diff options
author | Mike Gabriel <mike.gabriel@das-netzwerkteam.de> | 2022-01-19 23:42:38 +0100 |
---|---|---|
committer | Mike Gabriel <mike.gabriel@das-netzwerkteam.de> | 2022-01-19 23:42:38 +0100 |
commit | 4b91eefc682e17fd6b90670cf8b4c28ceb2b43e5 (patch) | |
tree | 177cca7b2263731eb1886118fec985d58fe27a44 /data/proxy/nginx | |
parent | 367c226c4e3ad27bae61c5dabc29af92422552bf (diff) | |
download | scalelite-run-itzks-4b91eefc682e17fd6b90670cf8b4c28ceb2b43e5.tar.gz scalelite-run-itzks-4b91eefc682e17fd6b90670cf8b4c28ceb2b43e5.tar.bz2 scalelite-run-itzks-4b91eefc682e17fd6b90670cf8b4c28ceb2b43e5.zip |
Rather see the data/ folder as examples/ for the docker host configuration.
Diffstat (limited to 'data/proxy/nginx')
-rw-r--r-- | data/proxy/nginx/sites-common | 13 | ||||
-rw-r--r-- | data/proxy/nginx/sites.template.scalelite-cluster | 77 | ||||
-rw-r--r-- | data/proxy/nginx/sites.template.scalelite-local | 64 | ||||
-rw-r--r-- | data/proxy/nginx/sites.template.scalelite-local-protected | 61 | ||||
-rw-r--r-- | data/proxy/nginx/sites.template.scalelite-proxy | 69 | ||||
-rw-r--r-- | data/proxy/nginx/sites.template.scalelite-proxy-protected | 61 |
6 files changed, 0 insertions, 345 deletions
diff --git a/data/proxy/nginx/sites-common b/data/proxy/nginx/sites-common deleted file mode 100644 index d906992..0000000 --- a/data/proxy/nginx/sites-common +++ /dev/null @@ -1,13 +0,0 @@ -proxy_read_timeout 60s; -proxy_redirect off; - -proxy_set_header Host $http_host; - -proxy_set_header X-Real-IP $remote_addr; -proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; - -proxy_set_header X-Forwarded-Proto $scheme; - -proxy_http_version 1.1; -proxy_set_header Upgrade $http_upgrade; -proxy_set_header Connection "upgrade"; diff --git a/data/proxy/nginx/sites.template.scalelite-cluster b/data/proxy/nginx/sites.template.scalelite-cluster deleted file mode 100644 index 395fabe..0000000 --- a/data/proxy/nginx/sites.template.scalelite-cluster +++ /dev/null @@ -1,77 +0,0 @@ -#### For <$NGINX_HOSTNAME> - -upstream docker-scalelite-api { - server scalelite-api-1:80 max_fails=3 fail_timeout=30s; - server scalelite-api-2:80 max_fails=3 fail_timeout=30s; -} - -upstream docker-scalelite-recordings { - server scalelite-recordings-1:80 max_fails=3 fail_timeout=30s; - server scalelite-recordings-2:80 max_fails=3 fail_timeout=30s; -} - -server { - server_name $NGINX_HOSTNAME; - - listen 80; - listen [::]:80; - - location /.well-known/acme-challenge/ { - root /var/www/certbot; - } - - location / { - return 301 https://$host$request_uri; - } -} - -server { - server_name $NGINX_HOSTNAME; - - listen 443 ssl; - listen [::]:443 ssl; - - ## Configuration for Letsencrypt SSL Certificate - ssl_certificate /etc/letsencrypt/live/$NGINX_HOSTNAME/fullchain.pem; - ssl_certificate_key /etc/letsencrypt/live/$NGINX_HOSTNAME/privkey.pem; - - ## Configuration for SSL Certificate from a CA other than LetsEncrypt - #ssl_certificate /etc/ssl/fullchain.pem; - #ssl_certificate_key /etc/ssl/privkey.pem; - - location /bigbluebutton/api/ { - proxy_pass http://docker-scalelite-api; - - proxy_read_timeout 60s; - proxy_redirect off; - - proxy_set_header Host $http_host; - - proxy_set_header X-Real-IP $remote_addr; - proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; - - proxy_set_header X-Forwarded-Proto $scheme; - - proxy_http_version 1.1; - proxy_set_header Upgrade $http_upgrade; - proxy_set_header Connection "upgrade"; - } - - location / { - proxy_pass http://docker-scalelite-recordings; - - proxy_read_timeout 60s; - proxy_redirect off; - - proxy_set_header Host $http_host; - - proxy_set_header X-Real-IP $remote_addr; - proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; - - proxy_set_header X-Forwarded-Proto $scheme; - - proxy_http_version 1.1; - proxy_set_header Upgrade $http_upgrade; - proxy_set_header Connection "upgrade"; - } -} diff --git a/data/proxy/nginx/sites.template.scalelite-local b/data/proxy/nginx/sites.template.scalelite-local deleted file mode 100644 index dfb5f97..0000000 --- a/data/proxy/nginx/sites.template.scalelite-local +++ /dev/null @@ -1,64 +0,0 @@ -#### For <$NGINX_HOSTNAME> - -upstream docker-scalelite-api { - server $NGINX_HOSTNAME:3000; -} - -upstream docker-scalelite-recordings { - server scalelite-recordings:80; -} - -server { - server_name $NGINX_HOSTNAME; - - listen 80; - listen [::]:80; - - location /.well-known/acme-challenge/ { - root /var/www/certbot; - } - - location / { - return 301 https://$host$request_uri; - } -} - -server { - server_name $NGINX_HOSTNAME; - - listen 443 ssl; - listen [::]:443 ssl; - - ## Configuration for Letsencrypt SSL Certificate - ssl_certificate /etc/letsencrypt/live/$NGINX_HOSTNAME/fullchain.pem; - ssl_certificate_key /etc/letsencrypt/live/$NGINX_HOSTNAME/privkey.pem; - - ## Configuration for SSL Certificate from a CA other than LetsEncrypt - #ssl_certificate /etc/ssl/fullchain.pem; - #ssl_certificate_key /etc/ssl/privkey.pem; - - location /health_check { - proxy_pass http://docker-scalelite-api; - include /etc/nginx/sites-common; - } - - location /bigbluebutton/api/ { - proxy_pass http://docker-scalelite-api; - include /etc/nginx/sites-common; - } - - location /presentation/ { - proxy_pass http://docker-scalelite-recordings; - include /etc/nginx/sites-common; - } - - location /playback/ { - proxy_pass http://docker-scalelite-recordings; - include /etc/nginx/sites-common; - } - - location / { - proxy_pass http://docker-scalelite-api/health_check; - include /etc/nginx/sites-common; - } -} diff --git a/data/proxy/nginx/sites.template.scalelite-local-protected b/data/proxy/nginx/sites.template.scalelite-local-protected deleted file mode 100644 index d53d130..0000000 --- a/data/proxy/nginx/sites.template.scalelite-local-protected +++ /dev/null @@ -1,61 +0,0 @@ -#### For <$NGINX_HOSTNAME> - -upstream docker-scalelite-api { - server $NGINX_HOSTNAME:3000; -} - -upstream docker-scalelite-recordings { - server scalelite-recordings:80; -} - -server { - server_name $NGINX_HOSTNAME; - - listen 80; - listen [::]:80; - - location /.well-known/acme-challenge/ { - root /var/www/certbot; - } - - location / { - return 301 https://$host$request_uri; - } -} - -server { - server_name $NGINX_HOSTNAME; - - listen 443 ssl; - listen [::]:443 ssl; - - ## Configuration for Letsencrypt SSL Certificate - ssl_certificate /etc/letsencrypt/live/$NGINX_HOSTNAME/fullchain.pem; - ssl_certificate_key /etc/letsencrypt/live/$NGINX_HOSTNAME/privkey.pem; - - ## Configuration for SSL Certificate from a CA other than LetsEncrypt - #ssl_certificate /etc/ssl/fullchain.pem; - #ssl_certificate_key /etc/ssl/privkey.pem; - - location /health_check { - proxy_pass http://docker-scalelite-api; - include /etc/nginx/sites-common; - } - - location /static-resource/ { - rewrite /static-resource(/|$)(.*) /$2 break; - proxy_pass http://docker-scalelite-recordings; - include /etc/nginx/sites-common; - internal; - } - - location /playback { - proxy_pass http://docker-scalelite-recordings; - include /etc/nginx/sites-common; - } - - location / { - proxy_pass http://docker-scalelite-api; - include /etc/nginx/sites-common; - } -} diff --git a/data/proxy/nginx/sites.template.scalelite-proxy b/data/proxy/nginx/sites.template.scalelite-proxy deleted file mode 100644 index c099bcb..0000000 --- a/data/proxy/nginx/sites.template.scalelite-proxy +++ /dev/null @@ -1,69 +0,0 @@ -#### For <$NGINX_HOSTNAME> - -upstream docker-scalelite-api { - server scalelite-api:3000; -} - -upstream docker-scalelite-recordings { - server scalelite-recordings:80; -} - -server { - server_name $NGINX_HOSTNAME; - - listen 80; - listen [::]:80; - - location /.well-known/acme-challenge/ { - root /var/www/certbot; - } - - location / { - return 301 https://$host$request_uri; - } -} - -server { - server_name $NGINX_HOSTNAME; - - listen 443 ssl http2; - listen [::]:443 ssl http2; - - ssl_protocols TLSv1.2 TLSv1.3; - ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384; - ssl_prefer_server_ciphers on; - ssl_session_cache shared:SSL:10m; - - ## Configuration for Letsencrypt SSL Certificate - ssl_certificate /etc/letsencrypt/live/$NGINX_HOSTNAME/fullchain.pem; - ssl_certificate_key /etc/letsencrypt/live/$NGINX_HOSTNAME/privkey.pem; - - ## Configuration for SSL Certificate from a CA other than LetsEncrypt - #ssl_certificate /etc/ssl/fullchain.pem; - #ssl_certificate_key /etc/ssl/privkey.pem; - - location /health_check { - proxy_pass http://docker-scalelite-api; - include /etc/nginx/sites-common; - } - - location /bigbluebutton/api/ { - proxy_pass http://docker-scalelite-api; - include /etc/nginx/sites-common; - } - - location /presentation/ { - proxy_pass http://docker-scalelite-recordings; - include /etc/nginx/sites-common; - } - - location /playback/ { - proxy_pass http://docker-scalelite-recordings; - include /etc/nginx/sites-common; - } - - location / { - proxy_pass http://docker-scalelite-api/health_check; - include /etc/nginx/sites-common; - } -} diff --git a/data/proxy/nginx/sites.template.scalelite-proxy-protected b/data/proxy/nginx/sites.template.scalelite-proxy-protected deleted file mode 100644 index 5a8403a..0000000 --- a/data/proxy/nginx/sites.template.scalelite-proxy-protected +++ /dev/null @@ -1,61 +0,0 @@ -#### For <$NGINX_HOSTNAME> - -upstream docker-scalelite-api { - server scalelite-api:3000; -} - -upstream docker-scalelite-recordings { - server scalelite-recordings:80; -} - -server { - server_name $NGINX_HOSTNAME; - - listen 80; - listen [::]:80; - - location /.well-known/acme-challenge/ { - root /var/www/certbot; - } - - location / { - return 301 https://$host$request_uri; - } -} - -server { - server_name $NGINX_HOSTNAME; - - listen 443 ssl; - listen [::]:443 ssl; - - ## Configuration for Letsencrypt SSL Certificate - ssl_certificate /etc/letsencrypt/live/$NGINX_HOSTNAME/fullchain.pem; - ssl_certificate_key /etc/letsencrypt/live/$NGINX_HOSTNAME/privkey.pem; - - ## Configuration for SSL Certificate from a CA other than LetsEncrypt - #ssl_certificate /etc/ssl/fullchain.pem; - #ssl_certificate_key /etc/ssl/privkey.pem; - - location /health_check { - proxy_pass http://docker-scalelite-api; - include /etc/nginx/sites-common; - } - - location /static-resource/ { - rewrite /static-resource(/|$)(.*) /$2 break; - proxy_pass http://docker-scalelite-recordings; - include /etc/nginx/sites-common; - internal; - } - - location /playback { - proxy_pass http://docker-scalelite-recordings; - include /etc/nginx/sites-common; - } - - location / { - proxy_pass http://docker-scalelite-api; - include /etc/nginx/sites-common; - } -} |