upstream sound_frontend { server 127.0.0.1:12200; keepalive 32; } # 프론트엔드 (메인 도메인) server { server_name o2sound.ai.kr www.o2sound.ai.kr localhost 127.0.0.1; # 프론트엔드 location / { proxy_pass http://sound_frontend; proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection 'upgrade'; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $scheme; proxy_cache_bypass $http_upgrade; } # listen 443 ssl; # managed by Certbot # ssl_certificate /etc/letsencrypt/live/o2sound.ai.kr/fullchain.pem; # managed by Certbot # ssl_certificate_key /etc/letsencrypt/live/o2sound.ai.kr/privkey.pem; # managed by Certbot # include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot # ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot } upstream sound_backend { server 127.0.0.1:12300; # 또는 내부 포트 keepalive 32; } # 백엔드 API (api 서브도메인) server { server_name api.o2sound.ai.kr; # 최대 업로드 크기 (비디오 업로드용) client_max_body_size 500M; # 백엔드 API (FastAPI) location / { proxy_pass http://sound_backend; proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection 'upgrade'; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $scheme; proxy_cache_bypass $http_upgrade; # 타임아웃 설정 (긴 작업 대응) proxy_connect_timeout 600; proxy_send_timeout 600; proxy_read_timeout 600; send_timeout 600; } # WebSocket 지원 (진행률 조회용) location /ws { proxy_pass http://127.0.0.1:12360; proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_read_timeout 86400; } # listen 443 ssl; # managed by Certbot # ssl_certificate /etc/letsencrypt/live/api.o2sound.ai.kr/fullchain.pem; # managed by Certbot # ssl_certificate_key /etc/letsencrypt/live/api.o2sound.ai.kr/privkey.pem; # managed by Certbot # include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot # ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot } server { if ($host = www.o2sound.ai.kr) { return 301 https://$host$request_uri; } # managed by Certbot if ($host = o2sound.ai.kr) { return 301 https://$host$request_uri; } # managed by Certbot listen 80; server_name o2sound.ai.kr www.o2sound.ai.kr; return 404; # managed by Certbot } server { if ($host = api.o2sound.ai.kr) { return 301 https://$host$request_uri; } # managed by Certbot listen 80; server_name api.o2sound.ai.kr; return 404; # managed by Certbot }