# hyb-oa 反向代理示例（Nginx）
#
# 说明：
# - 适用于单机试运行：Nginx(443) -> hyb-oa server(3000)
# - server 内已启用 `trustProxy: true`，会读取 X-Forwarded-*。
#
server {
  listen 80;
  server_name oa.example.com;

  # 试运行可以先走 http；生产建议配 TLS 并把 COOKIE_SECURE=true
  location / {
    proxy_pass http://127.0.0.1:3000;
    proxy_http_version 1.1;
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;
    proxy_set_header X-Forwarded-Host $host;
  }
}