# Goods Ledger 货品台账看板 (updated 20260612) — 子路径 + 单一口令 Basic Auth
# 写入：nginx 注入 UI 专用 API Key（独立可轮换），操作人取 Basic Auth 用户名
location = /goods-ledger  { return 302 /goods-ledger/dashboard/; }
location = /goods-ledger/ { return 302 /goods-ledger/dashboard/; }
location ^~ /goods-ledger/ {
    auth_basic "Goods Ledger";
    auth_basic_user_file /etc/nginx/htpasswd-goods-ledger;
    proxy_pass http://127.0.0.1:8791/;
    proxy_http_version 1.1;
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;
    proxy_set_header X-Ledger-API-Key "<LEDGER_UI_API_KEY 见云端.env>";
    proxy_set_header X-Ledger-Actor "dashboard:$remote_user";
    client_max_body_size 10m;
}