update

README.md

@@ -45,19 +45,25 @@ curl -u admin:admin123 https://airsltd-ocngx.hf.space/
 curl -u admin:admin123 https://airsltd-ocngx.hf.space/health
 ```
 
-#### 3. OpenCode API (通过代理)
+#### 3. OpenCode Web界面
+```bash
+# 访问OpenCode Web界面
+curl -u admin:admin123 https://airsltd-ocngx.hf.space/opencode/web/
+```
+
+#### 4. OpenCode API (通过代理)
 ```bash
 # API 文档
-curl -u admin:admin123 https://airsltd-ocngx.hf.space/opencode/doc
+curl -u admin:admin123 https://airsltd-ocngx.hf.space/opencode/api/doc
 
 # OpenCode 健康检查
-curl -u admin:admin123 https://airsltd-ocngx.hf.space/opencode/global/health
+curl -u admin:admin123 https://airsltd-ocngx.hf.space/opencode/api/global/health
 
 # 创建 AI 编程会话
 curl -u admin:admin123 -X POST \
   -H "Content-Type: application/json" \
   -d '{"title": "AI Coding Session"}' \
-  https://airsltd-ocngx.hf.space/opencode/session
+  https://airsltd-ocngx.hf.space/opencode/api/session
 
 # 发送 AI 请求
 curl -u admin:admin123 -X POST \
@@ -65,7 +71,7 @@ curl -u admin:admin123 -X POST \
   -d '{
     "parts": [{"type": "text", "text": "创建一个 Python Hello World 应用"}]
   }' \
-  https://airsltd-ocngx.hf.space/opencode/session/{session_id}/message
+  https://airsltd-ocngx.hf.space/opencode/api/session/{session_id}/message
 ```
 
 ## 📋 API 端点
@@ -74,29 +80,29 @@ curl -u admin:admin123 -X POST \
 
 | 端点 | 方法 | 描述 |
 |------|------|------|
-| `/` | GET | 主页和介绍 |
+| `/` | GET | nginx主页和介绍 |
 | `/health` | GET | 服务健康检查 |
-| `/opencode/doc` | GET | OpenCode API 文档 (Swagger) |
-| `/opencode/*` | ALL | OpenCode API 代理 |
+| `/opencode/web/` | GET | OpenCode Web界面 |
+| `/opencode/api/*` | ALL | OpenCode API 代理 |
 
 ### 🤖 OpenCode API
 
 #### 核心 API
 ```bash
 # 健康检查
-curl -u admin:admin123 https://airsltd-ocngx.hf.space/opencode/global/health
+curl -u admin:admin123 https://airsltd-ocngx.hf.space/opencode/api/global/health
 
 # API 文档
-curl -u admin:admin123 https://airsltd-ocngx.hf.space/opencode/doc
+curl -u admin:admin123 https://airsltd-ocngx.hf.space/opencode/api/doc
 
 # 项目管理
-curl -u admin:admin123 https://airsltd-ocngx.hf.space/opencode/project
+curl -u admin:admin123 https://airsltd-ocngx.hf.space/opencode/api/project
 
 # 会话管理
-curl -u admin:admin123 https://airsltd-ocngx.hf.space/opencode/session
+curl -u admin:admin123 https://airsltd-ocngx.hf.space/opencode/api/session
 
 # 提供商管理
-curl -u admin:admin123 https://airsltd-ocngx.hf.space/opencode/provider
+curl -u admin:admin123 https://airsltd-ocngx.hf.space/opencode/api/provider
 ```
 
 #### Nginx 原生端点
@@ -113,10 +119,27 @@ curl -u admin:admin123 https://airsltd-ocngx.hf.space/health
 ```
 用户请求 → Nginx (7860) → OpenCode (57860) → AI 模型
      ↓              ↓               ↓
-  Basic Auth   →  代理转发     →  AI 处理
-  Lua 过滤   →  CORS 控制    →  代码生成
+   Basic Auth   →  统一代理     →  AI 处理
+   Lua 过滤   →  路径重写    →  代码生成
 ```
 
+### 🔧 新架构特性
+
+1. **统一认证**
+   - Server级别HTTP Basic Auth
+   - 一次登录，全局访问
+   - 无需重复认证
+
+2. **路径分离**
+   - `/` - nginx默认站点
+   - `/opencode/web/` - OpenCode Web界面
+   - `/opencode/api/` - OpenCode API端点
+
+3. **简化代理**
+   - 统一端点转发
+   - 减少配置复杂度
+   - 自动路径重写
+
 ### 🔧 组件说明
 
 1. **Nginx 服务器**

nginx/conf.d/default.conf

@@ -5,22 +5,23 @@ server {
     # 在Hugging Face Spaces环境中，重定向时不包含端口号
     absolute_redirect off;
 
-    location / {
-        # 基本认证
-        auth_basic "Restricted Area";
-        auth_basic_user_file /usr/local/openresty/nginx/conf/.htpasswd;
+    # 定义认证区域
+    auth_basic "Restricted Area";
+    auth_basic_user_file /usr/local/openresty/nginx/conf/.htpasswd;
 
-        # 使用 Lua 进行更复杂的认证
-        access_by_lua_block {
-            local headers = ngx.req.get_headers()
-            local user_agent = headers["User-Agent"] or ""
-            
-            -- 简单的用户代理检查
-            if string.find(user_agent, "bot") then
-                ngx.exit(403)
-            end
-        }
+    # 使用 Lua 进行更复杂的认证
+    access_by_lua_block {
+        local headers = ngx.req.get_headers()
+        local user_agent = headers["User-Agent"] or ""
+        
+        -- 简单的用户代理检查
+        if string.find(user_agent, "bot") then
+            ngx.exit(403)
+        end
+    }
 
+    # 默认站点 - nginx主页
+    location / {
         root   /usr/local/openresty/nginx/html;
         index  index.html index.htm;
         
@@ -35,117 +36,12 @@ server {
         add_header Content-Type text/plain;
     }
 
-    # OpenCode 静态资源代理 - 处理CSS、JS和其他资源
-    location /assets/ {
-        proxy_pass http://127.0.0.1:57860;
-        proxy_set_header Host $host;
-        proxy_set_header X-Real-IP $remote_addr;
-        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-        proxy_set_header X-Forwarded-Proto $scheme;
-    }
-    
-    location /oc-theme-preload.js {
-        proxy_pass http://127.0.0.1:57860;
-        proxy_set_header Host $host;
-        proxy_set_header X-Real-IP $remote_addr;
-        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-        proxy_set_header X-Forwarded-Proto $scheme;
-    }
-    
-    location /site.webmanifest {
-        proxy_pass http://127.0.0.1:57860;
-        proxy_set_header Host $host;
-        proxy_set_header X-Real-IP $remote_addr;
-        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-        proxy_set_header X-Forwarded-Proto $scheme;
-    }
-    
-    # OpenCode favicon 和图标资源
-    location ~ ^/(favicon.*\.(png|svg|ico)|apple-touch-icon\.png)$ {
-        proxy_pass http://127.0.0.1:57860;
-        proxy_set_header Host $host;
-        proxy_set_header X-Real-IP $remote_addr;
-        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-        proxy_set_header X-Forwarded-Proto $scheme;
-    }
-
-    # OpenCode API 端点代理 - 处理所有相对路径的API调用
-    location /global/ {
-        proxy_pass http://127.0.0.1:57860;
-        proxy_set_header Host $host;
-        proxy_set_header X-Real-IP $remote_addr;
-        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-        proxy_set_header X-Forwarded-Proto $scheme;
-        
-        # 处理 CORS
-        add_header Access-Control-Allow-Origin * always;
-        add_header Access-Control-Allow-Methods "GET, POST, PUT, DELETE, PATCH, OPTIONS" always;
-        add_header Access-Control-Allow-Headers "Content-Type, Authorization, X-Requested-With" always;
-        add_header Access-Control-Expose-Headers "Content-Type, Content-Length" always;
-        
-        # 支持流式响应和 SSE
-        proxy_buffering off;
-        proxy_cache off;
-        proxy_set_header Connection '';
-        proxy_http_version 1.1;
-        chunked_transfer_encoding on;
-        
-        # 超时设置
-        proxy_connect_timeout 60s;
-        proxy_send_timeout 300s;
-    }
-    
-    location /session {
-        proxy_pass http://127.0.0.1:57860;
-        proxy_set_header Host $host;
-        proxy_set_header X-Real-IP $remote_addr;
-        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-        proxy_set_header X-Forwarded-Proto $scheme;
-        
-        # 处理 CORS
-        add_header Access-Control-Allow-Origin * always;
-        add_header Access-Control-Allow-Methods "GET, POST, PUT, DELETE, PATCH, OPTIONS" always;
-        add_header Access-Control-Allow-Headers "Content-Type, Authorization, X-Requested-With" always;
-        add_header Access-Control-Expose-Headers "Content-Type, Content-Length" always;
-        
-        # 支持流式响应和 SSE
-        proxy_buffering off;
-        proxy_cache off;
-        proxy_set_header Connection '';
-        proxy_http_version 1.1;
-        chunked_transfer_encoding on;
-        
-        # 超时设置
-        proxy_connect_timeout 60s;
-        proxy_send_timeout 300s;
-    }
-    
-    location /project {
-        proxy_pass http://127.0.0.1:57860;
-        proxy_set_header Host $host;
-        proxy_set_header X-Real-IP $remote_addr;
-        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-        proxy_set_header X-Forwarded-Proto $scheme;
-        
-        # 处理 CORS
-        add_header Access-Control-Allow-Origin * always;
-        add_header Access-Control-Allow-Methods "GET, POST, PUT, DELETE, PATCH, OPTIONS" always;
-        add_header Access-Control-Allow-Headers "Content-Type, Authorization, X-Requested-With" always;
-        add_header Access-Control-Expose-Headers "Content-Type, Content-Length" always;
-        
-        # 支持流式响应和 SSE
-        proxy_buffering off;
-        proxy_cache off;
-        proxy_set_header Connection '';
-        proxy_http_version 1.1;
-        chunked_transfer_encoding on;
+    # OpenCode Web 端点 - 统一代理所有web请求
+    location /opencode/web/ {
+        # 移除 /opencode/web 前缀
+        rewrite ^/opencode/web/(.*) /$1 break;
         
-        # 超时设置
-        proxy_connect_timeout 60s;
-        proxy_send_timeout 300s;
-    }
-    
-    location /provider {
+        # 代理到 OpenCode 服务器
         proxy_pass http://127.0.0.1:57860;
         proxy_set_header Host $host;
         proxy_set_header X-Real-IP $remote_addr;
@@ -169,33 +65,13 @@ server {
         proxy_connect_timeout 60s;
         proxy_send_timeout 300s;
     }
-    
-    location /file {
-        proxy_pass http://127.0.0.1:57860;
-        proxy_set_header Host $host;
-        proxy_set_header X-Real-IP $remote_addr;
-        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-        proxy_set_header X-Forwarded-Proto $scheme;
-        
-        # 处理 CORS
-        add_header Access-Control-Allow-Origin * always;
-        add_header Access-Control-Allow-Methods "GET, POST, PUT, DELETE, PATCH, OPTIONS" always;
-        add_header Access-Control-Allow-Headers "Content-Type, Authorization, X-Requested-With" always;
-        add_header Access-Control-Expose-Headers "Content-Type, Content-Length" always;
-        
-        # 支持流式响应和 SSE
-        proxy_buffering off;
-        proxy_cache off;
-        proxy_set_header Connection '';
-        proxy_http_version 1.1;
-        chunked_transfer_encoding on;
+
+    # OpenCode API 端点 - 统一代理所有API请求
+    location /opencode/api/ {
+        # 移除 /opencode/api 前缀
+        rewrite ^/opencode/api/(.*) /$1 break;
         
-        # 超时设置
-        proxy_connect_timeout 60s;
-        proxy_send_timeout 300s;
-    }
-    
-    location /find {
+        # 代理到 OpenCode 服务器
         proxy_pass http://127.0.0.1:57860;
         proxy_set_header Host $host;
         proxy_set_header X-Real-IP $remote_addr;
@@ -219,468 +95,48 @@ server {
         proxy_connect_timeout 60s;
         proxy_send_timeout 300s;
     }
-    
-    location /config {
+
+    # OpenCode 静态资源代理 - 处理CSS、JS和其他资源
+    location /assets/ {
         proxy_pass http://127.0.0.1:57860;
         proxy_set_header Host $host;
         proxy_set_header X-Real-IP $remote_addr;
         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
         proxy_set_header X-Forwarded-Proto $scheme;
-        
-        # 处理 CORS
-        add_header Access-Control-Allow-Origin * always;
-        add_header Access-Control-Allow-Methods "GET, POST, PUT, DELETE, PATCH, OPTIONS" always;
-        add_header Access-Control-Allow-Headers "Content-Type, Authorization, X-Requested-With" always;
-        add_header Access-Control-Expose-Headers "Content-Type, Content-Length" always;
-        
-        # 支持流式响应和 SSE
-        proxy_buffering off;
-        proxy_cache off;
-        proxy_set_header Connection '';
-        proxy_http_version 1.1;
-        chunked_transfer_encoding on;
-        
-        # 超时设置
-        proxy_connect_timeout 60s;
-        proxy_send_timeout 300s;
     }
     
-    location /path {
+    location /oc-theme-preload.js {
         proxy_pass http://127.0.0.1:57860;
         proxy_set_header Host $host;
         proxy_set_header X-Real-IP $remote_addr;
         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
         proxy_set_header X-Forwarded-Proto $scheme;
-        
-        # 处理 CORS
-        add_header Access-Control-Allow-Origin * always;
-        add_header Access-Control-Allow-Methods "GET, POST, PUT, DELETE, PATCH, OPTIONS" always;
-        add_header Access-Control-Allow-Headers "Content-Type, Authorization, X-Requested-With" always;
-        add_header Access-Control-Expose-Headers "Content-Type, Content-Length" always;
-        
-        # 支持流式响应和 SSE
-        proxy_buffering off;
-        proxy_cache off;
-        proxy_set_header Connection '';
-        proxy_http_version 1.1;
-        chunked_transfer_encoding on;
-        
-        # 超时设置
-        proxy_connect_timeout 60s;
-        proxy_send_timeout 300s;
     }
     
-    location /pty {
+    location /site.webmanifest {
         proxy_pass http://127.0.0.1:57860;
         proxy_set_header Host $host;
         proxy_set_header X-Real-IP $remote_addr;
         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
         proxy_set_header X-Forwarded-Proto $scheme;
-        
-        # 处理 CORS
-        add_header Access-Control-Allow-Origin * always;
-        add_header Access-Control-Allow-Methods "GET, POST, PUT, DELETE, PATCH, OPTIONS" always;
-        add_header Access-Control-Allow-Headers "Content-Type, Authorization, X-Requested-With" always;
-        add_header Access-Control-Expose-Headers "Content-Type, Content-Length" always;
-        
-        # 支持流式响应和 SSE
-        proxy_buffering off;
-        proxy_cache off;
-        proxy_set_header Connection '';
-        proxy_http_version 1.1;
-        chunked_transfer_encoding on;
-        
-        # 超时设置
-        proxy_connect_timeout 60s;
-        proxy_send_timeout 300s;
     }
     
-    location /experimental {
+    # OpenCode favicon 和图标资源
+    location ~ ^/(favicon.*\.(png|svg|ico)|apple-touch-icon\.png)$ {
         proxy_pass http://127.0.0.1:57860;
         proxy_set_header Host $host;
         proxy_set_header X-Real-IP $remote_addr;
         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
         proxy_set_header X-Forwarded-Proto $scheme;
-        
-        # 处理 CORS
-        add_header Access-Control-Allow-Origin * always;
-        add_header Access-Control-Allow-Methods "GET, POST, PUT, DELETE, PATCH, OPTIONS" always;
-        add_header Access-Control-Allow-Headers "Content-Type, Authorization, X-Requested-With" always;
-        add_header Access-Control-Expose-Headers "Content-Type, Content-Length" always;
-        
-        # 支持流式响应和 SSE
-        proxy_buffering off;
-        proxy_cache off;
-        proxy_set_header Connection '';
-        proxy_http_version 1.1;
-        chunked_transfer_encoding on;
-        
-        # 超时设置
-        proxy_connect_timeout 60s;
-        proxy_send_timeout 300s;
     }
-    
-    location /instance {
-        proxy_pass http://127.0.0.1:57860;
-        proxy_set_header Host $host;
-        proxy_set_header X-Real-IP $remote_addr;
-        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-        proxy_set_header X-Forwarded-Proto $scheme;
-        
-        # 处理 CORS
-        add_header Access-Control-Allow-Origin * always;
-        add_header Access-Control-Allow-Methods "GET, POST, PUT, DELETE, PATCH, OPTIONS" always;
-        add_header Access-Control-Allow-Headers "Content-Type, Authorization, X-Requested-With" always;
-        add_header Access-Control-Expose-Headers "Content-Type, Content-Length" always;
-        
-        # 支持流式响应和 SSE
-        proxy_buffering off;
-        proxy_cache off;
-        proxy_set_header Connection '';
-        proxy_http_version 1.1;
-        chunked_transfer_encoding on;
-        
-        # 超时设置
-        proxy_connect_timeout 60s;
-        proxy_send_timeout 300s;
+
+    # OpenCode 根路径重定向到web端点
+    location = /opencode {
+        return 301 /opencode/web/;
     }
     
-    location /vcs {
-        proxy_pass http://127.0.0.1:57860;
-        proxy_set_header Host $host;
-        proxy_set_header X-Real-IP $remote_addr;
-        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-        proxy_set_header X-Forwarded-Proto $scheme;
-        
-        # 处理 CORS
-        add_header Access-Control-Allow-Origin * always;
-        add_header Access-Control-Allow-Methods "GET, POST, PUT, DELETE, PATCH, OPTIONS" always;
-        add_header Access-Control-Allow-Headers "Content-Type, Authorization, X-Requested-With" always;
-        add_header Access-Control-Expose-Headers "Content-Type, Content-Length" always;
-        
-        # 支持流式响应和 SSE
-        proxy_buffering off;
-        proxy_cache off;
-        proxy_set_header Connection '';
-        proxy_http_version 1.1;
-        chunked_transfer_encoding on;
-        
-        # 超时设置
-        proxy_connect_timeout 60s;
-        proxy_send_timeout 300s;
-    }
-    
-    location /doc {
-        proxy_pass http://127.0.0.1:57860;
-        proxy_set_header Host $host;
-        proxy_set_header X-Real-IP $remote_addr;
-        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-        proxy_set_header X-Forwarded-Proto $scheme;
-        
-        # 处理 CORS
-        add_header Access-Control-Allow-Origin * always;
-        add_header Access-Control-Allow-Methods "GET, POST, PUT, DELETE, PATCH, OPTIONS" always;
-        add_header Access-Control-Allow-Headers "Content-Type, Authorization, X-Requested-With" always;
-        add_header Access-Control-Expose-Headers "Content-Type, Content-Length" always;
-        
-        # 支持流式响应和 SSE
-        proxy_buffering off;
-        proxy_cache off;
-        proxy_set_header Connection '';
-        proxy_http_version 1.1;
-        chunked_transfer_encoding on;
-        
-        # 超时设置
-        proxy_connect_timeout 60s;
-        proxy_send_timeout 300s;
-    }
-    
-    location /lsp {
-        proxy_pass http://127.0.0.1:57860;
-        proxy_set_header Host $host;
-        proxy_set_header X-Real-IP $remote_addr;
-        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-        proxy_set_header X-Forwarded-Proto $scheme;
-        
-        # 处理 CORS
-        add_header Access-Control-Allow-Origin * always;
-        add_header Access-Control-Allow-Methods "GET, POST, PUT, DELETE, PATCH, OPTIONS" always;
-        add_header Access-Control-Allow-Headers "Content-Type, Authorization, X-Requested-With" always;
-        add_header Access-Control-Expose-Headers "Content-Type, Content-Length" always;
-        
-        # 支持流式响应和 SSE
-        proxy_buffering off;
-        proxy_cache off;
-        proxy_set_header Connection '';
-        proxy_http_version 1.1;
-        chunked_transfer_encoding on;
-        
-        # 超时设置
-        proxy_connect_timeout 60s;
-        proxy_send_timeout 300s;
-    }
-    
-    location /mcp {
-        proxy_pass http://127.0.0.1:57860;
-        proxy_set_header Host $host;
-        proxy_set_header X-Real-IP $remote_addr;
-        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-        proxy_set_header X-Forwarded-Proto $scheme;
-        
-        # 处理 CORS
-        add_header Access-Control-Allow-Origin * always;
-        add_header Access-Control-Allow-Methods "GET, POST, PUT, DELETE, PATCH, OPTIONS" always;
-        add_header Access-Control-Allow-Headers "Content-Type, Authorization, X-Requested-With" always;
-        add_header Access-Control-Expose-Headers "Content-Type, Content-Length" always;
-        
-        # 支持流式响应和 SSE
-        proxy_buffering off;
-        proxy_cache off;
-        proxy_set_header Connection '';
-        proxy_http_version 1.1;
-        chunked_transfer_encoding on;
-        
-        # 超时设置
-        proxy_connect_timeout 60s;
-        proxy_send_timeout 300s;
-    }
-    
-    location /permission {
-        proxy_pass http://127.0.0.1:57860;
-        proxy_set_header Host $host;
-        proxy_set_header X-Real-IP $remote_addr;
-        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-        proxy_set_header X-Forwarded-Proto $scheme;
-        
-        # 处理 CORS
-        add_header Access-Control-Allow-Origin * always;
-        add_header Access-Control-Allow-Methods "GET, POST, PUT, DELETE, PATCH, OPTIONS" always;
-        add_header Access-Control-Allow-Headers "Content-Type, Authorization, X-Requested-With" always;
-        add_header Access-Control-Expose-Headers "Content-Type, Content-Length" always;
-        
-        # 支持流式响应和 SSE
-        proxy_buffering off;
-        proxy_cache off;
-        proxy_set_header Connection '';
-        proxy_http_version 1.1;
-        chunked_transfer_encoding on;
-        
-        # 超时设置
-        proxy_connect_timeout 60s;
-        proxy_send_timeout 300s;
-        proxy_read_timeout 300s;
-    }
-    
-    location /agent {
-        proxy_pass http://127.0.0.1:57860;
-        proxy_set_header Host $host;
-        proxy_set_header X-Real-IP $remote_addr;
-        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-        proxy_set_header X-Forwarded-Proto $scheme;
-        
-        # 处理 CORS
-        add_header Access-Control-Allow-Origin * always;
-        add_header Access-Control-Allow-Methods "GET, POST, PUT, DELETE, PATCH, OPTIONS" always;
-        add_header Access-Control-Allow-Headers "Content-Type, Authorization, X-Requested-With" always;
-        add_header Access-Control-Expose-Headers "Content-Type, Content-Length" always;
-        
-        # 支持流式响应和 SSE
-        proxy_buffering off;
-        proxy_cache off;
-        proxy_set_header Connection '';
-        proxy_http_version 1.1;
-        chunked_transfer_encoding on;
-        
-        # 超时设置
-        proxy_connect_timeout 60s;
-        proxy_send_timeout 300s;
-        proxy_read_timeout 300s;
-    }
-    
-    location /auth {
-        proxy_pass http://127.0.0.1:57860;
-        proxy_set_header Host $host;
-        proxy_set_header X-Real-IP $remote_addr;
-        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-        proxy_set_header X-Forwarded-Proto $scheme;
-        
-        # 处理 CORS
-        add_header Access-Control-Allow-Origin * always;
-        add_header Access-Control-Allow-Methods "GET, POST, PUT, DELETE, PATCH, OPTIONS" always;
-        add_header Access-Control-Allow-Headers "Content-Type, Authorization, X-Requested-With" always;
-        add_header Access-Control-Expose-Headers "Content-Type, Content-Length" always;
-        
-        # 支持流式响应和 SSE
-        proxy_buffering off;
-        proxy_cache off;
-        proxy_set_header Connection '';
-        proxy_http_version 1.1;
-        chunked_transfer_encoding on;
-        
-        # 超时设置
-        proxy_connect_timeout 60s;
-        proxy_send_timeout 300s;
-    }
-    
-    location /command {
-        proxy_pass http://127.0.0.1:57860;
-        proxy_set_header Host $host;
-        proxy_set_header X-Real-IP $remote_addr;
-        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-        proxy_set_header X-Forwarded-Proto $scheme;
-        
-        # 处理 CORS
-        add_header Access-Control-Allow-Origin * always;
-        add_header Access-Control-Allow-Methods "GET, POST, PUT, DELETE, PATCH, OPTIONS" always;
-        add_header Access-Control-Allow-Headers "Content-Type, Authorization, X-Requested-With" always;
-        add_header Access-Control-Expose-Headers "Content-Type, Content-Length" always;
-        
-        # 支持流式响应和 SSE
-        proxy_buffering off;
-        proxy_cache off;
-        proxy_set_header Connection '';
-        proxy_http_version 1.1;
-        chunked_transfer_encoding on;
-        
-        # 超时设置
-        proxy_connect_timeout 60s;
-        proxy_send_timeout 300s;
-        proxy_read_timeout 300s;
-    }
-    
-    location /event {
-        proxy_pass http://127.0.0.1:57860;
-        proxy_set_header Host $host;
-        proxy_set_header X-Real-IP $remote_addr;
-        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-        proxy_set_header X-Forwarded-Proto $scheme;
-        
-        # 处理 CORS
-        add_header Access-Control-Allow-Origin * always;
-        add_header Access-Control-Allow-Methods "GET, POST, PUT, DELETE, PATCH, OPTIONS" always;
-        add_header Access-Control-Allow-Headers "Content-Type, Authorization, X-Requested-With" always;
-        add_header Access-Control-Expose-Headers "Content-Type, Content-Length" always;
-        
-        # 支持流式响应和 SSE
-        proxy_buffering off;
-        proxy_cache off;
-        proxy_set_header Connection '';
-        proxy_http_version 1.1;
-        chunked_transfer_encoding on;
-        
-        # 超时设置
-        proxy_connect_timeout 60s;
-        proxy_send_timeout 300s;
-    }
-    
-    location /formatter {
-        proxy_pass http://127.0.0.1:57860;
-        proxy_set_header Host $host;
-        proxy_set_header X-Real-IP $remote_addr;
-        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-        proxy_set_header X-Forwarded-Proto $scheme;
-        
-        # 处理 CORS
-        add_header Access-Control-Allow-Origin * always;
-        add_header Access-Control-Allow-Methods "GET, POST, PUT, DELETE, PATCH, OPTIONS" always;
-        add_header Access-Control-Allow-Headers "Content-Type, Authorization, X-Requested-With" always;
-        add_header Access-Control-Expose-Headers "Content-Type, Content-Length" always;
-        
-        # 支持流式响应和 SSE
-        proxy_buffering off;
-        proxy_cache off;
-        proxy_set_header Connection '';
-        proxy_http_version 1.1;
-        chunked_transfer_encoding on;
-        
-        # 超时设置
-        proxy_connect_timeout 60s;
-        proxy_send_timeout 300s;
-    }
-    
-    location /log {
-        proxy_pass http://127.0.0.1:57860;
-        proxy_set_header Host $host;
-        proxy_set_header X-Real-IP $remote_addr;
-        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-        proxy_set_header X-Forwarded-Proto $scheme;
-        
-        # 处理 CORS
-        add_header Access-Control-Allow-Origin * always;
-        add_header Access-Control-Allow-Methods "GET, POST, PUT, DELETE, PATCH, OPTIONS" always;
-        add_header Access-Control-Allow-Headers "Content-Type, Authorization, X-Requested-With" always;
-        add_header Access-Control-Expose-Headers "Content-Type, Content-Length" always;
-        
-        # 支持流式响应和 SSE
-        proxy_buffering off;
-        proxy_cache off;
-        proxy_set_header Connection '';
-        proxy_http_version 1.1;
-        chunked_transfer_encoding on;
-        
-        # 超时设置
-        proxy_connect_timeout 60s;
-        proxy_send_timeout 300s;
-    }
-    
-    location /tui {
-        proxy_pass http://127.0.0.1:57860;
-        proxy_set_header Host $host;
-        proxy_set_header X-Real-IP $remote_addr;
-        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-        proxy_set_header X-Forwarded-Proto $scheme;
-        
-        # 处理 CORS
-        add_header Access-Control-Allow-Origin * always;
-        add_header Access-Control-Allow-Methods "GET, POST, PUT, DELETE, PATCH, OPTIONS" always;
-        add_header Access-Control-Allow-Headers "Content-Type, Authorization, X-Requested-With" always;
-        add_header Access-Control-Expose-Headers "Content-Type, Content-Length" always;
-        
-        # 支持流式响应和 SSE
-        proxy_buffering off;
-        proxy_cache off;
-        proxy_set_header Connection '';
-        proxy_http_version 1.1;
-        chunked_transfer_encoding on;
-        
-        # 超时设置
-        proxy_connect_timeout 60s;
-        proxy_send_timeout 300s;
-    }
-
-    # OpenCode 根路径重定向
-    location = /opencode {
-        return 301 /opencode/;
-    }
-    
-    # OpenCode API 代理 - 完整代理所有 OpenCode 端点 (v2)
-    location /opencode/ {
-        # 移除 /opencode 前缀
-        rewrite ^/opencode/(.*) /$1 break;
-        
-        # 代理到 OpenCode 服务器
-        proxy_pass http://127.0.0.1:57860;
-        proxy_set_header Host $host;
-        proxy_set_header X-Real-IP $remote_addr;
-        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-        proxy_set_header X-Forwarded-Proto $scheme;
-        
-        # 处理 CORS
-        add_header Access-Control-Allow-Origin * always;
-        add_header Access-Control-Allow-Methods "GET, POST, PUT, DELETE, PATCH, OPTIONS" always;
-        add_header Access-Control-Allow-Headers "Content-Type, Authorization, X-Requested-With" always;
-        add_header Access-Control-Expose-Headers "Content-Type, Content-Length" always;
-        
-        # 支持流式响应和 SSE
-        proxy_buffering off;
-        proxy_cache off;
-        proxy_set_header Connection '';
-        proxy_http_version 1.1;
-        chunked_transfer_encoding on;
-        
-        # 超时设置
-        proxy_connect_timeout 60s;
-        proxy_send_timeout 300s;
+    location = /opencode/ {
+        return 301 /opencode/web/;
     }
 
     error_page   500 502 503 504  /50x.html;

test-nginx-config.sh

@@ -0,0 +1,62 @@
+#!/bin/bash
+
+echo "=== 测试新的nginx配置 ==="
+
+echo "1. 检查配置文件语法..."
+# 简单检查配置文件语法
+if [ -f "nginx/nginx.conf" ] && [ -f "nginx/conf.d/default.conf" ]; then
+    echo "✅ 配置文件存在"
+else
+    echo "❌ 配置文件缺失"
+    exit 1
+fi
+
+echo "2. 验证端点配置..."
+# 检查关键端点配置
+echo "检查 /opencode/web/ 端点配置..."
+if grep -q "location /opencode/web/" nginx/conf.d/default.conf; then
+    echo "✅ /opencode/web/ 端点已配置"
+else
+    echo "❌ /opencode/web/ 端点未找到"
+fi
+
+echo "检查 /opencode/api/ 端点配置..."
+if grep -q "location /opencode/api/" nginx/conf.d/default.conf; then
+    echo "✅ /opencode/api/ 端点已配置"
+else
+    echo "❌ /opencode/api/ 端点未找到"
+fi
+
+echo "3. 验证认证配置..."
+# 检查认证配置
+if grep -q "auth_basic" nginx/conf.d/default.conf; then
+    echo "✅ HTTP Basic Auth已配置"
+else
+    echo "❌ HTTP Basic Auth未找到"
+fi
+
+echo "4. 检查代理简化..."
+# 统计代理端点数量
+proxy_count=$(grep -c "proxy_pass http://127.0.0.1:57860" nginx/conf.d/default.conf)
+echo "当前代理端点数量: $proxy_count"
+
+echo "5. 验证重定向配置..."
+if grep -q "location = /opencode" nginx/conf.d/default.conf; then
+    echo "✅ /opencode 重定向已配置"
+else
+    echo "❌ /opencode 重定向未找到"
+fi
+
+echo ""
+echo "=== 配置总结 ==="
+echo "✅ 默认站点: nginx (根路径 /)"
+echo "✅ OpenCode Web端点: /opencode/web/"
+echo "✅ OpenCode API端点: /opencode/api/"
+echo "✅ 统一认证: server级别Basic Auth"
+echo "✅ 简化代理: 使用统一端点转发"
+echo ""
+echo "=== 访问方式 ==="
+echo "主页: http://localhost:7860/ (需要认证)"
+echo "OpenCode Web: http://localhost:7860/opencode/web/ (需要认证)"
+echo "OpenCode API: http://localhost:7860/opencode/api/ (需要认证)"
+echo "健康检查: http://localhost:7860/health (需要认证)"