ssl_prefer_server_ciphers on;
    ssl_session_timeout 30m;
    ssl_session_cache   shared:GiteeSSL:10m; 
    ssl_buffer_size     4k;
    ssl_early_data      on;

    ssl_protocols TLSv1.2 TLSv1.3;
    ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CHACHA20-POLY1305;
    ssl_prefer_server_ciphers off;

    ignore_invalid_headers off;
    chunked_transfer_encoding off;
    client_max_body_size 0;

    proxy_set_header Upgrade $http_upgrade;
    #proxy_set_header Connection $connection_upgrade;
    proxy_set_header Host $host;
    proxy_set_header X-Forwarded-Proto $scheme;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header Connection "";

    proxy_connect_timeout 300;
    proxy_redirect off;
    proxy_http_version 1.1;
    proxy_buffering off;
    proxy_request_buffering off;


    location /{ proxy_pass http://gitee_portal; }



upstream cib_dev_code_servers {
    server 192.168.32.10:30050;

}

server {

    listen 30050;
    proxy_pass cib_dev_code_servers;

    access_log  /var/log/nginx/access/stream_cib_dev_code.log basic;
    error_log /var/log/nginx/error/stream_cib_dev_code.log;

}



stream {
    # 日志配置，记录详细的代理信息
    log_format basic '[$time_local]  $proxy_protocol_addr $remote_addr '
                                 '$protocol $status $bytes_sent $bytes_received '
                                 '$upstream_addr $upstream_bytes_sent $upstream_bytes_received '
                                 '$session_time';

    # 代理配置
    proxy_buffer_size 32k;
    proxy_connect_timeout 120s;
    proxy_timeout 120s;
    proxy_next_upstream on;
    proxy_next_upstream_tries 3;
    proxy_next_upstream_timeout 120s;
    proxy_socket_keepalive on;

    # 启用 PROXY Protocol
    proxy_protocol on;
    # 包含其他配置文件
    include stream/*.conf;
}