Files
MyGoNavi/deploy/download-mirror/gatewaysentry-nginx.conf
Syngnat 83952abad4 🔧 chore(release): 将下载镜像迁移至 Gatewaysentry
- 将 stable 与 dev 的应用和驱动镜像改为 SSH/rsync 发布到 Gatewaysentry
- 新增发布载荷校验、原子切换、版本清理及 Nginx 部署工具
- Windows 发布保留原始 EXE 并增加普通 Portable ZIP,移除 Windows UPX
- 删除 Cloudflare R2 上传保留脚本并统一镜像探测命名
2026-07-23 13:08:26 +08:00

88 lines
2.6 KiB
Plaintext

server {
listen 80;
listen [::]:80;
server_name download.syngnat.top;
root /srv/gonavi-downloads;
access_log /var/log/nginx/gonavi-download-access.log;
error_log /var/log/nginx/gonavi-download-error.log warn;
client_max_body_size 1m;
autoindex off;
etag on;
max_ranges 8;
location = /health.txt {
try_files $uri =404;
default_type text/plain;
add_header Cache-Control "no-store" always;
add_header X-Content-Type-Options "nosniff" always;
}
location ~ ^/(?:gonavi|drivers)/(?:dev/)?releases/latest/ {
try_files $uri =404;
limit_except GET { deny all; }
add_header Cache-Control "no-store, no-cache, must-revalidate" always;
add_header Pragma "no-cache" always;
add_header X-Content-Type-Options "nosniff" always;
}
location ~ ^/(?:gonavi|drivers)/(?:dev/)?releases/download/ {
try_files $uri =404;
limit_except GET { deny all; }
add_header Cache-Control "public, max-age=31536000, immutable" always;
add_header X-Content-Type-Options "nosniff" always;
}
location / {
add_header Cache-Control "no-store" always;
return 404;
}
}
server {
listen 127.0.0.1:9443 ssl;
listen [::1]:9443 ssl;
server_name download.syngnat.top;
ssl_certificate /etc/nginx/certs/download.syngnat.top.crt;
ssl_certificate_key /etc/nginx/certs/download.syngnat.top.key;
ssl_protocols TLSv1.2 TLSv1.3;
root /srv/gonavi-downloads;
access_log /var/log/nginx/gonavi-download-access.log;
error_log /var/log/nginx/gonavi-download-error.log warn;
client_max_body_size 1m;
autoindex off;
etag on;
max_ranges 8;
location = /health.txt {
try_files $uri =404;
default_type text/plain;
add_header Cache-Control "no-store" always;
add_header X-Content-Type-Options "nosniff" always;
}
location ~ ^/(?:gonavi|drivers)/(?:dev/)?releases/latest/ {
try_files $uri =404;
limit_except GET { deny all; }
add_header Cache-Control "no-store, no-cache, must-revalidate" always;
add_header Pragma "no-cache" always;
add_header X-Content-Type-Options "nosniff" always;
}
location ~ ^/(?:gonavi|drivers)/(?:dev/)?releases/download/ {
try_files $uri =404;
limit_except GET { deny all; }
add_header Cache-Control "public, max-age=31536000, immutable" always;
add_header X-Content-Type-Options "nosniff" always;
}
location / {
add_header Cache-Control "no-store" always;
return 404;
}
}