Update gipat
This commit is contained in:
23
services/ingress/home-kush.conf
Normal file
23
services/ingress/home-kush.conf
Normal file
@@ -0,0 +1,23 @@
|
||||
map $http_upgrade $connection_upgrade {
|
||||
default upgrade;
|
||||
'' close;
|
||||
}
|
||||
|
||||
server {
|
||||
server_name home-kush.maksim-pankov.ru;
|
||||
location / {
|
||||
proxy_pass http://192.168.0.101:8123/;
|
||||
|
||||
proxy_set_header Host $host;
|
||||
proxy_http_version 1.1;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header Upgrade $http_upgrade;
|
||||
proxy_set_header Connection $connection_upgrade;
|
||||
}
|
||||
|
||||
listen 443 ssl; # managed by Certbot
|
||||
|
||||
ssl_certificate /etc/letsencrypt/live/home-kush.maksim-pankov.ru/fullchain.pem; # managed by Certbot
|
||||
ssl_certificate_key /etc/letsencrypt/live/home-kush.maksim-pankov.ru/privkey.pem; # managed by Certbot
|
||||
}
|
||||
|
||||
@@ -2,12 +2,17 @@ server {
|
||||
server_name cloud.maksim-pankov.ru;
|
||||
location / {
|
||||
proxy_pass http://gipat:5002/;
|
||||
sub_filter "http://gipat:5002/" "https://cloud.maksim-pankov.ru/";
|
||||
sub_filter "http://gipat:5002/" "https://cloud.maksim-pankov.ru/";
|
||||
proxy_set_header Host $host;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
|
||||
add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload" always;
|
||||
client_max_body_size 0;
|
||||
}
|
||||
|
||||
|
||||
listen 443 ssl; # managed by Certbot
|
||||
listen 443 ssl http2; # managed by Certbot
|
||||
ssl_certificate /etc/letsencrypt/live/cloud.maksim-pankov.ru/fullchain.pem; # managed by Certbot
|
||||
ssl_certificate_key /etc/letsencrypt/live/cloud.maksim-pankov.ru/privkey.pem; # managed by Certbot
|
||||
include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
|
||||
@@ -25,4 +30,4 @@ server {
|
||||
return 404; # managed by Certbot
|
||||
|
||||
|
||||
}
|
||||
}
|
||||
|
||||
38
services/ingress/signaling.conf
Normal file
38
services/ingress/signaling.conf
Normal file
@@ -0,0 +1,38 @@
|
||||
server {
|
||||
server_name signaling.maksim-pankov.ru;
|
||||
location / {
|
||||
proxy_pass http://gipat:1988/;
|
||||
proxy_set_header Host $host;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
|
||||
proxy_http_version 1.1;
|
||||
proxy_set_header Upgrade $http_upgrade;
|
||||
proxy_set_header Connection "upgrade";
|
||||
# proxy_read_timeout 86400;
|
||||
|
||||
client_max_body_size 0;
|
||||
}
|
||||
|
||||
|
||||
|
||||
|
||||
listen 443 ssl; # managed by Certbot
|
||||
ssl_certificate /etc/letsencrypt/live/signaling.maksim-pankov.ru/fullchain.pem; # managed by Certbot
|
||||
ssl_certificate_key /etc/letsencrypt/live/signaling.maksim-pankov.ru/privkey.pem; # managed by Certbot
|
||||
include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
|
||||
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
|
||||
|
||||
}
|
||||
server {
|
||||
if ($host = signaling.maksim-pankov.ru) {
|
||||
return 301 https://$host$request_uri;
|
||||
} # managed by Certbot
|
||||
|
||||
|
||||
server_name signaling.maksim-pankov.ru;
|
||||
listen 80;
|
||||
return 404; # managed by Certbot
|
||||
|
||||
|
||||
}
|
||||
Reference in New Issue
Block a user