release(main): 同步 dev 最新候选改动

nginx/nginx.dev.conf

@@ -31,15 +31,30 @@ http {
         server frontend-dev:5173 resolve;
     }
 
+    upstream onlyoffice {
+        zone onlyoffice 64k;
+        server onlyoffice:80 resolve;
+    }
+
     map $http_upgrade $connection_upgrade {
         default upgrade;
         "" close;
     }
 
+    map $http_x_forwarded_proto $onlyoffice_scheme {
+        default $http_x_forwarded_proto;
+        "" $scheme;
+    }
+
+    map $http_x_forwarded_host $onlyoffice_host {
+        default $http_x_forwarded_host;
+        "" $http_host;
+    }
+
     server {
         listen 80;
         server_name _;
-        client_max_body_size 20m;
+        client_max_body_size 50m;
 
         location = /favicon.ico {
             root /usr/share/nginx/html;
@@ -56,6 +71,19 @@ http {
             return 404;
         }
 
+        location = /onlyoffice-host.html {
+            proxy_pass http://frontend_dev;
+            proxy_set_header Host $host;
+            add_header Cache-Control "no-store" always;
+            add_header Content-Security-Policy "default-src 'none'; script-src 'self'; connect-src 'self'; img-src 'self' data: blob:; style-src 'self' 'unsafe-inline'; frame-src 'self' blob:; frame-ancestors 'self' tauri: http://tauri.localhost https://tauri.localhost http://localhost:* http://127.0.0.1:*; object-src 'none'; base-uri 'none'; form-action 'none'" always;
+        }
+
+        location = /onlyoffice-host.js {
+            proxy_pass http://frontend_dev;
+            proxy_set_header Host $host;
+            add_header Cache-Control "no-store" always;
+        }
+
         location /api/ {
             proxy_pass http://backend;
             proxy_set_header Host $host;
@@ -64,6 +92,19 @@ http {
             proxy_set_header X-Forwarded-Proto $scheme;
         }
 
+        location /onlyoffice/ {
+            proxy_pass http://onlyoffice/;
+            proxy_http_version 1.1;
+            proxy_set_header Upgrade $http_upgrade;
+            proxy_set_header Connection $connection_upgrade;
+            proxy_set_header Host $http_host;
+            proxy_set_header X-Forwarded-Host $onlyoffice_host/onlyoffice;
+            proxy_set_header X-Forwarded-Proto $onlyoffice_scheme;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_read_timeout 3600s;
+            proxy_send_timeout 3600s;
+        }
+
         location /health {
             proxy_pass http://backend;
             proxy_set_header Host $host;
@@ -72,6 +113,14 @@ http {
             proxy_set_header X-Forwarded-Proto $scheme;
         }
 
+        location = /readyz {
+            proxy_pass http://backend;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+        }
+
         location / {
             proxy_pass http://frontend_dev;
             proxy_http_version 1.1;