Hamza/tripz-llc
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ضبط بورتات الدوكر لتفادي التعارض مع siro

Browse Source
This commit is contained in:
Hamza-Ayed
2026-07-29 02:47:03 +03:00
parent d34550e1ca
commit 5dcdcd8a3a
2 changed files with 25 additions and 25 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docker/nginx/siro-sockets-tls.conf → docker/nginx/tripz-sockets-tls.conf
+17 -17
View File
@@ -2,11 +2,11 @@
# ‏إنهاء TLS أمام سوكيتات Workerman
# ══════════════════════════════════════════════════════════════════
# ‏يُنسَخ على **المضيف** لا داخل الحاويات:
# /etc/nginx/sites-enabled/siro-sockets-tls.conf
# /etc/nginx/sites-enabled/tripz-sockets-tls.conf
#
# ‏المشكلة التي يحلّها: حاويتا السوكيت تفتحان المنفذين نصاً صريحاً
# (‏new SocketIO(2020)‎ و ‎new SocketIO(3030)‎ بلا سياق SSL)، بينما
# ‏التطبيقان يطلبان ‎https://jordan-siro.intaleqapp.com:2020‎ و ‎:3030‎.
# ‏التطبيقان يطلبان ‎https://api.tripz-egypt.com:2020‎ و ‎:3030‎.
# ‏مصافحة TLS ضد منفذ لا يتكلم TLS تتجمّد حتى المهلة، فيظهر في اللوج:
# Socket Connect Error: timeout
#
@@ -22,7 +22,7 @@
# nginx: [emerg] unknown directive "http2"
# ‏اسم مميّز يتفادى التضارب مع أي map باسم ‎$connection_upgrade‎ قد يكون
# ‏CloudPanel معرِّفه أصلاً في سياق http.
map $http_upgrade $siro_connection_upgrade {
map $http_upgrade $tripz_connection_upgrade {
default upgrade;
'' close;
}
@@ -32,27 +32,27 @@ server {
listen 2020 ssl;
listen [::]:2020 ssl;
server_name jordan-siro.intaleqapp.com;
server_name api.tripz-egypt.com;
# ‏عدّل المسارين إن كانت شهادتك في مكان آخر — تحقّق بالأمر:
# grep -rh ssl_certificate /etc/nginx/sites-enabled/ | sort -u
ssl_certificate /etc/nginx/ssl-certificates/jordan-siro.intaleqapp.com.crt;
ssl_certificate_key /etc/nginx/ssl-certificates/jordan-siro.intaleqapp.com.key;
ssl_certificate /etc/nginx/ssl-certificates/api.tripz-egypt.com.crt;
ssl_certificate_key /etc/nginx/ssl-certificates/api.tripz-egypt.com.key;
ssl_protocols TLSv1.2 TLSv1.3;
ssl_session_cache shared:SiroSock:10m;
ssl_session_cache shared:TripzSock:10m;
ssl_session_timeout 1d;
# ‏لا سجلّ وصول: نبضات GPS تصل كل ثوانٍ وتُغرق القرص
access_log off;
error_log /var/log/nginx/siro-socket-driver-error.log warn;
error_log /var/log/nginx/tripz-socket-driver-error.log warn;
location / {
proxy_pass http://127.0.0.1:12020;
proxy_pass http://127.0.0.1:12022;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $siro_connection_upgrade;
proxy_set_header Connection $tripz_connection_upgrade;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
@@ -75,24 +75,24 @@ server {
listen 3030 ssl;
listen [::]:3030 ssl;
server_name jordan-siro.intaleqapp.com;
server_name api.tripz-egypt.com;
ssl_certificate /etc/nginx/ssl-certificates/jordan-siro.intaleqapp.com.crt;
ssl_certificate_key /etc/nginx/ssl-certificates/jordan-siro.intaleqapp.com.key;
ssl_certificate /etc/nginx/ssl-certificates/api.tripz-egypt.com.crt;
ssl_certificate_key /etc/nginx/ssl-certificates/api.tripz-egypt.com.key;
ssl_protocols TLSv1.2 TLSv1.3;
ssl_session_cache shared:SiroSock:10m;
ssl_session_cache shared:TripzSock:10m;
ssl_session_timeout 1d;
access_log off;
error_log /var/log/nginx/siro-socket-passenger-error.log warn;
error_log /var/log/nginx/tripz-socket-passenger-error.log warn;
location / {
proxy_pass http://127.0.0.1:13030;
proxy_pass http://127.0.0.1:13032;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $siro_connection_upgrade;
proxy_set_header Connection $tripz_connection_upgrade;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;