日勿の部落格

1
services:
2
  cli-proxy-api:
3
    image: eceasy/cli-proxy-api:latest
4
    container_name: cli-proxy-api
5
    ports:
6
      - "127.0.0.1:8317:8317"
7
    volumes:
8
      # CPA 配置文件
9
      - ./config.yaml:/CLIProxyAPI/config.yaml
10
      # 凭证目录
11
      - ./auth-dir:/root/.cli-proxy-api
12
      # 插件
13
      - ./plugins:/CLIProxyAPI/plugins
14
    restart: unless-stopped
15

16
  cpa-manager-plus:
17
    image: seakee/cpa-manager-plus:latest
18
    restart: unless-stopped
19
    ports:
20
      - '127.0.0.1:18317:18317'
21
    volumes:
22
      - ./cpa-manager-plus-data:/data
23
    depends_on:
24
      - cli-proxy-api

1
# 其他配置
2
...
3

4
http {
5
    # 其他配置
6
    ...
7

8
    # 添加如下部分
9
    map $http_upgrade $connection_upgrade {
10
            default upgrade;
11
            ''      close;
12
    }
13
}

1
# 指定后端别名
2
upstream cpa_api {
3
    server 127.0.0.1:8317;
4
}
5

6
upstream cpamp {
7
    server 127.0.0.1:18317;
8
}
9

10
# http 默认跳转
11
server {
12
    listen 80;
13
    server_name your.cpa.domain;
14

15
    return 301 https://$host$request_uri;
16
}
17

18
server {
19
    listen 443 ssl;
20
    server_name your.cpa.domain;
21
    http2 on;
22

23
  # SSL 证书配置
24
    ssl_certificate xxx;
25
    ssl_certificate_key xxx;
26

27
    ssl_protocols TLSv1.2 TLSv1.3;
28

29
    client_max_body_size 64m;
30

31
    proxy_http_version 1.1;
32
    proxy_read_timeout 3600s;
33
    proxy_send_timeout 3600s;
34
    proxy_buffering off;
35

36
    proxy_set_header Host              $host;
37
    proxy_set_header X-Real-IP         $remote_addr;
38
    proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;
39
    proxy_set_header X-Forwarded-Proto $scheme;
40
    proxy_set_header Upgrade           $http_upgrade;
41
    proxy_set_header Connection        $connection_upgrade;
42

43
    # 默认进入 CPAMP 面板
44
    location = / {
45
        return 302 /management.html;
46
    }
47

48
    # ===== CPA Manager Plus =====
49

50
    location = /management.html { proxy_pass http://cpamp; }
51
    location = /health          { proxy_pass http://cpamp; }
52
    location = /status          { proxy_pass http://cpamp; }
53
    location = /setup           { proxy_pass http://cpamp; }
54

55
    # CPAMP 兼容接口与运行时接口
56
    location ^~ /usage-service/ { proxy_pass http://cpamp; }
57

58
    # /v0/management/* 先进入 CPAMP：
59
    # - 用量 / 模型价格 / API 密钥别名 / 仪表盘 / 请求监控 /
60
    #   Codex 账号巡检 / 导入导出 等由 CPAMP 自己处理
61
    # - 其他 CPA 管理接口由 CPAMP 使用服务端保存的 CPA Management Key 继续代理到 CPA
62
    #
63
    # 注意：不要只配置 location = /v0/management
64
    # 应使用带尾斜杠的前缀匹配 /v0/management/
65
    location ^~ /v0/management/ { proxy_pass http://cpamp; }
66

67
    # CPAMP 插件页面资源。缺少此规则时，插件页面可能打开空白或资源 404。
68
    location ^~ /v0/resource/plugins/ { proxy_pass http://cpamp; }
69

70
    # /models 由 CPAMP 提供兼容代理
71
    # 如果 CPAMP 尚未完成 setup，访问此路径可能返回 412
72
    location = /models          { proxy_pass http://cpamp; }
73

74
    # ===== CPA / CLI Proxy API =====
75

76
    # OpenAI / Claude Code / Codex 等实际 API 请求应直接走 CPA
77
    location ^~ /v1/                 { proxy_pass http://cpa_api; }
78
    location ^~ /v1beta/             { proxy_pass http://cpa_api; }
79
    location ^~ /backend-api/codex/  { proxy_pass http://cpa_api; }
80
    location ^~ /api/                { proxy_pass http://cpa_api; }
81

82
    # CPA 特殊路由与 OAuth 回调
83
    location = /v1internal:method    { proxy_pass http://cpa_api; }
84
    location = /healthz              { proxy_pass http://cpa_api; }
85
    location = /anthropic/callback   { proxy_pass http://cpa_api; }
86
    location = /codex/callback       { proxy_pass http://cpa_api; }
87
    location = /google/callback      { proxy_pass http://cpa_api; }
88
    location = /antigravity/callback { proxy_pass http://cpa_api; }
89

90
    # 兜底给 CPA
91
    # 用于 CPA 根路径、Amp 路由以及未来新增接口
92
    location / {
93
        proxy_pass http://cpa_api;
94
    }
95
}