技术栈与部署

# /etc/nginx/sites-available/ruyi.conf
server {
  listen 443 ssl http2;
  server_name community.example.com;

  ssl_certificate     /etc/letsencrypt/live/community.example.com/fullchain.pem;
  ssl_certificate_key /etc/letsencrypt/live/community.example.com/privkey.pem;

  client_max_body_size 20m;          # 图片/短视频上传
  gzip on; gzip_types text/css application/javascript application/json image/svg+xml;

  # 静态产物与媒体直接由 Nginx 托管，不经过 Node
  location /_nuxt/ { alias /srv/ruyi/web/.output/public/_nuxt/; expires 1y; add_header Cache-Control "public, immutable"; }
  location /media/  { alias /srv/ruyi/media/;        expires 30d; add_header Cache-Control "public"; }

  # API 与限流
  location /api/ {
    limit_req zone=api burst=20 nodelay;
    proxy_pass http://127.0.0.1:8080;
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Request-Id $request_id;   # 请求 ID 贯穿全链路
  }

  # 其余交给 Nuxt SSR
  location / {
    proxy_pass http://127.0.0.1:3000;
    proxy_http_version 1.1;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection "upgrade";
    proxy_set_header Host $host;
    proxy_set_header X-Request-Id $request_id;
  }
}
limit_req_zone $binary_remote_addr zone=api:10m rate=30r/s;