read Nexus credentials from shared Vault path

.drone.yml

@@ -1,22 +1,167 @@
 kind: pipeline
 name: default
 
-steps:
-#  docker 打包
-  - name: docker
-    image: plugins/docker
-    settings:
-      context: ./
-      dockerfile: ./Dockerfile
-      username:
-        from_secret: docker_username
-      password:
-        from_secret: docker_password
-      registry: https://registry.cn-hangzhou.aliyuncs.com
-      repo:  registry.cn-hangzhou.aliyuncs.com/loghub/nginx
-      tags:
-        - 1.29.4
+clone:
+  retries: 3
 
-volumes:
-  - name: ruoyi_cache
-    temp: {}
+concurrency:
+  limit: 1
+
+steps:
+  # 拉取并打包 Shopee WES
+  - name: deploy
+    image: gradle:9-alpine
+    pull: if-not-exists
+    environment:
+      DOCKER_CONFIG: /home/gradle/.docker
+      JIB_USERNAME:
+        from_secret: docker_username
+      JIB_PASSWORD:
+        from_secret: docker_password
+      NEXUS_USERNAME:
+        from_secret: nexus_username
+      NEXUS_PASSWORD:
+        from_secret: nexus_password
+      NPM_USERNAME:
+        from_secret: nexus_username
+      NPM_PASSWORD:
+        from_secret: nexus_password
+    commands:
+      - |
+        if grep -qs ' /cache ' /proc/self/mountinfo && [ -w /cache ]; then
+          export GRADLE_USER_HOME=/cache/wes-loghub/gradle-9.6.1
+          export WES_WORKSPACE=/cache/wes-loghub/workspace
+          mkdir -p "$GRADLE_USER_HOME" "$(dirname "$WES_WORKSPACE")"
+          echo "===== persistent Gradle cache enabled: $GRADLE_USER_HOME ====="
+          echo "===== persistent WES workspace enabled: $WES_WORKSPACE ====="
+        else
+          export GRADLE_USER_HOME=/opt/gradle-user-home
+          export WES_WORKSPACE=/drone/src/wes-loghub
+          echo "===== WARNING: /cache is not mounted; using ephemeral Gradle cache ====="
+        fi
+      - git --version
+      - |
+        test -n "${NEXUS_USERNAME:-${NPM_USERNAME:-}}" || {
+          echo "Nexus username secret is missing"
+          exit 1
+        }
+        test -n "${NEXUS_PASSWORD:-${NPM_PASSWORD:-}}" || {
+          echo "Nexus password secret is missing"
+          exit 1
+        }
+      - |
+        if [ -d "$WES_WORKSPACE/.git" ]; then
+          echo "===== updating persistent WES workspace ====="
+          time git -C "$WES_WORKSPACE" fetch \
+            --depth 1 \
+            --no-tags \
+            https://zwzeng:glpat-nuzkafsdgYKM0KAgvpL4Bm86MQp1OnkH.01.0w0tr4xa1@git.ittx.com.cn/wms/wes-loghub.git \
+            proj-shopee-test
+          git -C "$WES_WORKSPACE" checkout -B proj-shopee-test FETCH_HEAD
+        else
+          echo "===== creating persistent WES workspace ====="
+          time git clone \
+            -b proj-shopee-test \
+            --depth 1 \
+            --no-tags \
+            https://zwzeng:glpat-nuzkafsdgYKM0KAgvpL4Bm86MQp1OnkH.01.0w0tr4xa1@git.ittx.com.cn/wms/wes-loghub.git \
+            "$WES_WORKSPACE"
+        fi
+        git -C "$WES_WORKSPACE" remote set-url origin https://git.ittx.com.cn/wms/wes-loghub.git
+      - git -C "$WES_WORKSPACE" log -1 --format='===== WES commit %H %s ====='
+      - cd "$WES_WORKSPACE"
+      - |
+        (
+          gradle_pids() {
+            for proc_path in /proc/[0-9]*; do
+              [ -r "$proc_path/cmdline" ] || continue
+              proc_cmd=$(tr '\0' ' ' < "$proc_path/cmdline" 2>/dev/null)
+              case "$proc_cmd" in
+                *GradleDaemon*|*GradleWorkerMain*) basename "$proc_path" ;;
+              esac
+            done
+          }
+          heartbeat_count=0
+          while true; do
+            heartbeat_count=$((heartbeat_count + 1))
+            echo "===== build heartbeat $(date -Iseconds) ====="
+            echo "load: $(cat /proc/loadavg)"
+            awk '/MemTotal|MemAvailable/ { printf "%s %s kB  ", $1, $2 } END { print "" }' /proc/meminfo
+            echo "===== active Gradle tasks ====="
+            cat /tmp/gradle-active-tasks 2>/dev/null || echo "none"
+            echo "===== top processes ====="
+            if command -v top >/dev/null 2>&1; then
+              top -b -n 1 2>/dev/null | head -n 20
+            else
+              ps -ef
+            fi
+            echo "===== Gradle JVM I/O ====="
+            for pid in $(gradle_pids); do
+              echo "--- pid=$pid cmd=$(tr '\0' ' ' < /proc/$pid/cmdline 2>/dev/null)"
+              awk '/read_bytes|write_bytes|cancelled_write_bytes/ { printf "%s ", $0 } END { print "" }' "/proc/$pid/io" 2>/dev/null || true
+            done
+            if [ $((heartbeat_count % 15)) -eq 0 ]; then
+              echo "===== Gradle JVM thread dump after $((heartbeat_count * 60)) seconds ====="
+              for pid in $(gradle_pids); do
+                jcmd "$pid" Thread.print -l || true
+              done
+            fi
+            sleep 60
+          done
+        ) &
+        echo $! > /tmp/build-heartbeat.pid
+        trap 'kill "$(cat /tmp/build-heartbeat.pid)" 2>/dev/null || true' EXIT
+      - >
+        time gradle jib -stacktrace
+        --init-script=/drone/src/gradle-repositories.init.gradle
+        --init-script=/drone/src/gradle-diagnostics.init.gradle
+        --no-daemon
+        --info
+        --console=plain
+        --warning-mode=summary
+        --build-cache
+        --configure-on-demand
+        --parallel
+        --max-workers=8
+        -x test 
+        -PdockerBuild=true  
+        -Dcybertrans.idp.enabled=false 
+        -Djib.disableUpdateChecks=true
+        -Djib.baseImageCache=$GRADLE_USER_HOME/caches/jib/base
+        -Djib.applicationCache=$GRADLE_USER_HOME/caches/jib/application
+        -Djib.from.image=registry.cn-hangzhou.aliyuncs.com/ttx/amazoncorretto:25-alpine3.23-jdk
+        -Djib.from.auth.username=$JIB_USERNAME
+        -Djib.from.auth.password=$JIB_PASSWORD
+        -Djib.to.auth.username=$JIB_USERNAME
+        -Djib.to.auth.password=$JIB_PASSWORD
+        -Djib.to.image=registry.cn-hangzhou.aliyuncs.com/loghub/wes:shopee-wes-test-3
+        -Djib.to.tags=shopee-wes-test-3
+        -Djib.container.entrypoint='INHERIT'
+        -Djib.container.args='java,-Dfile.encoding=utf-8,-Dspring.profiles.active=k8s,-Dserver.port=9210,-cp,/app/resources:/app/classes:/app/libs/*,com.ittx.Application'
+      - >
+        kill "$(cat /tmp/build-heartbeat.pid)" 2>/dev/null || true
+
+---
+kind: secret
+name: docker_username
+get:
+  path: drone/data/docker_username
+  name: docker_username
+---
+kind: secret
+name: docker_password
+get:
+  path: drone/data/docker_password
+  name: docker_password
+---
+kind: secret
+name: nexus_username
+get:
+  path: drone/data/nexus
+  name: nexus_username
+---
+kind: secret
+name: nexus_password
+get:
+  path: drone/data/nexus
+  name: nexus_password

.gitignore

@@ -0,0 +1 @@
+.idea/

Dockerfile

@@ -1,162 +0,0 @@
-FROM alpine:3.23
-
-ENV LANG=en_US.UTF-8
-ENV NGINX_VERSION=1.29.4
-ENV NGX_DEVEL_KIT_VERSION=0.3.4
-ENV LUA_NGINX_MODULE_VERSION=0.10.29
-ENV HEADERS_MORE_VERSION=0.39
-ENV LUA_RESTY_CORE=0.1.32
-ENV LUA_RESTY_LRUCACHE=0.15
-ENV LUA_RESTY_UPSTREAM_HEALTHCHECK=0.08
-
-
-RUN set -eux; \
-	apk update; \
-    apk upgrade ;
-
-# # Install LUAJIT and LUARestyCore
-# RUN apk update && apk add --no-cache luajit lua-resty-core
-
-RUN set -eux; \
-    CONFIG="\
-		--prefix=/etc/nginx \
-		--sbin-path=/usr/sbin/nginx \
-		--conf-path=/etc/nginx/nginx.conf \
-		--error-log-path=/var/log/nginx/error.log \
-		--http-log-path=/var/log/nginx/access.log \
-		--pid-path=/var/run/nginx.pid \
-		--lock-path=/var/run/nginx.lock \
-		--http-client-body-temp-path=/var/cache/nginx/client_temp \
-		--http-proxy-temp-path=/var/cache/nginx/proxy_temp \
-		--http-fastcgi-temp-path=/var/cache/nginx/fastcgi_temp \
-		--http-uwsgi-temp-path=/var/cache/nginx/uwsgi_temp \
-		--http-scgi-temp-path=/var/cache/nginx/scgi_temp \
-		--user=nginx \
-		--group=nginx \
-		--with-http_ssl_module \
-		--with-http_realip_module \
-		--with-http_addition_module \
-		--with-http_sub_module \
-		--with-http_dav_module \
-		--with-http_flv_module \
-		--with-http_mp4_module \
-		--with-http_gunzip_module \
-		--with-http_gzip_static_module \
-		--with-http_random_index_module \
-		--with-http_secure_link_module \
-		--with-http_stub_status_module \
-		--with-http_auth_request_module \
-		--with-threads \
-		--with-stream \
-		--with-stream_ssl_module \
-		--with-http_slice_module \
-		--with-mail \
-		--with-mail_ssl_module \
-		--with-file-aio \
-		--with-http_v2_module \
-		--with-ld-opt='-Wl,-rpath,/usr/lib' \
-        --add-module=/tmp/ngx_devel_kit-${NGX_DEVEL_KIT_VERSION} \
-        --add-module=/tmp/lua-nginx-module-${LUA_NGINX_MODULE_VERSION} \
-        --add-module=/tmp/headers-more-nginx-module-${HEADERS_MORE_VERSION} \
-	"\
-	&& addgroup -S nginx \
-	&& adduser -D -S -h /var/cache/nginx -s /sbin/nologin -G nginx nginx \
-	&& apk add --no-cache --virtual .build-deps \
-		gcc \
-		libc-dev \
-		make \
-		openssl-dev \
-		pcre-dev \
-		zlib-dev \
-		linux-headers \
-		curl \
-		gnupg \
-		luajit-dev \
-        pax-utils \
-	&& export LUAJIT_LIB=/usr/lib \
-	&& export LUAJIT_INC=/usr/include/luajit-2.1 \
-	&& curl -fSL https://github.com/simpl/ngx_devel_kit/archive/v${NGX_DEVEL_KIT_VERSION}.tar.gz -o /tmp/ndk.tar.gz \
-	&& tar -xvf /tmp/ndk.tar.gz -C /tmp \
-	&& curl -fSL https://github.com/openresty/lua-nginx-module/archive/v${LUA_NGINX_MODULE_VERSION}.tar.gz -o /tmp/lua-nginx.tar.gz \
-	&& tar -xvf /tmp/lua-nginx.tar.gz -C /tmp \
-    && curl -fSL https://github.com/openresty/headers-more-nginx-module/archive/v${HEADERS_MORE_VERSION}.tar.gz -o /tmp/headers-more.tar.gz \
-    && tar -xvf /tmp/headers-more.tar.gz -C /tmp \
-    && curl -fSL https://nginx.org/download/nginx-$NGINX_VERSION.tar.gz -o nginx.tar.gz \
-	&& export GNUPGHOME="$(mktemp -d)" \
-	&& mkdir -p /usr/src \
-	&& tar -zxC /usr/src -f nginx.tar.gz \
-	&& rm nginx.tar.gz \
-	&& cd /usr/src/nginx-$NGINX_VERSION \
-	&& ./configure $CONFIG --with-debug \
-	&& make -j$(getconf _NPROCESSORS_ONLN) \
-	&& mv objs/nginx objs/nginx-debug \
-	&& ./configure $CONFIG \
-	&& make -j$(getconf _NPROCESSORS_ONLN) \
-	&& make install \
-    && mkdir -p /usr/local/share/lua/5.1  \
-    && curl -fSL https://github.com/openresty/lua-resty-core/archive/v${LUA_RESTY_CORE}.tar.gz -o /tmp/lua-resty-core.tar.gz  \
-    && tar -xvf /tmp/lua-resty-core.tar.gz -C /tmp \
-    && cp -r /tmp/lua-resty-core-${LUA_RESTY_CORE}/lib/resty /usr/local/share/lua/5.1/ \
-    && rm -rf  /tmp/lua-resty-core-${LUA_RESTY_CORE}  \
-    && rm -rf  /tmp/lua-resty-core.tar.gz  \
-    && curl -fSL https://github.com/openresty/lua-resty-lrucache/archive/v${LUA_RESTY_LRUCACHE}.tar.gz -o /tmp/lrucache.tar.gz \
-    && tar -xzf /tmp/lrucache.tar.gz -C /tmp \
-    && cp -r /tmp/lua-resty-lrucache-${LUA_RESTY_LRUCACHE}/lib/resty /usr/local/share/lua/5.1/ \
-    && rm -rf  /tmp/lua-resty-lrucache-${LUA_RESTY_LRUCACHE} \
-    && rm -rf  /tmp/lrucache.tar.gz  \
-    && curl -fSL https://github.com/openresty/lua-resty-upstream-healthcheck/archive/v${LUA_RESTY_UPSTREAM_HEALTHCHECK}.tar.gz -o /tmp/healthcheck.tar.gz \
-    && tar -xzf /tmp/healthcheck.tar.gz -C /tmp \
-    && cp -r /tmp/lua-resty-upstream-healthcheck-${LUA_RESTY_UPSTREAM_HEALTHCHECK}/lib/resty   /usr/local/share/lua/5.1/ \
-    && rm -rf  /tmp/lua-resty-upstream-healthcheck-${LUA_RESTY_UPSTREAM_HEALTHCHECK}  \
-    && rm -rf  /tmp/healthcheck.tar.gz  \
-    && mkdir -p /var/cache/nginx/client_temp \
-           /var/cache/nginx/proxy_temp \
-           /var/cache/nginx/fastcgi_temp \
-           /var/cache/nginx/uwsgi_temp \
-           /var/cache/nginx/scgi_temp \
-	&& rm -rf /etc/nginx/html/ \
-	&& mkdir /etc/nginx/conf.d/ \
-	&& mkdir -p /usr/share/nginx/html/ \
-    && chown -R nginx:nginx /var/cache/nginx \
-	&& install -m644 html/index.html /usr/share/nginx/html/ \
-	&& install -m644 html/50x.html /usr/share/nginx/html/ \
-	&& install -m755 objs/nginx-debug /usr/sbin/nginx-debug \
-	&& strip /usr/sbin/nginx* \
-	&& rm -rf /usr/src/nginx-$NGINX_VERSION \
-	&& rm -f /tmp/ndk.tar.gz \
-	&& rm -f /tmp/lua-nginx.tar.gz \
-    && rm -f /tmp/headers-more.tar.gz \
-	&& rm -rf /tmp/ngx_devel_kit-${NGX_DEVEL_KIT_VERSION} \
-	&& rm -rf /tmp/lua-nginx-module-${LUA_NGINX_MODULE_VERSION} \
-    && rm -rf /tmp/headers-more-nginx-module-${HEADERS_MORE_VERSION} \
-	\
-	# Bring in gettext so we can get `envsubst`, then throw
-	# the rest away. To do this, we need to install `gettext`
-	# then move `envsubst` out of the way so `gettext` can
-	# be deleted completely, then move `envsubst` back.
-	&& apk add --no-cache --virtual .gettext gettext \
-	&& mv /usr/bin/envsubst /tmp/ \
-    	&& runDeps="$( \
-		scanelf --needed --nobanner /usr/sbin/nginx /tmp/envsubst \
-			| awk '{ gsub(/,/, "\nso:", $2); print "so:" $2 }' \
-			| sort -u \
-			| xargs -r apk info --installed \
-			| sort -u \
-	)" \
-	\
-	&& apk add --no-cache --virtual .nginx-rundeps $runDeps \
-	&& apk del .build-deps \
-	&& apk del .gettext \
-	&& mv /tmp/envsubst /usr/local/bin/ \
-	\
-	# forward request and error logs to docker log collector
-	&& ln -sf /dev/stdout /var/log/nginx/access.log \
-	&& ln -sf /dev/stderr /var/log/nginx/error.log
-
-COPY nginx.conf /etc/nginx/nginx.conf
-COPY nginx.vh.default.conf /etc/nginx/conf.d/default.conf
-
-EXPOSE 80 443
-
-CMD ["nginx", "-g", "daemon off;"]
-

gradle-diagnostics.init.gradle

@@ -0,0 +1,34 @@
+import java.util.concurrent.ConcurrentHashMap
+import org.gradle.api.tasks.compile.GroovyCompile
+
+def taskStartNanos = new ConcurrentHashMap<String, Long>()
+def activeTasksFile = new File('/tmp/gradle-active-tasks')
+
+def writeActiveTasks = {
+    synchronized (taskStartNanos) {
+        def activeTasks = taskStartNanos.keySet().sort()
+        activeTasksFile.text = activeTasks
+                ? activeTasks.join(System.lineSeparator()) + System.lineSeparator()
+                : "none${System.lineSeparator()}"
+    }
+}
+
+gradle.beforeProject { project ->
+    project.tasks.withType(GroovyCompile).configureEach {
+        options.forkOptions.memoryMaximumSize = '1g'
+    }
+}
+
+gradle.taskGraph.beforeTask { task ->
+    taskStartNanos.put(task.path, System.nanoTime())
+    writeActiveTasks()
+    println "[TASK START] ${task.path}"
+}
+
+gradle.taskGraph.afterTask { task, state ->
+    def startedAt = taskStartNanos.remove(task.path)
+    def elapsedMs = startedAt == null ? 0 : (System.nanoTime() - startedAt) / 1_000_000
+    def outcome = state.failure ? 'FAILED' : state.skipped ? 'SKIPPED' : 'DONE'
+    println "[TASK END] ${task.path} ${outcome} ${elapsedMs} ms"
+    writeActiveTasks()
+}

gradle-repositories.init.gradle

@@ -0,0 +1,71 @@
+def nexusUsername = System.getenv('NEXUS_USERNAME') ?: System.getenv('NPM_USERNAME')
+def nexusPassword = System.getenv('NEXUS_PASSWORD') ?: System.getenv('NPM_PASSWORD')
+
+if (!nexusUsername || !nexusPassword) {
+    throw new GradleException('Nexus credentials are not configured')
+}
+
+buildscript {
+    repositories {
+        mavenLocal()
+        maven { url = 'https://nexus.freeicu.top/repository/maven-public/' }
+        maven {
+            url = 'https://nexus.loghub.com/repository/public/'
+            credentials {
+                username = nexusUsername
+                password = nexusPassword
+            }
+        }
+        maven { url = 'https://repo.huaweicloud.com/repository/maven/huaweicloudsdk' }
+        maven { url = 'https://build.shibboleth.net/nexus/content/repositories/releases/' }
+    }
+}
+
+allprojects {
+    buildscript {
+        repositories {
+            mavenLocal()
+            maven { url = 'https://nexus.freeicu.top/repository/maven-public/' }
+            maven {
+                url = 'https://nexus.loghub.com/repository/public/'
+                credentials {
+                    username = nexusUsername
+                    password = nexusPassword
+                }
+            }
+            maven { url = 'https://repo.huaweicloud.com/repository/maven/huaweicloudsdk' }
+            maven { url = 'https://build.shibboleth.net/nexus/content/repositories/releases/' }
+        }
+    }
+    repositories {
+        mavenLocal()
+        maven { url = 'https://nexus.freeicu.top/repository/maven-public/' }
+        maven {
+            url = 'https://nexus.loghub.com/repository/public/'
+            credentials {
+                username = nexusUsername
+                password = nexusPassword
+            }
+        }
+        maven { url = 'https://repo.huaweicloud.com/repository/maven/huaweicloudsdk' }
+        maven { url = 'https://build.shibboleth.net/nexus/content/repositories/releases/' }
+    }
+}
+
+settingsEvaluated { settings ->
+    settings.pluginManagement {
+        repositories {
+            mavenLocal()
+            maven { url = 'https://nexus.freeicu.top/repository/maven-public/' }
+            maven {
+                url = 'https://nexus.loghub.com/repository/public/'
+                credentials {
+                    username = nexusUsername
+                    password = nexusPassword
+                }
+            }
+            maven { url = 'https://repo.huaweicloud.com/repository/maven/huaweicloudsdk' }
+            maven { url = 'https://build.shibboleth.net/nexus/content/repositories/releases/' }
+        }
+    }
+}

nginx.conf

@@ -1,88 +0,0 @@
-# nginx.conf  --  docker-openresty
-#
-# This file is installed to:
-#   `/usr/local/openresty/nginx/conf/nginx.conf`
-# and is the file loaded by nginx at startup,
-# unless the user specifies otherwise.
-#
-# It tracks the upstream OpenResty's `nginx.conf`, but removes the `server`
-# section and adds this directive:
-#     `include /etc/nginx/conf.d/*.conf;`
-#
-# The `docker-openresty` file `nginx.vh.default.conf` is copied to
-# `/etc/nginx/conf.d/default.conf`.  It contains the `server section
-# of the upstream `nginx.conf`.
-#
-# See https://github.com/openresty/docker-openresty/blob/master/README.md#nginx-config-files
-#
-
-#user  nobody;
-#worker_processes 1;
-
-# Enables the use of JIT for regular expressions to speed-up their processing.
-pcre_jit on;
-
-#error_log  logs/error.log;
-#error_log  logs/error.log  notice;
-#error_log  logs/error.log  info;
-
-#pid        logs/nginx.pid;
-
-events {
-    worker_connections  1024;
-}
-
-
-http {
-    include       mime.types;
-    default_type  application/octet-stream;
-
-    # Enables or disables the use of underscores in client request header fields.
-    # When the use of underscores is disabled, request header fields whose names contain underscores are marked as invalid and become subject to the ignore_invalid_headers directive.
-    # underscores_in_headers off;
-
-    #log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
-    #                  '$status $body_bytes_sent "$http_referer" '
-    #                  '"$http_user_agent" "$http_x_forwarded_for"';
-
-    #access_log  logs/access.log  main;
-
-        # Log in JSON Format
-        # log_format nginxlog_json escape=json '{ "timestamp": "$time_iso8601", '
-        # '"remote_addr": "$remote_addr", '
-        #  '"body_bytes_sent": $body_bytes_sent, '
-        #  '"request_time": $request_time, '
-        #  '"response_status": $status, '
-        #  '"request": "$request", '
-        #  '"request_method": "$request_method", '
-        #  '"host": "$host",'
-        #  '"upstream_addr": "$upstream_addr",'
-        #  '"http_x_forwarded_for": "$http_x_forwarded_for",'
-        #  '"http_referrer": "$http_referer", '
-        #  '"http_user_agent": "$http_user_agent", '
-        #  '"http_version": "$server_protocol", '
-        #  '"nginx_access": true }';
-        # access_log /dev/stdout nginxlog_json;
-
-#     # See Move default writable paths to a dedicated directory (#119)
-#     # https://github.com/openresty/docker-openresty/issues/119
-    client_body_temp_path  /var/cache/nginx/client_temp;
-    proxy_temp_path        /var/cache/nginx/proxy_temp;
-    fastcgi_temp_path      /var/cache/nginx/fastcgi_temp;
-    uwsgi_temp_path        /var/cache/nginx/uwsgi_temp;
-    scgi_temp_path        /var/cache/nginx/scgi_temp;
-
-    sendfile        on;
-    #tcp_nopush     on;
-
-    #keepalive_timeout  0;
-    keepalive_timeout  65;
-
-    #gzip  on;
-    include /etc/nginx/conf.d/*.conf;
-
-    # Don't reveal OpenResty version to clients.
-    # server_tokens off;
-}
-
-include /etc/nginx/conf.d/*.main;

nginx.vh.default.conf

@@ -1,58 +0,0 @@
-# nginx.vh.default.conf  --  docker-openresty
-#
-# This file is installed to:
-#   `/etc/nginx/conf.d/default.conf`
-#
-# It tracks the `server` section of the upstream OpenResty's `nginx.conf`.
-#
-# This config (and any other configs in `etc/nginx/conf.d/`) is loaded by
-# default by the `include` directive in `/usr/local/openresty/nginx/conf/nginx.conf`.
-#
-# See https://github.com/openresty/docker-openresty/blob/master/README.md#nginx-config-files
-#
-
-
-server {
-    listen       80;
-    server_name  localhost;
-
-    #charset koi8-r;
-    #access_log  /var/log/nginx/host.access.log  main;
-
-    location / {
-        root   /usr/local/openresty/nginx/html;
-        index  index.html index.htm;
-    }
-
-    #error_page  404              /404.html;
-
-    # redirect server error pages to the static page /50x.html
-    #
-    error_page   500 502 503 504  /50x.html;
-    location = /50x.html {
-        root   /usr/local/openresty/nginx/html;
-    }
-
-    # proxy the PHP scripts to Apache listening on 127.0.0.1:80
-    #
-    #location ~ \.php$ {
-    #    proxy_pass   http://127.0.0.1;
-    #}
-
-    # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
-    #
-    #location ~ \.php$ {
-    #    root           /usr/local/openresty/nginx/html;
-    #    fastcgi_pass   127.0.0.1:9000;
-    #    fastcgi_index  index.php;
-    #    fastcgi_param  SCRIPT_FILENAME  /scripts$fastcgi_script_name;
-    #    include        fastcgi_params;
-    #}
-
-    # deny access to .htaccess files, if Apache's document root
-    # concurs with nginx's one
-    #
-    #location ~ /\.ht {
-    #    deny  all;
-    #}
-}