||
location / {
|
||||
proxy_pass $web_backend;
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user