Nextcloud

upstream nextcloud {
    server localhost:8088;
}

server 
{
    listen 80;
    server_name cloud.fscloude.cn;
    #rewrite ^(.*)$ https://cloud.fscloude.cn:443$request_uri;
    return 301 https://$server_name$request_uri;
}

server {
    listen 443 ssl http2;
    server_name cloud.fscloude.cn;
  
    access_log  /opt/nextcloud/logs/nextcloud_access.log  reports;
    error_log   /opt/nextcloud/logs/nextcloud_error.log;

    ssl_certificate     /opt/nextcloud/cerl/cloud.fscloude.cn.crt;
    ssl_certificate_key /opt/nextcloud/cerl/cloud.fscloude.cn.key;

    #腾讯文档配置方式
    ssl_session_timeout 5m;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2; 
    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
    ssl_prefer_server_ciphers on;


    ## 反向代理时，隐藏上游服务器信息
    #proxy_hide_header Referrer-Policy;
    #add_header Referrer-Policy strict-origin-when-cross-origin;
    
    client_max_body_size 1024M;

    location /.well-known/carddav {
        return 301 $scheme://$server_name/remote.php/dav;
    }
    
    location /.well-known/caldav {
        return 301 $scheme://$server_name/remote.php/dav;
    }

    location / {
        add_header Access-Control-Allow-Origin *;
        add_header Access-Control-Allow-Methods 'GET, POST, OPTIONS';
        add_header Strict-Transport-Security "max-age=15552000; includeSubDomains; preload";
        #add_header Access-Control-Allow-Headers 'DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization';

        proxy_pass http://nextcloud;
        proxy_set_header Host $http_host_with_default;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection $connection_upgrade;
        proxy_set_header X-Forwarded-Proto https;
        proxy_set_header X-Forwarded-Ssl on;
    }
    
    #error_page   500 502 503 504  /50x.html;
    #location = /50x.html {
    #   root   html;
    #}
}