socket.io fix

This commit is contained in:
js 2026-03-18 16:57:59 +00:00
parent 3228cdaf10
commit 2a38468061
1 changed files with 37 additions and 31 deletions

View File

@ -1,58 +1,67 @@
# Map hostnames to ports
map $host $target_port { map $host $target_port {
default 80; default 80;
ui.host.jeyerp.az 5000; ui.host.jeyerp.az 5000;
jeydev-code.host.jeyerp.az 1710; jeydev-code.host.jeyerp.az 1710;
erpnext-ali-code.host.jeyerp.az 1710; erpnext-ali-code.host.jeyerp.az 1710;
git.host.jeyerp.az 3000; git.host.jeyerp.az 3000;
dev.host.jeyerp.az 8000; dev.host.jeyerp.az 1710;
cicd.host.jeyerp.az 8000; cicd.host.jeyerp.az 8000;
} }
# Map hosts that require WebSocket upgrade headers
map $host $upgrade_header {
default "";
jeydev-code.host.jeyerp.az $http_upgrade;
erpnext-ali-code.host.jeyerp.az $http_upgrade;
}
map $host $connection_header {
default "";
jeydev-code.host.jeyerp.az "upgrade";
erpnext-ali-code.host.jeyerp.az "upgrade";
}
# Map hostnames to container names (special cases)
map $host $container { map $host $container {
erpnext-ali-code.host.jeyerp.az erpnext-ali; erpnext-ali-code.host.jeyerp.az erpnext-ali;
jeydev-code.host.jeyerp.az jeydev; jeydev-code.host.jeyerp.az jeydev;
git.host.jeyerp.az jeyerp-git; git.host.jeyerp.az jeyerp-git;
dev.host.jeyerp.az jeyerp-dev; dev.host.jeyerp.az jeyerp-dev;
cicd.host.jeyerp.az jeyerp-cicd; cicd.host.jeyerp.az jeyerp-cicd;
~^(.+)\.host\.jeyerp\.az$ $1; ~^([^.]+)\.host\.jeyerp\.az$ $1;
default ""; default "";
} }
server {
listen 80;
server_name *.host.jeyerp.az;
resolver 10.220.187.1 valid=10s;
location /api/ {
proxy_pass http://$container.incus:$target_port;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
}
location / {
return 301 https://$host$request_uri;
}
}
server { server {
listen 443 ssl; listen 443 ssl;
server_name *.host.jeyerp.az; server_name *.host.jeyerp.az;
ssl_certificate /etc/letsencrypt/live/host.jeyerp.az/fullchain.pem; ssl_certificate /etc/letsencrypt/live/host.jeyerp.az/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/host.jeyerp.az/privkey.pem; ssl_certificate_key /etc/letsencrypt/live/host.jeyerp.az/privkey.pem;
ssl_client_certificate /etc/nginx/ca/ca.crt;
ssl_verify_client optional;
ssl_verify_depth 1;
client_max_body_size 50m;
resolver 10.220.187.1 valid=10s; resolver 10.220.187.1 valid=10s;
location / { location / {
proxy_pass http://$container.incus:$target_port$request_uri; proxy_pass http://$container.incus:$target_port;
proxy_set_header Host $host; proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme; proxy_set_header X-Forwarded-Proto $scheme;
proxy_http_version 1.1; proxy_http_version 1.1;
proxy_set_header Upgrade $upgrade_header; proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $connection_header; proxy_set_header Connection "upgrade";
proxy_read_timeout 3600s;
proxy_send_timeout 3600s;
proxy_redirect off; proxy_redirect off;
} }
@ -64,16 +73,13 @@ server {
ssl_certificate /etc/letsencrypt/live/host.jeyerp.az/fullchain.pem; ssl_certificate /etc/letsencrypt/live/host.jeyerp.az/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/host.jeyerp.az/privkey.pem; ssl_certificate_key /etc/letsencrypt/live/host.jeyerp.az/privkey.pem;
ssl_client_certificate /etc/nginx/ca/ca.crt;
ssl_verify_client off;
location / { location / {
proxy_pass http://192.168.1.1:19999; proxy_pass http://192.168.1.1:19999;
proxy_set_header Host $host; proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_http_version 1.1; proxy_http_version 1.1;
proxy_redirect off; proxy_set_header Connection "";
} }
} }