socket.io fix
This commit is contained in:
parent
3228cdaf10
commit
2a38468061
62
default.conf
62
default.conf
|
|
@ -1,58 +1,67 @@
|
|||
# Map hostnames to ports
|
||||
map $host $target_port {
|
||||
default 80;
|
||||
ui.host.jeyerp.az 5000;
|
||||
jeydev-code.host.jeyerp.az 1710;
|
||||
erpnext-ali-code.host.jeyerp.az 1710;
|
||||
git.host.jeyerp.az 3000;
|
||||
dev.host.jeyerp.az 8000;
|
||||
dev.host.jeyerp.az 1710;
|
||||
cicd.host.jeyerp.az 8000;
|
||||
}
|
||||
|
||||
# Map hosts that require WebSocket upgrade headers
|
||||
map $host $upgrade_header {
|
||||
default "";
|
||||
jeydev-code.host.jeyerp.az $http_upgrade;
|
||||
erpnext-ali-code.host.jeyerp.az $http_upgrade;
|
||||
}
|
||||
|
||||
map $host $connection_header {
|
||||
default "";
|
||||
jeydev-code.host.jeyerp.az "upgrade";
|
||||
erpnext-ali-code.host.jeyerp.az "upgrade";
|
||||
}
|
||||
|
||||
# Map hostnames to container names (special cases)
|
||||
map $host $container {
|
||||
erpnext-ali-code.host.jeyerp.az erpnext-ali;
|
||||
jeydev-code.host.jeyerp.az jeydev;
|
||||
git.host.jeyerp.az jeyerp-git;
|
||||
dev.host.jeyerp.az jeyerp-dev;
|
||||
cicd.host.jeyerp.az jeyerp-cicd;
|
||||
~^(.+)\.host\.jeyerp\.az$ $1;
|
||||
~^([^.]+)\.host\.jeyerp\.az$ $1;
|
||||
default "";
|
||||
}
|
||||
|
||||
server {
|
||||
listen 80;
|
||||
server_name *.host.jeyerp.az;
|
||||
|
||||
resolver 10.220.187.1 valid=10s;
|
||||
|
||||
location /api/ {
|
||||
proxy_pass http://$container.incus:$target_port;
|
||||
proxy_set_header Host $host;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
}
|
||||
|
||||
location / {
|
||||
return 301 https://$host$request_uri;
|
||||
}
|
||||
}
|
||||
|
||||
server {
|
||||
listen 443 ssl;
|
||||
server_name *.host.jeyerp.az;
|
||||
|
||||
ssl_certificate /etc/letsencrypt/live/host.jeyerp.az/fullchain.pem;
|
||||
ssl_certificate_key /etc/letsencrypt/live/host.jeyerp.az/privkey.pem;
|
||||
ssl_client_certificate /etc/nginx/ca/ca.crt;
|
||||
ssl_verify_client optional;
|
||||
ssl_verify_depth 1;
|
||||
|
||||
client_max_body_size 50m;
|
||||
|
||||
resolver 10.220.187.1 valid=10s;
|
||||
|
||||
location / {
|
||||
proxy_pass http://$container.incus:$target_port$request_uri;
|
||||
|
||||
proxy_pass http://$container.incus:$target_port;
|
||||
proxy_set_header Host $host;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
|
||||
proxy_http_version 1.1;
|
||||
proxy_set_header Upgrade $upgrade_header;
|
||||
proxy_set_header Connection $connection_header;
|
||||
proxy_set_header Upgrade $http_upgrade;
|
||||
proxy_set_header Connection "upgrade";
|
||||
proxy_read_timeout 3600s;
|
||||
proxy_send_timeout 3600s;
|
||||
|
||||
proxy_redirect off;
|
||||
}
|
||||
|
|
@ -64,16 +73,13 @@ server {
|
|||
|
||||
ssl_certificate /etc/letsencrypt/live/host.jeyerp.az/fullchain.pem;
|
||||
ssl_certificate_key /etc/letsencrypt/live/host.jeyerp.az/privkey.pem;
|
||||
ssl_client_certificate /etc/nginx/ca/ca.crt;
|
||||
ssl_verify_client off;
|
||||
|
||||
location / {
|
||||
proxy_pass http://192.168.1.1:19999;
|
||||
|
||||
proxy_set_header Host $host;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
|
||||
proxy_http_version 1.1;
|
||||
proxy_redirect off;
|
||||
proxy_set_header Connection "";
|
||||
}
|
||||
}
|
||||
Loading…
Reference in New Issue