📋 通用指南

# 每个 public hostname 映射一个 nginx 子站
tunnel: xxxx-xxxx-xxxx
credentials-file: /home/nonroot/.cloudflared/xxxx.json

ingress:
  # bearqh.fun 子站
  - hostname: ai.bearqh.fun
    service: http://nginx-tj:80
  - hostname: gitea.bearqh.fun
    service: http://nginx-tj:80
  - hostname: n8n.bearqh.fun
    service: http://nginx-tj:80

  # 保康.top 子站
  - hostname: tj.保康.top
    service: http://nginx-tj:80
  - hostname: nb.保康.top
    service: http://nginx-tj:80

  # 熊.online 子站
  - hostname: vault.熊.online
    service: http://nginx-tj:80
  - hostname: chat.熊.online
    service: http://nginx-tj:80

  # 兜底：所有未匹配的 hostname
  - service: http_status:404

# 静态 HTML 站点 (info站点)
server {
    listen 80;
    server_name info.熊.online;

    root /usr/share/nginx/html/info;
    index index.html;

    location / {
        try_files $uri $uri/ =404;
    }
}

# 反向代理到 Docker 容器 (股票看板API)
server {
    listen 80;
    server_name xn--2vx.online;  # 熊.online 的 punycode

    # 股票搜索接口 → 东方财富 suggest
    location /api/stock/search {
        proxy_pass https://searchadapter.example.com;
        proxy_set_header Host searchadapter.example.com;
        proxy_set_header X-Real-IP $remote_addr;

        # CORS 头注入
        add_header Access-Control-Allow-Origin *;
        add_header Access-Control-Allow-Methods 'GET, POST, OPTIONS';
        add_header Access-Control-Allow-Headers 'DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range';

        # OPTIONS 预检请求直接返回
        if ($request_method = 'OPTIONS') {
            add_header Access-Control-Allow-Origin *;
            add_header Access-Control-Allow-Methods 'GET, POST, OPTIONS';
            add_header Access-Control-Allow-Headers 'DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range';
            add_header Content-Length 0;
            add_header Content-Type text/plain;
            return 204;
        }
    }
}

// 腾讯行情 API（HTTP）
const TENCENT_QT_API = 'http://qt.gtimg.cn/q=';

// 腾讯 K线 API（HTTP）
const TENCENT_KLINE_API = 'http://web.ifzq.gtimg.cn/appstock/app/fqkline/get?param=';

// 自动降级逻辑
async function fetchWithFallback(primaryUrl, fallbackUrl) {
    try {
        const res = await fetch(primaryUrl, { signal: AbortSignal.timeout(5000) });
        if (!res.ok) throw new Error('HTTP ' + res.status);
        return await res.text();
    } catch (e) {
        console.warn('Primary API failed, falling back: ', e.message);
        const res2 = await fetch(fallbackUrl);
        return await res2.text();
    }
}

# 查看所有运行容器
docker ps

# 查看所有容器（含停止）
docker ps -a

# 进入容器内部
docker exec -it <container_name> sh

# 重启 nginx
docker exec nginx-proxy nginx -s reload
# 或
docker restart nginx-proxy

# 查看nginx日志
docker logs nginx-proxy --tail 50 -f

# 查看容器资源占用
docker stats

# 启动/停止/重启整个栈
docker compose -f /path/to/docker-compose.yml up -d
docker compose -f /path/to/docker-compose.yml down
docker compose -f /path/to/docker-compose.yml restart

# 静态站点配置
server {
    listen 80;
    server_name info.熊.online;

    # 根目录（容器内路径）
    root /usr/share/nginx/html/info;
    index index.html;

    # 共享资源（common.css 等）
    location /_shared/ {
        alias /usr/share/nginx/html/_shared/;
        expires 7d;
        add_header Cache-Control "public, immutable";
    }

    location / {
        try_files $uri $uri/ =404;
    }

    # 安全头
    add_header X-Frame-Options "SAMEORIGIN" always;
    add_header X-Content-Type-Options "nosniff" always;
    add_header X-XSS-Protection "1; mode=block" always;
}

# 反向代理到 Docker 容器
server {
    listen 80;
    server_name gitea.bearqh.fun;

    location / {
        proxy_pass http://gitea:3000;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;

        # WebSocket 支持
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
    }
}

# 查找 cloudflared 容器
docker ps | grep cloudflared

# 重启 tunnel
docker restart cloudflared

# 查看日志确认隧道状态
docker logs cloudflared --tail 20

# 如果容器内手动启动
docker exec -it cloudflared cloudflared tunnel run <tunnel_name>

# 验证隧道是否正常运行（日志中应有）
# "Connection xxxxxxxx registered" 或 "Connected to ... "

location /api/stock/search {
    # 东方财富 suggest 接口
    proxy_pass https://searchadapter.eastmoney.com/api/suggest/get_v2;
    proxy_set_header Host searchadapter.eastmoney.com;
    proxy_set_header Referer https://quote.eastmoney.com/;
    proxy_set_header User-Agent "Mozilla/5.0 (Windows NT 10.0; Win64; x64)";

    # CORS 头
    add_header Access-Control-Allow-Origin *;
    add_header Access-Control-Allow-Methods 'GET, POST, OPTIONS';
    add_header Access-Control-Allow-Headers 'DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range';

    # 预检请求
    if ($request_method = 'OPTIONS') {
        add_header Access-Control-Allow-Origin *;
        add_header Access-Control-Allow-Methods 'GET, POST, OPTIONS';
        add_header Access-Control-Allow-Headers 'DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range';
        add_header Content-Length 0;
        add_header Content-Type text/plain;
        return 204;
    }
}

// 腾讯行情 QT API — 支持 CORS，可直接 fetch
const url = `http://qt.gtimg.cn/q=sh600519,sz000001`;

async function fetchStocks(codes) {
    const res = await fetch(`http://qt.gtimg.cn/q=${codes.join(',')}`);
    const text = await res.text();
    return parseQtData(text);  // 自行解析 ~ 格式特殊
}

// 腾讯 K线 API
async function fetchKline(code, period = 'day') {
    const url = `http://web.ifzq.gtimg.cn/appstock/app/fqkline/get?param=${code},${period},,,20,qfq`;
    const res = await fetch(url);
    return await res.json();
}

// 防抖函数
function debounce(fn, delay = 200) {
    let timer = null;
    return function(...args) {
        clearTimeout(timer);
        timer = setTimeout(() => fn.apply(this, args), delay);
    };
}

// 搜索函数
async function doSearch(keyword) {
    if (!keyword || keyword.length < 1) return;
    const url = `/api/stock/search?input=${encodeURIComponent(keyword)}`;
    const res = await fetch(url);
    const data = await res.json();
    // 渲染搜索结果...
}

// 绑定防抖
searchInput.addEventListener('input', debounce((e) => {
    doSearch(e.target.value);
}, 200));