nginx.conf

server {
    return 403;
}
map $http_origin $status_cors_host {
	default 0;
	"~https://mirrors.pku.edu.cn" https://mirrors.pku.edu.cn;
	"~http://mirrors.pku.edu.cn" http://mirrors.pku.edu.cn;
	"~https://mirrorz.org" https://mirrorz.org;
}

server {
    listen       80 default;
    listen       [::]:80 default;
    listen       443 ssl default;
    listen       [::]:443 ssl default;
    server_name  mirrors.pku.edu.cn;

    # return 301 https://$server_name$request_uri;

    error_log    /var/log/nginx/repos_test_error.log;
    access_log   /var/log/nginx/repos_test_access.log;

    root /data/repos/;
    # Warning: don't use this regularly.
    #location = /config.json {
    #	root /data/backend-ng/;
    #}
    location /phpmyadmin/ {
        # proxy_pass http://localhost:3002/;
	root /data/;
	index index.php index.html;
    }

    # XXX: Is it better to put those into /repos?
    location /static/ {
	location /static/help/ {
	    alias /data/web/help/;
	    gzip_static on;
	}
	location /static/ {
            root /data/web/dist/;
            gzip_static on;
        }
    }
    location /repoconfig/ {
        root /data/web/;
    }

    # proxy_cache_path  /data/repos/npm/cache levels=1:2 keys_zone=npmcache:100m inactive=24h max_size=100g use_temp_path=off;
    location /npm/ {
        proxy_pass http://registry.npmjs.org/;
        proxy_set_header Accept-Encoding "";
        proxy_set_header Host registry.npmjs.org;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_cache            npmcache;
        proxy_cache_valid      any 1d;

        proxy_buffering on;
        proxy_ignore_headers Expires;
        proxy_ignore_headers X-Accel-Expires;
        proxy_ignore_headers Cache-Control;
        proxy_ignore_headers Set-Cookie;

        proxy_hide_header X-Accel-Expires;
        proxy_hide_header Expires;
        proxy_hide_header Cache-Control;
        proxy_hide_header Pragma;

        sub_filter_types *;
        sub_filter https://registry.npmjs.org/ $scheme://$host/npm/;
        sub_filter_once off;
    }
    location /npm {
        proxy_pass http://registry.npmjs.org/;
        proxy_set_header Accept-Encoding "";
        proxy_set_header Host registry.npmjs.org;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    }
    
    location ~ /monitor/(start|stop|log) {
    	try_files @error @error;
    }

    location /monitor/ {
        proxy_pass http://localhost:3030/;
	add_header Access-Control-Allow-Origin $status_cors_host;
	add_header Access-Control-Allow-Methods 'GET, POST, OPTIONS';
	add_header Access-Control-Allow-Headers 'DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization';
    }

    location /files/ {
	proxy_pass http://localhost:3001/;
    }
    location /.well-known/ {
        # root /data/web/repoconfig/;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        proxy_set_header Host $http_host;
        proxy_pass http://localhost:12004;
    }
    location = /robots.txt {
        root /data/web/repoconfig/;
    }
    location = /google53f21eaac539b6a8.html {
        root /data/web/repoconfig/;
    }
    location = /baidu_verify_code-E12Mj7SzYn.html {
        root /data/web/repoconfig/;
    }

    location /monitor_device/ {
	location /monitor_device/api/ {
	    proxy_set_header X-Real-IP $remote_addr;
	    proxy_pass http://127.0.0.1:19999/api/;
	    # add_header Access-Control-Allow-Origin $status_cors_host;
	    # add_header Access-Control-Allow-Methods 'GET, POST, OPTIONS';
	    # add_header Access-Control-Allow-Headers 'DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization';
	}
	location /monitor_device/ {
	    root /data/web/dist/;
            error_page 404 /index.html;
            return 404;
	}
    }

    location ~ /git-repos(/.+) {
        fastcgi_pass  unix:/var/run/fcgiwrap.socket;
        fastcgi_param SCRIPT_FILENAME /usr/libexec/git-core/git-http-backend;
        fastcgi_param GIT_HTTP_EXPORT_ALL "";
        fastcgi_param GIT_PROJECT_ROOT /data/repos/git-repos;
        fastcgi_param PATH_INFO $1;
        fastcgi_param REMOTE_USER $remote_user;
        include       fastcgi_params;
    }

# Web router
    location = /index.html {
    	root /data/web/dist;
    }
    location = /Mirrors {
    	root /data/web/dist/;
	rewrite ^ /index.html break;
    }
    location /Mirrors/ {
    	root /data/web/dist/;
    	rewrite ^ /index.html break;
    }
    location = /Status {
        root /data/web/dist/;
        rewrite ^ /index.html break;
    }
    location /Status/ {
        root /data/web/dist/;
        rewrite ^ /index.html break;
    }
    location = /Help {
        root /data/web/dist/;
        rewrite ^ /index.html break;
    }
    location /Help/ {
        root /data/web/dist/;
        rewrite ^ /index.html break;
    }
    location = /About {
        root /data/web/dist/;
        rewrite ^ /index.html break;
    }
    location /About/ {
        root /data/web/dist/;
        rewrite ^ /index.html break;
    }
    location = /Error404 {
        root /data/web/dist/;
	error_page 404 /index.html;
        return 404;
    }
    location = / {
	root /data/web/dist/;
	rewrite ^ /index.html break;
    }
    location /pypi/ {
	alias /data/repos/pypi/web/;
        if (!-e $request_filename) {
            root /data/web/dist/;
            error_page 404 /index.html;
            return 404;
        }
        try_files $uri $uri/index.html @frontend;
    }
    location / {
	if (!-e $request_filename) {
	    root /data/web/dist/;
	    error_page 404 /index.html;
	    return 404;
	}
	try_files $uri @frontend;
    }
    location @error {
	root /data/web/dist/;
	error_page 404 /index.html;
	return 404;
    }
    location @frontend {
	root /data/web/dist;
	rewrite ^ /index.html break;
    }
    # PHP
    location ~ \.php$ {
        fastcgi_pass   unix:/var/run/php-fpm/www.sock;
	fastcgi_index  index.php;
	fastcgi_param  SCRIPT_FILENAME /data/$fastcgi_script_name;
	include        fastcgi_params;
	fastcgi_param   SCRIPT_NAME $fastcgi_script_name;
    }

    # Managed by Certbot
    ssl_certificate /etc/letsencrypt/live/mirrors.pku.edu.cn/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/mirrors.pku.edu.cn/privkey.pem;
    include /etc/letsencrypt/options-ssl-nginx.conf;
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
}