add deepseek

nginx/locations.conf

@@ -156,8 +156,49 @@ location /openrouter/ {
     proxy_send_timeout 120s;
 }
 
+# --- DeepSeek ---
+location /deepseek/ {
+    if ($allowed_ip = 0) {
+        return 403 '{"error":"ip_not_allowed"}';
+    }
+    if ($auth_ok = 0) {
+        return 403 '{"error":"invalid_token"}';
+    }
+
+    set $deepseek_upstream https://api.deepseek.com;
+    rewrite ^/deepseek/(.*) /$1 break;
+
+    proxy_pass $deepseek_upstream;
+    proxy_ssl_server_name on;
+    proxy_ssl_name api.deepseek.com;
+    proxy_ssl_protocols TLSv1.2 TLSv1.3;
+
+    proxy_set_header Host api.deepseek.com;
+    proxy_set_header Connection "";
+
+    proxy_set_header X-Forwarded-For "";
+    proxy_set_header X-Real-IP "";
+    proxy_set_header True-Client-IP "";
+    proxy_set_header CF-Connecting-IP "";
+    proxy_set_header X-Client-IP "";
+    proxy_set_header Forwarded "";
+    proxy_set_header Via "";
+
+    proxy_set_header X-Proxy-Token "";
+
+    proxy_http_version 1.1;
+    proxy_buffering off;
+    proxy_request_buffering off;
+    proxy_buffer_size 16k;
+    proxy_buffers 4 16k;
+    proxy_busy_buffers_size 32k;
+    proxy_connect_timeout 15s;
+    proxy_read_timeout 300s;
+    proxy_send_timeout 120s;
+}
+
 # --- Catch-all ---
 location / {
     default_type application/json;
-    return 404 '{"error":"unknown_upstream","hint":"use /elevenlabs/, /openai/ or /telegram/ or /openrouter/"}';
+    return 404 '{"error":"unknown_upstream","hint":"use /elevenlabs/, /openai/, /telegram/, /openrouter/ or /deepseek/"}';
 }