fix: 代码审查修复 - .env.docker排除、nginx/ssrf配置文件、web端口、hybrid检索、示例文档

docker/nginx/nginx.conf

@@ -0,0 +1,88 @@
+# Nginx 反向代理配置
+# 西安云美电子科技有限公司 - 企业知识库
+
+upstream dify_api {
+    server api:5001;
+}
+
+upstream dify_web {
+    server web:3000;
+}
+
+server {
+    listen 80;
+    server_name _;
+
+    # 请求体大小限制（文件上传）
+    client_max_body_size 50M;
+
+    # API 请求
+    location /console/api {
+        proxy_pass http://dify_api;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+
+        # WebSocket 支持
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection "upgrade";
+    }
+
+    location /v1 {
+        proxy_pass http://dify_api;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+
+        # SSE 支持
+        proxy_buffering off;
+        proxy_cache off;
+        proxy_read_timeout 300s;
+    }
+
+    # 静态资源
+    location /files {
+        proxy_pass http://dify_api;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+    }
+
+    location /elegant {
+        proxy_pass http://dify_api;
+        proxy_set_header Host $host;
+    }
+
+    # Web 前端
+    location / {
+        proxy_pass http://dify_web;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+    }
+}
+
+# HTTPS 配置（取消注释并配置 SSL 证书后启用）
+# server {
+#     listen 443 ssl;
+#     server_name kb.xayunmei.com;
+#
+#     ssl_certificate /etc/nginx/ssl/server.crt;
+#     ssl_certificate_key /etc/nginx/ssl/server.key;
+#     ssl_protocols TLSv1.2 TLSv1.3;
+#     ssl_ciphers HIGH:!aNULL:!MD5;
+#
+#     client_max_body_size 50M;
+#
+#     # 同上 location 配置...
+# }
+
+# HTTP → HTTPS 重定向（启用 HTTPS 后取消注释）
+# server {
+#     listen 80;
+#     server_name kb.xayunmei.com;
+#     return 301 https://$server_name$request_uri;
+# }