feat(ai): 更新 AI 服务配置和 API 网关设置
- 移除 AI_API_URL 配置项，统一使用直接 OpenAI 兼容网关地址 - 添加强制调用托管 OpenAI 兼容网关的配置选项 - 更新 BaseURL 初始值逻辑，支持 OpenAI 和 Ollama 两种提供商 - 修改 API 密钥认证错误提示信息，增加本地代理配置说明 - 更新模型加载和聊天请求的 API 调用基础 URL 配置 - 添加 OpenAI API 网关 Nginx 代理配置文件 - 配置 HTTPS 重定向和 SSL 安全设置 - 设置 CORS 跨域资源共享策略，支持 websoft.top 域名访问
This commit is contained in:
52
proxy.conf
Normal file
52
proxy.conf
Normal file
@@ -0,0 +1,52 @@
|
||||
server {
|
||||
listen 80 ;
|
||||
listen 443 ssl ;
|
||||
server_name ai-api.websoft.top;
|
||||
index index.php index.html index.htm default.php default.htm default.html;
|
||||
access_log /www/sites/ai-api.websoft.top/log/access.log main;
|
||||
error_log /www/sites/ai-api.websoft.top/log/error.log;
|
||||
location ~ ^/(\.user.ini|\.htaccess|\.git|\.env|\.svn|\.project|LICENSE|README.md) {
|
||||
return 404;
|
||||
}
|
||||
location ^~ /.well-known/acme-challenge {
|
||||
allow all;
|
||||
root /usr/share/nginx/html;
|
||||
}
|
||||
if ( $uri ~ "^/\.well-known/.*\.(php|jsp|py|js|css|lua|ts|go|zip|tar\.gz|rar|7z|sql|bak)$" ) {
|
||||
return 403;
|
||||
}
|
||||
|
||||
http2 on;
|
||||
if ($scheme = http) {
|
||||
return 301 https://$host$request_uri;
|
||||
}
|
||||
ssl_certificate /www/sites/ai-api.websoft.top/ssl/fullchain.pem;
|
||||
ssl_certificate_key /www/sites/ai-api.websoft.top/ssl/privkey.pem;
|
||||
ssl_protocols TLSv1.3 TLSv1.2;
|
||||
ssl_ciphers ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:!aNULL:!eNULL:!EXPORT:!DSS:!DES:!RC4:!3DES:!MD5:!PSK:!KRB5:!SRP:!CAMELLIA:!SEED;
|
||||
ssl_prefer_server_ciphers off;
|
||||
ssl_session_cache shared:SSL:10m;
|
||||
ssl_session_timeout 10m;
|
||||
error_page 497 https://$host$request_uri;
|
||||
proxy_set_header X-Forwarded-Proto https;
|
||||
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains";
|
||||
# CORS: allow any *.websoft.top (and websoft.top) Origin; echo Origin for credentialed requests.
|
||||
# Keep wildcard for non-websoft origins without credentials.
|
||||
set $cors_origin "*";
|
||||
set $cors_credentials "false";
|
||||
if ($http_origin ~* '^https?://([a-z0-9-]+\.)*websoft\.top(?::[0-9]+)?$') {
|
||||
set $cors_origin $http_origin;
|
||||
set $cors_credentials "true";
|
||||
}
|
||||
add_header Access-Control-Allow-Origin $cors_origin always;
|
||||
add_header Access-Control-Allow-Credentials $cors_credentials always;
|
||||
add_header Access-Control-Allow-Methods "GET,POST,PUT,PATCH,DELETE,OPTIONS" always;
|
||||
add_header Access-Control-Allow-Headers "$http_access_control_request_headers" always;
|
||||
add_header Vary "Origin" always;
|
||||
if ($request_method = OPTIONS) {
|
||||
add_header Content-Length 0;
|
||||
add_header Content-Type text/plain;
|
||||
return 204;
|
||||
}
|
||||
include /www/sites/ai-api.websoft.top/proxy/*.conf;
|
||||
}
|
||||
35
proxy_.conf
Normal file
35
proxy_.conf
Normal file
@@ -0,0 +1,35 @@
|
||||
server {
|
||||
listen 80 ;
|
||||
listen 443 ssl ;
|
||||
server_name ai-api.websoft.top;
|
||||
index index.php index.html index.htm default.php default.htm default.html;
|
||||
access_log /www/sites/ai-api.websoft.top/log/access.log main;
|
||||
error_log /www/sites/ai-api.websoft.top/log/error.log;
|
||||
location ~ ^/(\.user.ini|\.htaccess|\.git|\.env|\.svn|\.project|LICENSE|README.md) {
|
||||
return 404;
|
||||
}
|
||||
location ^~ /.well-known/acme-challenge {
|
||||
allow all;
|
||||
root /usr/share/nginx/html;
|
||||
}
|
||||
if ( $uri ~ "^/\.well-known/.*\.(php|jsp|py|js|css|lua|ts|go|zip|tar\.gz|rar|7z|sql|bak)$" ) {
|
||||
return 403;
|
||||
}
|
||||
|
||||
http2 on;
|
||||
if ($scheme = http) {
|
||||
return 301 https://$host$request_uri;
|
||||
}
|
||||
ssl_certificate /www/sites/ai-api.websoft.top/ssl/fullchain.pem;
|
||||
ssl_certificate_key /www/sites/ai-api.websoft.top/ssl/privkey.pem;
|
||||
ssl_protocols TLSv1.3 TLSv1.2;
|
||||
ssl_ciphers ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:!aNULL:!eNULL:!EXPORT:!DSS:!DES:!RC4:!3DES:!MD5:!PSK:!KRB5:!SRP:!CAMELLIA:!SEED;
|
||||
ssl_prefer_server_ciphers off;
|
||||
ssl_session_cache shared:SSL:10m;
|
||||
ssl_session_timeout 10m;
|
||||
error_page 497 https://$host$request_uri;
|
||||
proxy_set_header X-Forwarded-Proto https;
|
||||
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains";
|
||||
add_header Access-Control-Allow-Origin "*" always;
|
||||
include /www/sites/ai-api.websoft.top/proxy/*.conf;
|
||||
}
|
||||
@@ -8,7 +8,7 @@
|
||||
type OpenAIChatMessage,
|
||||
type OpenAIModel
|
||||
} from '@/api/ai/openai';
|
||||
import { AI_API_URL, OLLAMA_API_URL } from '@/config/setting';
|
||||
import { OLLAMA_API_URL } from '@/config/setting';
|
||||
import {
|
||||
listOllamaModels,
|
||||
ollamaChat,
|
||||
@@ -21,8 +21,11 @@
|
||||
type Provider = 'openai' | 'ollama';
|
||||
const provider = ref<Provider>('ollama');
|
||||
|
||||
// Default to Ollama native API when provider is ollama.
|
||||
const baseURL = ref(provider.value === OLLAMA_API_URL);
|
||||
// Force direct calls to the hosted OpenAI-compatible gateway (no local /ai-proxy).
|
||||
const DIRECT_OPENAI_BASE_URL = 'https://ai-api.websoft.top/api/v1';
|
||||
const baseURL = ref<string>(
|
||||
provider.value === 'openai' ? DIRECT_OPENAI_BASE_URL : OLLAMA_API_URL
|
||||
);
|
||||
const apiKey = ref<string>('');
|
||||
|
||||
const modelLoading = ref(false);
|
||||
@@ -60,10 +63,10 @@
|
||||
try {
|
||||
if (provider.value === 'openai') {
|
||||
if (!baseURL.value.trim()) {
|
||||
baseURL.value = AI_API_URL;
|
||||
baseURL.value = DIRECT_OPENAI_BASE_URL;
|
||||
}
|
||||
const res = await listModels({
|
||||
baseURL: baseURL.value.trim() || AI_API_URL,
|
||||
baseURL: baseURL.value.trim() || DIRECT_OPENAI_BASE_URL,
|
||||
apiKey: apiKey.value.trim() || undefined
|
||||
});
|
||||
models.value = res.data ?? [];
|
||||
@@ -93,7 +96,7 @@
|
||||
String(errorText.value).includes('401')
|
||||
) {
|
||||
message.error(
|
||||
'未认证(401)：请填写 API Key，或在本地用 AI_API_KEY 通过 /ai-proxy 注入'
|
||||
'未认证(401)：请填写 API Key（如需走本地代理注入，可将 BaseURL 改为 /ai-proxy）'
|
||||
);
|
||||
} else {
|
||||
message.error('加载模型列表失败');
|
||||
@@ -137,7 +140,7 @@
|
||||
temperature: temperature.value
|
||||
},
|
||||
{
|
||||
baseURL: baseURL.value.trim() || AI_API_URL,
|
||||
baseURL: baseURL.value.trim() || DIRECT_OPENAI_BASE_URL,
|
||||
apiKey: apiKey.value.trim() || undefined,
|
||||
signal: controller.signal,
|
||||
onDelta: (t) => {
|
||||
@@ -153,7 +156,7 @@
|
||||
temperature: temperature.value
|
||||
},
|
||||
{
|
||||
baseURL: baseURL.value.trim() || AI_API_URL,
|
||||
baseURL: baseURL.value.trim() || DIRECT_OPENAI_BASE_URL,
|
||||
apiKey: apiKey.value.trim() || undefined,
|
||||
signal: controller.signal
|
||||
}
|
||||
@@ -231,7 +234,7 @@
|
||||
models.value = [];
|
||||
modelId.value = '';
|
||||
errorText.value = '';
|
||||
baseURL.value = p === 'openai' ? AI_API_URL : OLLAMA_API_URL;
|
||||
baseURL.value = p === 'openai' ? DIRECT_OPENAI_BASE_URL : OLLAMA_API_URL;
|
||||
loadModels();
|
||||
}
|
||||
);
|
||||
|
||||
Reference in New Issue
Block a user