server {
    listen 80;
    server_name _;
    charset utf-8;

    root  /usr/share/nginx/outside;
    index index.html;

    # 与后端 multipart 上限(500MB)保持一致
    client_max_body_size 500m;

    # /api/xxx -> 后端 /xxx（去掉 /api 前缀，与 vite dev 代理行为一致）
    location /api/ {
        proxy_pass http://app-ow:8080/;
        proxy_http_version 1.1;
        # 必须保留端口($http_host)：后端 getRootDomain 对无端口的 localhost/IP 会抛
        # IllegalStateException 导致 /login 成功回调 500（带端口时按非法域名返回 null，Cookie 不带 domain）
        proxy_set_header Host              $http_host;
        proxy_set_header X-Real-IP         $remote_addr;
        proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;
        proxy_set_header Upgrade           $http_upgrade;
        proxy_set_header Connection        "upgrade";
        proxy_read_timeout  600s;
        proxy_send_timeout  600s;
        proxy_request_buffering off;
    }

    # SPA：hash 路由，静态资源找不到时回落 index.html
    location / {
        try_files $uri $uri/ /index.html;
    }

    location ~* \.(js|mjs|css|woff2?|ttf|png|jpe?g|gif|svg|ico)$ {
        expires 7d;
        access_log off;
    }
}