证书

docker/nginx/volumes/conf.d/default.conf

@@ -29,9 +29,28 @@ upstream workcase-wechat {
     server urban-lifeline-web:8004;
 }
 
+# HTTP 重定向到 HTTPS
 server {
     listen 80;
     server_name localhost;
+    return 301 https://$host$request_uri;
+}
+
+# HTTPS 服务
+server {
+    listen 443 ssl;
+    server_name localhost;
+
+    # SSL 证书配置
+    ssl_certificate /etc/nginx/cert/server.crt;
+    ssl_certificate_key /etc/nginx/cert/server.key;
+    
+    # SSL 安全配置
+    ssl_protocols TLSv1.2 TLSv1.3;
+    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-CHACHA20-POLY1305;
+    ssl_prefer_server_ciphers on;
+    ssl_session_cache shared:SSL:10m;
+    ssl_session_timeout 10m;
 
     # 健康检查端点
     location /health {