e409f967a9
- admin-server 新增 GET/POST /api/wallpaper： multipart 上传（png/jpg/webp/gif/svg，上限 8MB）或 JSON 直接给 URL， 服务端把一段带标记的 CSS 写入 appConfig.customCss（标记块可反复替换， 不碰主题其余部分），并记录 appConfig.wallpaper / wallpaperDim。 - 上传的图片落在 data 卷 wallpapers/，nginx 以 /wallpapers/ 提供 （长缓存，文件名带时间戳）。 - 遮罩：壁纸上面铺一层可调强度的白色 linear-gradient，默认 0.45， 否则玻璃卡片上的文字在照片上会读不清。 - 安全：URL 校验只允许 / 或 http(s):// 开头且不含引号/括号/换行， 避免注入到 CSS；类型判定走正文特征而非文件名。 - admin UI 增加「外观」区块：上传/填 URL/遮罩滑块/应用/移除 + 预览。 实测：上传 → /wallpapers/wall-*.png，web 200 image/png， body background-image 为遮罩+图片，移除后恢复默认渐变。
101 lines
3.6 KiB
Nginx Configuration File
101 lines
3.6 KiB
Nginx Configuration File
worker_processes auto;
|
||
pid /run/nginx.pid;
|
||
error_log /var/log/nginx/error.log warn;
|
||
|
||
events {
|
||
worker_connections 1024;
|
||
}
|
||
|
||
http {
|
||
include /etc/nginx/mime.types;
|
||
default_type application/octet-stream;
|
||
sendfile on;
|
||
keepalive_timeout 65;
|
||
client_max_body_size 0;
|
||
gzip on;
|
||
gzip_types text/plain text/css application/json application/javascript text/xml;
|
||
|
||
# 全部服务通过统一 8080 端口对外
|
||
server {
|
||
listen 8080;
|
||
server_name _;
|
||
|
||
# Dashy 静态文件
|
||
root /app/dashy;
|
||
index index.html;
|
||
|
||
# ===== SearXNG 反向代理 =====
|
||
# SearXNG 路由是 /search（无尾斜杠），/search/ 会 404，故 rewrite 去掉尾斜杠。
|
||
location ~ ^/search/?$ {
|
||
rewrite ^/search/?$ /search break;
|
||
proxy_pass http://127.0.0.1:8888;
|
||
proxy_set_header Host $host;
|
||
proxy_set_header X-Real-IP $remote_addr;
|
||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||
proxy_set_header X-Forwarded-Proto $scheme;
|
||
}
|
||
# SearXNG 静态资源（主题/前端脚本，页面上以 /static/... 绝对路径引用）
|
||
location /static/ {
|
||
proxy_pass http://127.0.0.1:8888;
|
||
proxy_set_header Host $host;
|
||
proxy_set_header X-Real-IP $remote_addr;
|
||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||
proxy_set_header X-Forwarded-Proto $scheme;
|
||
}
|
||
# 其他 SearXNG 页面/接口（结果页内的链接会引用这些根路径）
|
||
location ~ ^/(autocompleter|preferences|stats|about|donate|opensearch.xml|image_proxy|translations)/? {
|
||
proxy_pass http://127.0.0.1:8888;
|
||
proxy_set_header Host $host;
|
||
proxy_set_header X-Real-IP $remote_addr;
|
||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||
proxy_set_header X-Forwarded-Proto $scheme;
|
||
}
|
||
|
||
# History API（内部 3004）
|
||
location /api/history/ {
|
||
proxy_pass http://127.0.0.1:3004/;
|
||
proxy_set_header Host $host;
|
||
proxy_set_header X-Real-IP $remote_addr;
|
||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||
proxy_set_header X-Forwarded-Proto $scheme;
|
||
}
|
||
|
||
# Admin WebUI（内部 3005）
|
||
location /admin/ {
|
||
proxy_pass http://127.0.0.1:3005/;
|
||
proxy_set_header Host $host;
|
||
proxy_set_header X-Real-IP $remote_addr;
|
||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||
proxy_set_header X-Forwarded-Proto $scheme;
|
||
}
|
||
|
||
# conf.yml 由 nginx 直接提供（从 data volume 读取）
|
||
location = /conf.yml {
|
||
alias /app/data/conf.yml;
|
||
}
|
||
|
||
# 可选的扩展商店链接：部署方把 extension-store.json 放进 data 卷即可，
|
||
# /extension/install.html 会读取它并显示「一键安装」按钮。
|
||
location = /extension/store.json {
|
||
alias /app/data/extension-store.json;
|
||
add_header Cache-Control "no-store";
|
||
}
|
||
|
||
# item-icons 从 data volume 提供
|
||
location /item-icons/ {
|
||
alias /app/data/item-icons/;
|
||
}
|
||
|
||
# 自定义壁纸（后台「外观」上传，目录也在 data 卷）
|
||
location /wallpapers/ {
|
||
alias /app/data/wallpapers/;
|
||
add_header Cache-Control "public, max-age=31536000, immutable";
|
||
}
|
||
|
||
# Dashy SPA 路由兜底
|
||
location / {
|
||
try_files $uri $uri/ /index.html;
|
||
}
|
||
}
|
||
}
|