Post-Deployment Work and Considerations

Service Security Considerations

1. Do not directly expose all HENGSHI SENSE service ports to the outside world; they should only be accessible for internal communication within the HENGSHI SENSE product!
2. The main web service of HENGSHI SENSE uses the default port 8080. It is necessary to use a reverse proxy (such as nginx) to configure it as an HTTPS service before exposing it to the outside world!

Reverse Proxy Considerations

To provide the best performance experience, it is necessary to enable HTTPS 2.0 and enable gzip compression on the reverse proxy side. The following are the key configurations:

server {
    server_name xxx;
    listen 443 ssl http2;
    # SSL certificate configuration is also required
    ssl_certificate xxx;
    ssl_certificate_key xxx;
    gzip on;
    gzip_vary on;
}