server { listen 80; listen 443 ssl http2; #ssl on; ssl_certificate ssl/xinyueyouxi.com.pem; ssl_certificate_key ssl/xinyueyouxi.com.key; ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_ciphers HIGH:!RC4:!MD5:!aNULL:!eNULL:!NULL:!DH:!EDH:!EXP:+MEDIUM; ssl_prefer_server_ciphers on; ssl_session_timeout 5m; add_header 'Access-Control-Allow-Origin' '*'; add_header 'Access-Control-Allow-Credentials' 'true' ; add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS'; add_header 'Access-Control-Allow-Headers' 'Authorization,Content-Type,Accept,Origin,User-Agent,DNT,Cache-Control,X-Mx-ReqToken,Keep-Alive,X-Requested-With,Pragma,Cache-Control,If-Modified-Since'; charset utf-8; server_name api-debug.xinyueyouxi.com; location / { proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header Remote_addr $remote_addr; proxy_set_header X-Real_IP $remote_addr; proxy_set_header Host $host; if ($request_method = 'OPTIONS') { return 200; } proxy_pass http://sharesrv2-svc:9092; } location /favicon.ico { log_not_found off; access_log off; } }