From 692b17534c09e9313826da39552628a015c9e56b Mon Sep 17 00:00:00 2001
From: GW_MC <72297530+GWMCwing@users.noreply.github.com>
Date: Sun, 21 Jun 2026 11:47:19 +0000
Subject: [PATCH] feat(proxy): implement Nginx configuration handling and
 rendering logic

---
 apps/nxmesh-master/src/service/proxy/mod.rs   |   5 +
 .../service/proxy/nginx/config/access_rule.rs |   6 +-
 .../service/proxy/nginx/config/cache_zone.rs  |   6 +-
 .../service/proxy/nginx/config/limit_rule.rs  |  10 +-
 .../service/proxy/nginx/config/limit_zone.rs  |   4 +-
 .../proxy/nginx/config/location_block.rs      |  28 +--
 .../service/proxy/nginx/config/log_setting.rs |   4 +-
 .../src/service/proxy/nginx/config/mod.rs     |  22 +-
 .../proxy/nginx/config/proxy_setting.rs       |  29 +--
 .../proxy/nginx/config/rewrite_rule.rs        |   4 +-
 .../proxy/nginx/config/server_block.rs        |  24 +--
 .../proxy/nginx/config/ssl_certificate.rs     |   4 +-
 .../service/proxy/nginx/config/upstream.rs    |   4 +-
 .../src/service/proxy/nginx/mod.rs            | 188 +++++++++++++++++-
 .../src/service/proxy/service.rs              |  42 ++++
 apps/nxmesh-master/src/service/proxy/types.rs |   4 +
 16 files changed, 306 insertions(+), 78 deletions(-)

diff --git a/apps/nxmesh-master/src/service/proxy/mod.rs b/apps/nxmesh-master/src/service/proxy/mod.rs
index 60223fe..ce9dce3 100644
--- a/apps/nxmesh-master/src/service/proxy/mod.rs
+++ b/apps/nxmesh-master/src/service/proxy/mod.rs
@@ -6,7 +6,12 @@ pub(crate) mod repo;
 pub mod service;
 pub mod types;
 
+#[cfg_attr(test, mockall::automock)]
 #[async_trait::async_trait]
 pub trait ProxyServiceTrait: Send + Sync + 'static {
     async fn get_proxy_config(&self, proxy_id: uuid::Uuid) -> ProxyServiceResult<ProxyConfig>;
 }
+
+pub trait ProxyConfigRenderer: Send + Sync + 'static {
+    fn render(&self, config: &ProxyConfig) -> String;
+}
diff --git a/apps/nxmesh-master/src/service/proxy/nginx/config/access_rule.rs b/apps/nxmesh-master/src/service/proxy/nginx/config/access_rule.rs
index 6c16d47..dda3fc4 100644
--- a/apps/nxmesh-master/src/service/proxy/nginx/config/access_rule.rs
+++ b/apps/nxmesh-master/src/service/proxy/nginx/config/access_rule.rs
@@ -1,7 +1,7 @@
-use crate::db::entities::access_rule::Model as AccessRule;
+use crate::service::proxy::types::AccessRuleConfig;
 
-impl std::fmt::Display for AccessRule {
+impl std::fmt::Display for AccessRuleConfig {
     fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
-        write!(f, "{} {};", self.r#type.clone(), self.ip_cidr.clone())
+        write!(f, "{} {};", self.r#type, self.ip_cidr)
     }
 }
diff --git a/apps/nxmesh-master/src/service/proxy/nginx/config/cache_zone.rs b/apps/nxmesh-master/src/service/proxy/nginx/config/cache_zone.rs
index ec79ece..330872c 100644
--- a/apps/nxmesh-master/src/service/proxy/nginx/config/cache_zone.rs
+++ b/apps/nxmesh-master/src/service/proxy/nginx/config/cache_zone.rs
@@ -1,11 +1,11 @@
-use crate::db::entities::cache_zone::Model as CacheZone;
+use crate::service::proxy::types::CacheZoneConfig;
 
-impl std::fmt::Display for CacheZone {
+impl std::fmt::Display for CacheZoneConfig {
     fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
         write!(
             f,
             "proxy_cache_path {} levels=1:2 keys_zone={}:{};",
-            self.path, self.name, self.size_limit
+            self.path, self.name, self.size
         )
     }
 }
diff --git a/apps/nxmesh-master/src/service/proxy/nginx/config/limit_rule.rs b/apps/nxmesh-master/src/service/proxy/nginx/config/limit_rule.rs
index 2b8aac5..73e02f8 100644
--- a/apps/nxmesh-master/src/service/proxy/nginx/config/limit_rule.rs
+++ b/apps/nxmesh-master/src/service/proxy/nginx/config/limit_rule.rs
@@ -1,11 +1,11 @@
-use crate::db::entities::limit_rule::Model as LimitRule;
+use crate::service::proxy::types::LimitRuleConfig;
 
-pub struct LimitRuleRender {
-    pub rule: LimitRule,
-    pub zone_name: String,
+pub struct LimitRuleRender<'a> {
+    pub rule: &'a LimitRuleConfig,
+    pub zone_name: &'a str,
 }
 
-impl std::fmt::Display for LimitRuleRender {
+impl std::fmt::Display for LimitRuleRender<'_> {
     fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
         write!(f, "limit_req zone={}", self.zone_name)?;
         if let Some(burst) = self.rule.burst {
diff --git a/apps/nxmesh-master/src/service/proxy/nginx/config/limit_zone.rs b/apps/nxmesh-master/src/service/proxy/nginx/config/limit_zone.rs
index db62052..9ddb9aa 100644
--- a/apps/nxmesh-master/src/service/proxy/nginx/config/limit_zone.rs
+++ b/apps/nxmesh-master/src/service/proxy/nginx/config/limit_zone.rs
@@ -1,6 +1,6 @@
-use crate::db::entities::limit_zone::Model as LimitZone;
+use crate::service::proxy::types::LimitZoneConfig;
 
-impl std::fmt::Display for LimitZone {
+impl std::fmt::Display for LimitZoneConfig {
     fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
         write!(
             f,
diff --git a/apps/nxmesh-master/src/service/proxy/nginx/config/location_block.rs b/apps/nxmesh-master/src/service/proxy/nginx/config/location_block.rs
index d8a6cab..a758e67 100644
--- a/apps/nxmesh-master/src/service/proxy/nginx/config/location_block.rs
+++ b/apps/nxmesh-master/src/service/proxy/nginx/config/location_block.rs
@@ -1,25 +1,25 @@
-use crate::db::entities::location_block::Model as LocationBlock;
+use crate::service::proxy::types::LocationBlockConfig;
 
-pub struct LocationBlockRender {
-    pub block: LocationBlock,
-    pub upstream_name: Option<String>,
-    pub access_rules: Vec<String>,
-    pub rewrite_rules: Vec<String>,
-    pub proxy_setting: Option<String>,
-    pub limit_rules: Vec<String>,
+pub struct LocationBlockRender<'a> {
+    pub block: &'a LocationBlockConfig,
+    pub upstream_name: Option<&'a str>,
+    pub access_rules: &'a [String],
+    pub rewrite_rules: &'a [String],
+    pub proxy_setting: Option<&'a str>,
+    pub limit_rules: &'a [String],
 }
 
-impl std::fmt::Display for LocationBlockRender {
+impl std::fmt::Display for LocationBlockRender<'_> {
     fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
         writeln!(f, "    location {} {{", self.block.path_pattern)?;
 
-        if let Some(ref upstream) = self.upstream_name {
+        if let Some(upstream) = self.upstream_name {
             writeln!(f, "        proxy_pass http://{};", upstream)?;
             writeln!(f, "        proxy_set_header Host $host;")?;
             writeln!(f, "        proxy_set_header X-Real-IP $remote_addr;")?;
         }
 
-        if let Some(ref settings) = self.proxy_setting {
+        if let Some(settings) = self.proxy_setting {
             for line in settings.lines() {
                 if !line.is_empty() {
                     writeln!(f, "{}", line)?;
@@ -27,15 +27,15 @@ impl std::fmt::Display for LocationBlockRender {
             }
         }
 
-        for rule in &self.access_rules {
+        for rule in self.access_rules {
             writeln!(f, "        {}", rule)?;
         }
 
-        for rule in &self.rewrite_rules {
+        for rule in self.rewrite_rules {
             writeln!(f, "        {}", rule)?;
         }
 
-        for rule in &self.limit_rules {
+        for rule in self.limit_rules {
             writeln!(f, "        {}", rule)?;
         }
 
diff --git a/apps/nxmesh-master/src/service/proxy/nginx/config/log_setting.rs b/apps/nxmesh-master/src/service/proxy/nginx/config/log_setting.rs
index e65f7ae..2366f8f 100644
--- a/apps/nxmesh-master/src/service/proxy/nginx/config/log_setting.rs
+++ b/apps/nxmesh-master/src/service/proxy/nginx/config/log_setting.rs
@@ -1,6 +1,6 @@
-use crate::db::entities::log_setting::Model as LogSetting;
+use crate::service::proxy::types::LogSettingConfig;
 
-impl std::fmt::Display for LogSetting {
+impl std::fmt::Display for LogSettingConfig {
     fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
         if let Some(ref path) = self.access_log_path {
             if let Some(ref level) = self.log_level {
diff --git a/apps/nxmesh-master/src/service/proxy/nginx/config/mod.rs b/apps/nxmesh-master/src/service/proxy/nginx/config/mod.rs
index f2fcab8..6db9d51 100644
--- a/apps/nxmesh-master/src/service/proxy/nginx/config/mod.rs
+++ b/apps/nxmesh-master/src/service/proxy/nginx/config/mod.rs
@@ -1,11 +1,11 @@
-mod access_rule;
-mod cache_zone;
-mod limit_rule;
-mod limit_zone;
-mod location_block;
-mod log_setting;
-mod proxy_setting;
-mod rewrite_rule;
-mod server_block;
-mod ssl_certificate;
-mod upstream;
+pub(crate) mod access_rule;
+pub(crate) mod cache_zone;
+pub(crate) mod limit_rule;
+pub(crate) mod limit_zone;
+pub(crate) mod location_block;
+pub(crate) mod log_setting;
+pub(crate) mod proxy_setting;
+pub(crate) mod rewrite_rule;
+pub(crate) mod server_block;
+pub(crate) mod ssl_certificate;
+pub(crate) mod upstream;
diff --git a/apps/nxmesh-master/src/service/proxy/nginx/config/proxy_setting.rs b/apps/nxmesh-master/src/service/proxy/nginx/config/proxy_setting.rs
index f275bfd..1aa896d 100644
--- a/apps/nxmesh-master/src/service/proxy/nginx/config/proxy_setting.rs
+++ b/apps/nxmesh-master/src/service/proxy/nginx/config/proxy_setting.rs
@@ -1,32 +1,23 @@
-use crate::db::entities::proxy_setting::Model as ProxySetting;
+use crate::service::proxy::types::ProxySettingConfig;
 
-pub struct ProxySettingRender {
-    pub setting: ProxySetting,
-    pub cache_zone_name: Option<String>,
+pub struct ProxySettingRender<'a> {
+    pub setting: &'a ProxySettingConfig,
+    pub cache_zone_name: Option<&'a str>,
 }
 
-impl ProxySettingRender {
-    fn render_timeout(value: Option<i32>, directive: &str) -> Option<String> {
-        value.map(|v| format!("    {} {}s;", directive, v))
-    }
-}
-
-impl std::fmt::Display for ProxySettingRender {
+impl std::fmt::Display for ProxySettingRender<'_> {
     fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
-        if let Some(line) = Self::render_timeout(self.setting.read_timeout, "proxy_read_timeout")
-        {
-            writeln!(f, "{}", line)?;
+        if let Some(timeout) = self.setting.read_timeout {
+            writeln!(f, "    proxy_read_timeout {}s;", timeout)?;
         }
-        if let Some(line) =
-            Self::render_timeout(self.setting.connect_timeout, "proxy_connect_timeout")
-        {
-            writeln!(f, "{}", line)?;
+        if let Some(timeout) = self.setting.connect_timeout {
+            writeln!(f, "    proxy_connect_timeout {}s;", timeout)?;
         }
         if let Some(buffer) = self.setting.buffer_size {
             writeln!(f, "    proxy_buffer_size {};", buffer)?;
         }
         if self.setting.cache_enabled.unwrap_or(false) {
-            if let Some(ref zone_name) = self.cache_zone_name {
+            if let Some(zone_name) = self.cache_zone_name {
                 writeln!(f, "    proxy_cache {};", zone_name)?;
             }
         }
diff --git a/apps/nxmesh-master/src/service/proxy/nginx/config/rewrite_rule.rs b/apps/nxmesh-master/src/service/proxy/nginx/config/rewrite_rule.rs
index 1a2fa1a..1fd9473 100644
--- a/apps/nxmesh-master/src/service/proxy/nginx/config/rewrite_rule.rs
+++ b/apps/nxmesh-master/src/service/proxy/nginx/config/rewrite_rule.rs
@@ -1,6 +1,6 @@
-use crate::db::entities::rewrite_rule::Model as RewriteRule;
+use crate::service::proxy::types::RewriteRuleConfig;
 
-impl std::fmt::Display for RewriteRule {
+impl std::fmt::Display for RewriteRuleConfig {
     fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
         write!(f, "rewrite {} {}", self.pattern, self.replacement)?;
         if let Some(ref flag) = self.flag {
diff --git a/apps/nxmesh-master/src/service/proxy/nginx/config/server_block.rs b/apps/nxmesh-master/src/service/proxy/nginx/config/server_block.rs
index d7f77e1..5419cb3 100644
--- a/apps/nxmesh-master/src/service/proxy/nginx/config/server_block.rs
+++ b/apps/nxmesh-master/src/service/proxy/nginx/config/server_block.rs
@@ -1,14 +1,14 @@
-use crate::db::entities::server_block::Model as ServerBlock;
+use crate::service::proxy::types::ServerBlockConfig;
 
-pub struct ServerBlockRender {
-    pub block: ServerBlock,
-    pub ssl_cert: Option<String>,
-    pub locations: Vec<String>,
-    pub access_rules: Vec<String>,
-    pub log_setting: Option<String>,
+pub struct ServerBlockRender<'a> {
+    pub block: &'a ServerBlockConfig,
+    pub ssl_cert: Option<&'a str>,
+    pub locations: &'a [String],
+    pub access_rules: &'a [String],
+    pub log_setting: Option<&'a str>,
 }
 
-impl std::fmt::Display for ServerBlockRender {
+impl std::fmt::Display for ServerBlockRender<'_> {
     fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
         writeln!(f, "server {{")?;
 
@@ -24,11 +24,11 @@ impl std::fmt::Display for ServerBlockRender {
             }
         }
 
-        if let Some(ref cert) = self.ssl_cert {
+        if let Some(cert) = self.ssl_cert {
             writeln!(f, "{}", cert)?;
         }
 
-        if let Some(ref log) = self.log_setting {
+        if let Some(log) = self.log_setting {
             for line in log.lines() {
                 if !line.is_empty() {
                     writeln!(f, "{}", line)?;
@@ -36,11 +36,11 @@ impl std::fmt::Display for ServerBlockRender {
             }
         }
 
-        for rule in &self.access_rules {
+        for rule in self.access_rules {
             writeln!(f, "    {}", rule)?;
         }
 
-        for loc in &self.locations {
+        for loc in self.locations {
             writeln!(f, "{}", loc)?;
         }
 
diff --git a/apps/nxmesh-master/src/service/proxy/nginx/config/ssl_certificate.rs b/apps/nxmesh-master/src/service/proxy/nginx/config/ssl_certificate.rs
index 422d9dc..7b7a5ad 100644
--- a/apps/nxmesh-master/src/service/proxy/nginx/config/ssl_certificate.rs
+++ b/apps/nxmesh-master/src/service/proxy/nginx/config/ssl_certificate.rs
@@ -1,6 +1,6 @@
-use crate::db::entities::ssl_certificate::Model as SslCertificate;
+use crate::service::proxy::types::SslCertificateConfig;
 
-impl std::fmt::Display for SslCertificate {
+impl std::fmt::Display for SslCertificateConfig {
     fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
         writeln!(f, "    ssl_certificate {};", self.cert_path)?;
         writeln!(f, "    ssl_certificate_key {};", self.key_path)
diff --git a/apps/nxmesh-master/src/service/proxy/nginx/config/upstream.rs b/apps/nxmesh-master/src/service/proxy/nginx/config/upstream.rs
index 5a3cc03..5e00db0 100644
--- a/apps/nxmesh-master/src/service/proxy/nginx/config/upstream.rs
+++ b/apps/nxmesh-master/src/service/proxy/nginx/config/upstream.rs
@@ -1,6 +1,6 @@
-use crate::db::entities::upstream::Model as Upstream;
+use crate::service::proxy::types::UpstreamConfig;
 
-impl std::fmt::Display for Upstream {
+impl std::fmt::Display for UpstreamConfig {
     fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
         write!(f, "    server {}:{};", self.target_host, self.target_port)
     }
diff --git a/apps/nxmesh-master/src/service/proxy/nginx/mod.rs b/apps/nxmesh-master/src/service/proxy/nginx/mod.rs
index ef68c36..96dc6df 100644
--- a/apps/nxmesh-master/src/service/proxy/nginx/mod.rs
+++ b/apps/nxmesh-master/src/service/proxy/nginx/mod.rs
@@ -1 +1,187 @@
-pub mod config;
+pub(crate) mod config;
+
+use std::collections::HashMap;
+use std::fmt::Write;
+
+use uuid::Uuid;
+
+use crate::service::proxy::ProxyConfigRenderer;
+use crate::service::proxy::types::{
+    AccessRuleConfig, CacheZoneConfig, LimitRuleConfig, LimitZoneConfig, LogSettingConfig,
+    OverrideRef, ProxyConfig, ProxySettingConfig, RewriteRuleConfig, SslCertificateConfig,
+    UpstreamConfig,
+};
+
+fn resolve_ids<'a, T>(ids: &[OverrideRef], map: &'a HashMap<Uuid, T>) -> Vec<&'a T> {
+    ids.iter().filter_map(|r| map.get(&r.id)).collect()
+}
+
+fn resolve_upstream_name(
+    upstream_id: Option<Uuid>,
+    upstreams: &HashMap<Uuid, UpstreamConfig>,
+) -> Option<&str> {
+    upstream_id
+        .and_then(|id| upstreams.get(&id))
+        .map(|u| u.name.as_str())
+}
+
+fn resolve_cache_zone_name(
+    zone_id: Option<Uuid>,
+    cache_zones: &HashMap<Uuid, CacheZoneConfig>,
+) -> Option<&str> {
+    zone_id
+        .and_then(|id| cache_zones.get(&id))
+        .map(|z| z.name.as_str())
+}
+
+fn resolve_limit_zone_name(
+    zone_id: Uuid,
+    limit_zones: &HashMap<Uuid, LimitZoneConfig>,
+) -> Option<&str> {
+    limit_zones.get(&zone_id).map(|z| z.name.as_str())
+}
+
+fn render_access_rules(
+    ids: &[OverrideRef],
+    access_rules: &HashMap<Uuid, AccessRuleConfig>,
+) -> Vec<String> {
+    resolve_ids(ids, access_rules)
+        .into_iter()
+        .map(|r| r.to_string())
+        .collect()
+}
+
+fn render_rewrite_rules(
+    ids: &[OverrideRef],
+    rewrite_rules: &HashMap<Uuid, RewriteRuleConfig>,
+) -> Vec<String> {
+    resolve_ids(ids, rewrite_rules)
+        .into_iter()
+        .map(|r| r.to_string())
+        .collect()
+}
+
+fn render_limit_rules(
+    ids: &[OverrideRef],
+    limit_rules: &HashMap<Uuid, LimitRuleConfig>,
+    limit_zones: &HashMap<Uuid, LimitZoneConfig>,
+) -> Vec<String> {
+    resolve_ids(ids, limit_rules)
+        .into_iter()
+        .filter_map(|rule| {
+            let zone_name = resolve_limit_zone_name(rule.zone_id, limit_zones)?;
+            Some(config::limit_rule::LimitRuleRender { rule, zone_name }.to_string())
+        })
+        .collect()
+}
+
+fn render_proxy_setting(
+    ids: &[OverrideRef],
+    proxy_settings: &HashMap<Uuid, ProxySettingConfig>,
+    cache_zones: &HashMap<Uuid, CacheZoneConfig>,
+) -> Option<String> {
+    let setting = resolve_ids(ids, proxy_settings).into_iter().next()?;
+    let cache_zone_name = resolve_cache_zone_name(setting.cache_zone, cache_zones);
+    Some(
+        config::proxy_setting::ProxySettingRender {
+            setting,
+            cache_zone_name,
+        }
+        .to_string(),
+    )
+}
+
+fn render_log_setting(
+    ids: &[OverrideRef],
+    log_settings: &HashMap<Uuid, LogSettingConfig>,
+) -> Option<String> {
+    let setting = resolve_ids(ids, log_settings).into_iter().next()?;
+    Some(setting.to_string())
+}
+
+fn render_ssl_cert(
+    ids: &[OverrideRef],
+    ssl_certificates: &HashMap<Uuid, SslCertificateConfig>,
+) -> Option<String> {
+    let cert = resolve_ids(ids, ssl_certificates).into_iter().next()?;
+    Some(cert.to_string())
+}
+
+pub struct NginxConfigRenderer;
+
+impl ProxyConfigRenderer for NginxConfigRenderer {
+    fn render(&self, config: &ProxyConfig) -> String {
+        let mut output = String::new();
+
+        // Global cache zones
+        for zone in config.cache_zones.values() {
+            writeln!(output, "{}", zone).ok();
+        }
+
+        // Limit request zones
+        for zone in config.limit_zones.values() {
+            writeln!(output, "{}", zone).ok();
+        }
+
+        // Upstream blocks
+        for upstream in config.upstreams.values() {
+            writeln!(output, "upstream {} {{", upstream.name).ok();
+            writeln!(output, "{}", upstream).ok();
+            writeln!(output, "}}").ok();
+            writeln!(output).ok();
+        }
+
+        // Server blocks
+        for sb in config.server_blocks.values() {
+            let access_rules = render_access_rules(&sb.access_rules, &config.access_rules);
+            let ssl_cert = render_ssl_cert(&sb.ssl_certificates, &config.ssl_certificates);
+            let log_setting = render_log_setting(&sb.log_settings, &config.log_settings);
+
+            // Render location blocks for this server
+            let locations: Vec<String> = resolve_ids(&sb.location_blocks, &config.location_blocks)
+                .into_iter()
+                .map(|lb| {
+                    let upstream_name =
+                        resolve_upstream_name(lb.proxy_pass_upstream_id, &config.upstreams);
+                    let lb_access_rules =
+                        render_access_rules(&lb.access_rules, &config.access_rules);
+                    let lb_rewrite_rules =
+                        render_rewrite_rules(&lb.rewrite_rules, &config.rewrite_rules);
+                    let lb_proxy_setting = render_proxy_setting(
+                        &lb.proxy_settings,
+                        &config.proxy_settings,
+                        &config.cache_zones,
+                    );
+                    let lb_limit_rules = render_limit_rules(
+                        &lb.limit_rules,
+                        &config.limit_rules,
+                        &config.limit_zones,
+                    );
+
+                    config::location_block::LocationBlockRender {
+                        block: lb,
+                        upstream_name,
+                        access_rules: &lb_access_rules,
+                        rewrite_rules: &lb_rewrite_rules,
+                        proxy_setting: lb_proxy_setting.as_deref(),
+                        limit_rules: &lb_limit_rules,
+                    }
+                    .to_string()
+                })
+                .collect();
+
+            let server = config::server_block::ServerBlockRender {
+                block: sb,
+                ssl_cert: ssl_cert.as_deref(),
+                locations: &locations,
+                access_rules: &access_rules,
+                log_setting: log_setting.as_deref(),
+            };
+
+            writeln!(output, "{}", server).ok();
+            writeln!(output).ok();
+        }
+
+        output
+    }
+}
diff --git a/apps/nxmesh-master/src/service/proxy/service.rs b/apps/nxmesh-master/src/service/proxy/service.rs
index e69de29..941af35 100644
--- a/apps/nxmesh-master/src/service/proxy/service.rs
+++ b/apps/nxmesh-master/src/service/proxy/service.rs
@@ -0,0 +1,42 @@
+use std::collections::HashMap;
+
+use sea_orm::DatabaseConnection;
+
+use super::nginx::NginxConfigRenderer;
+use super::repo::{ProxyRepo, ProxyRepoImpl};
+use super::types::{ProxyConfig, ProxyServiceError, ProxyServiceResult, ProxyType};
+use super::{ProxyConfigRenderer, ProxyServiceTrait};
+
+pub struct ProxyServiceImpl {
+    repo: Box<dyn ProxyRepo>,
+    renderers: HashMap<ProxyType, Box<dyn ProxyConfigRenderer>>,
+}
+
+impl ProxyServiceImpl {
+    pub fn new(db: DatabaseConnection) -> Self {
+        let mut renderers: HashMap<ProxyType, Box<dyn ProxyConfigRenderer>> = HashMap::new();
+        renderers.insert(ProxyType::Nginx, Box::new(NginxConfigRenderer));
+        Self {
+            repo: Box::new(ProxyRepoImpl::new(db)),
+            renderers,
+        }
+    }
+}
+
+#[async_trait::async_trait]
+impl ProxyServiceTrait for ProxyServiceImpl {
+    async fn get_proxy_config(&self, proxy_id: uuid::Uuid) -> ProxyServiceResult<ProxyConfig> {
+        self.repo.get_merged_proxy_config(proxy_id).await
+    }
+}
+
+impl ProxyServiceImpl {
+    pub async fn render_config(&self, proxy_id: uuid::Uuid) -> ProxyServiceResult<String> {
+        let config = self.repo.get_merged_proxy_config(proxy_id).await?;
+        let renderer = self
+            .renderers
+            .get(&config.r#type)
+            .ok_or(ProxyServiceError::RendererNotFound)?;
+        Ok(renderer.render(&config))
+    }
+}
diff --git a/apps/nxmesh-master/src/service/proxy/types.rs b/apps/nxmesh-master/src/service/proxy/types.rs
index 48cefe9..05efbea 100644
--- a/apps/nxmesh-master/src/service/proxy/types.rs
+++ b/apps/nxmesh-master/src/service/proxy/types.rs
@@ -4,6 +4,7 @@ use std::collections::HashMap;
 pub enum ProxyServiceError {
     ConfigNotFound,
     InvalidConfig,
+    RendererNotFound,
     DatabaseError(sea_orm::DbErr),
 }
 
@@ -15,6 +16,7 @@ impl From<sea_orm::DbErr> for ProxyServiceError {
 
 pub type ProxyServiceResult<T> = Result<T, ProxyServiceError>;
 
+#[derive(Hash, Eq, PartialEq, Clone, Debug)]
 pub enum ProxyType {
     Nginx,
 }
@@ -247,6 +249,7 @@ impl From<crate::db::entities::access_rule::Model> for AccessRuleConfig {
 pub struct CacheZoneConfig {
     pub id: uuid::Uuid,
     pub name: String,
+    pub path: String,
     pub size: String,
     pub override_of_id: Option<uuid::Uuid>,
 }
@@ -256,6 +259,7 @@ impl From<crate::db::entities::cache_zone::Model> for CacheZoneConfig {
         CacheZoneConfig {
             id: model.id,
             name: model.name,
+            path: model.path,
             size: model.size_limit,
             override_of_id: model.override_of_id,
         }