86 lines
2.5 KiB
Plaintext
86 lines
2.5 KiB
Plaintext
map $host $target_port {
|
|
default 80;
|
|
ui.host.jeyerp.az 5000;
|
|
jeydev-code.host.jeyerp.az 1710;
|
|
erpnext-ali-code.host.jeyerp.az 1710;
|
|
git.host.jeyerp.az 3000;
|
|
dev.host.jeyerp.az 1710;
|
|
cicd.host.jeyerp.az 8000;
|
|
}
|
|
|
|
map $host $container {
|
|
erpnext-ali-code.host.jeyerp.az erpnext-ali;
|
|
jeydev-code.host.jeyerp.az jeydev;
|
|
git.host.jeyerp.az jeyerp-git;
|
|
dev.host.jeyerp.az jeyerp-dev;
|
|
cicd.host.jeyerp.az jeyerp-cicd;
|
|
~^([^.]+)\.host\.jeyerp\.az$ $1;
|
|
default "";
|
|
}
|
|
|
|
server {
|
|
listen 80;
|
|
server_name *.host.jeyerp.az;
|
|
|
|
resolver 10.220.187.1 valid=10s;
|
|
|
|
location /api/ {
|
|
proxy_pass http://$container.incus:$target_port;
|
|
proxy_set_header Host $host;
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
proxy_set_header X-Forwarded-Proto $scheme;
|
|
}
|
|
|
|
location / {
|
|
return 301 https://$host$request_uri;
|
|
}
|
|
}
|
|
|
|
server {
|
|
listen 443 ssl;
|
|
server_name *.host.jeyerp.az;
|
|
|
|
ssl_certificate /etc/letsencrypt/live/host.jeyerp.az/fullchain.pem;
|
|
ssl_certificate_key /etc/letsencrypt/live/host.jeyerp.az/privkey.pem;
|
|
ssl_client_certificate /etc/nginx/ca/ca.crt;
|
|
ssl_verify_client optional;
|
|
ssl_verify_depth 1;
|
|
|
|
client_max_body_size 50m;
|
|
|
|
resolver 10.220.187.1 valid=10s;
|
|
|
|
location / {
|
|
proxy_pass http://$container.incus:$target_port;
|
|
proxy_set_header Host $host;
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
proxy_set_header X-Forwarded-Proto $scheme;
|
|
proxy_http_version 1.1;
|
|
proxy_set_header Upgrade $http_upgrade;
|
|
proxy_set_header Connection "upgrade";
|
|
proxy_read_timeout 3600s;
|
|
proxy_send_timeout 3600s;
|
|
|
|
proxy_redirect off;
|
|
}
|
|
}
|
|
|
|
server {
|
|
listen 443 ssl;
|
|
server_name monitoring.host.jeyerp.az;
|
|
|
|
ssl_certificate /etc/letsencrypt/live/host.jeyerp.az/fullchain.pem;
|
|
ssl_certificate_key /etc/letsencrypt/live/host.jeyerp.az/privkey.pem;
|
|
ssl_client_certificate /etc/nginx/ca/ca.crt;
|
|
ssl_verify_client off;
|
|
|
|
location / {
|
|
proxy_pass http://192.168.1.1:19999;
|
|
proxy_set_header Host $host;
|
|
proxy_http_version 1.1;
|
|
proxy_set_header Connection "";
|
|
}
|
|
}
|