289 lines
8.3 KiB
Nginx Configuration File
289 lines
8.3 KiB
Nginx Configuration File
# -*-nginx-*-
|
|
server {
|
|
listen 80;
|
|
server_name *.2020.fet.at;
|
|
include snippets/letsencrypt.conf;
|
|
# root /var/www/html
|
|
# return 301 https://$host$request_uri;
|
|
}
|
|
|
|
|
|
|
|
server {
|
|
listen 443 ssl http2;
|
|
server_name docker.2020.fet.at;
|
|
|
|
ssl_certificate /etc/letsencrypt/live/2020.fet.at/fullchain.pem;
|
|
ssl_certificate_key /etc/letsencrypt/live/2020.fet.at/privkey.pem;
|
|
ssl_trusted_certificate /etc/letsencrypt/live/2020.fet.at/chain.pem;
|
|
include snippets/ssl.conf;
|
|
include snippets/header.conf;
|
|
include snippets/ldap.conf;
|
|
client_max_body_size 100M;
|
|
location / {
|
|
|
|
proxy_pass http://fetsite4:9000;
|
|
include snippets/proxy_header.conf;
|
|
proxy_http_version 1.1;
|
|
proxy_set_header Upgrade $http_upgrade;
|
|
proxy_set_header Connection "upgrade";
|
|
# proxy_set_header Authorization "";
|
|
# proxy_set_header REMOTE_USER $remote_user;
|
|
}
|
|
}
|
|
|
|
server {
|
|
listen 443 ssl http2;
|
|
server_name solr.2020.fet.at;
|
|
|
|
ssl_certificate /etc/letsencrypt/live/2020.fet.at/fullchain.pem;
|
|
ssl_certificate_key /etc/letsencrypt/live/2020.fet.at/privkey.pem;
|
|
ssl_trusted_certificate /etc/letsencrypt/live/2020.fet.at/chain.pem;
|
|
include snippets/ssl.conf;
|
|
include snippets/header.conf;
|
|
include snippets/ldap.conf;
|
|
client_max_body_size 100M;
|
|
location / {
|
|
|
|
proxy_pass http://fetsitedev:8980;
|
|
include snippets/proxy_header.conf;
|
|
proxy_http_version 1.1;
|
|
proxy_set_header Upgrade $http_upgrade;
|
|
proxy_set_header Connection "upgrade";
|
|
# proxy_set_header Authorization "";
|
|
# proxy_set_header REMOTE_USER $remote_user;
|
|
}
|
|
}
|
|
|
|
|
|
server {
|
|
listen 443 ssl http2;
|
|
server_name bot.2020.fet.at;
|
|
|
|
ssl_certificate /etc/letsencrypt/live/2020.fet.at/fullchain.pem;
|
|
ssl_certificate_key /etc/letsencrypt/live/2020.fet.at/privkey.pem;
|
|
ssl_trusted_certificate /etc/letsencrypt/live/2020.fet.at/chain.pem;
|
|
include snippets/ssl.conf;
|
|
# include snippets/header.conf;
|
|
|
|
|
|
client_max_body_size 100M;
|
|
location / {
|
|
include snippets/ldap.conf;
|
|
proxy_pass http://fetsitedev:5000;
|
|
include snippets/proxy_header.conf;
|
|
proxy_http_version 1.1;
|
|
proxy_set_header REMOTE_USER $remote_user;
|
|
proxy_set_header Upgrade $http_upgrade;
|
|
proxy_set_header Connection "upgrade";
|
|
}
|
|
location /income {
|
|
proxy_pass http://fetsitedev:5000;
|
|
include snippets/proxy_header.conf;
|
|
proxy_http_version 1.1;
|
|
proxy_set_header Upgrade $http_upgrade;
|
|
proxy_set_header Connection "upgrade";
|
|
|
|
}
|
|
}
|
|
|
|
|
|
server {
|
|
listen 443 ssl http2;
|
|
server_name uat1.2020.fet.at;
|
|
|
|
ssl_certificate /etc/letsencrypt/live/2020.fet.at/fullchain.pem;
|
|
ssl_certificate_key /etc/letsencrypt/live/2020.fet.at/privkey.pem;
|
|
ssl_trusted_certificate /etc/letsencrypt/live/2020.fet.at/chain.pem;
|
|
include snippets/ssl.conf;
|
|
include snippets/header.conf;
|
|
|
|
client_max_body_size 100M;
|
|
location / {
|
|
|
|
#include snippets/ldap.conf;
|
|
proxy_pass http://fetsite4:8001;
|
|
include snippets/proxy_header.conf;
|
|
proxy_http_version 1.1;
|
|
proxy_set_header Upgrade $http_upgrade;
|
|
proxy_set_header Connection "upgrade";
|
|
# proxy_set_header Authorization "";
|
|
# proxy_set_header REMOTE_USER $remote_user;
|
|
}
|
|
location /api {
|
|
# deny all;
|
|
# allow 192.168.86.1/24;
|
|
# allow 128.130.95.200;
|
|
proxy_pass http://fetsite4:8001;
|
|
include snippets/proxy_header.conf;
|
|
proxy_http_version 1.1;
|
|
proxy_set_header Upgrade $http_upgrade;
|
|
proxy_set_header Connection "upgrade";
|
|
|
|
}
|
|
|
|
|
|
}
|
|
|
|
|
|
server {
|
|
listen 443 ssl http2;
|
|
server_name etherpad2.2020.fet.at;
|
|
|
|
ssl_certificate /etc/letsencrypt/live/2020.fet.at/fullchain.pem;
|
|
ssl_certificate_key /etc/letsencrypt/live/2020.fet.at/privkey.pem;
|
|
ssl_trusted_certificate /etc/letsencrypt/live/2020.fet.at/chain.pem;
|
|
include snippets/ssl.conf;
|
|
# include snippets/header.conf;
|
|
# include snippets/ldap.conf;
|
|
client_max_body_size 1000M;
|
|
location / {
|
|
|
|
proxy_pass http://fetsitedev:80;
|
|
include snippets/proxy_header.conf;
|
|
proxy_http_version 1.1;
|
|
proxy_set_header Upgrade $http_upgrade;
|
|
proxy_set_header Connection "upgrade";
|
|
# proxy_set_header Authorization "";
|
|
# proxy_set_header REMOTE_USER $remote_user;
|
|
}
|
|
}
|
|
|
|
|
|
|
|
|
|
server {
|
|
listen 443 ssl http2;
|
|
server_name *.2020.fet.at;
|
|
|
|
ssl_certificate /etc/letsencrypt/live/2020.fet.at/fullchain.pem;
|
|
ssl_certificate_key /etc/letsencrypt/live/2020.fet.at/privkey.pem;
|
|
ssl_trusted_certificate /etc/letsencrypt/live/2020.fet.at/chain.pem;
|
|
include snippets/ssl.conf;
|
|
# include snippets/header.conf;
|
|
|
|
client_max_body_size 1000M;
|
|
location / {
|
|
include snippets/ldap.conf;
|
|
proxy_pass http://fetsitedev:80;
|
|
include snippets/proxy_header.conf;
|
|
proxy_http_version 1.1;
|
|
proxy_set_header Upgrade $http_upgrade;
|
|
proxy_set_header Connection "upgrade";
|
|
proxy_set_header Authorization "";
|
|
|
|
|
|
proxy_set_header REMOTE_USER $remote_user;
|
|
}
|
|
|
|
location /api {
|
|
satisfy any;
|
|
allow 192.168.86.0/24;
|
|
allow 128.130.95.206;
|
|
allow 128.130.95.200;
|
|
include snippets/ldap.conf;
|
|
# deny all;
|
|
proxy_pass http://fetsitedev:80;
|
|
include snippets/proxy_header.conf;
|
|
proxy_http_version 1.1;
|
|
proxy_set_header Upgrade $http_upgrade;
|
|
proxy_set_header Connection "upgrade";
|
|
proxy_set_header Authorization "";
|
|
proxy_set_header REMOTE_USER $remote_user;
|
|
}
|
|
location /dev {
|
|
satisfy any;
|
|
allow 192.168.86.0/24;
|
|
allow 128.130.95.206;
|
|
allow 128.130.95.200;
|
|
include snippets/ldap.conf;
|
|
# deny all;
|
|
proxy_pass http://fetsitedev:80;
|
|
include snippets/proxy_header.conf;
|
|
proxy_http_version 1.1;
|
|
proxy_set_header Upgrade $http_upgrade;
|
|
proxy_set_header Connection "upgrade";
|
|
proxy_set_header Authorization "";
|
|
proxy_set_header REMOTE_USER $remote_user;
|
|
}
|
|
|
|
|
|
}
|
|
server {
|
|
listen 443 ssl http2;
|
|
server_name patrick.2020.fet.at;
|
|
|
|
ssl_certificate /etc/letsencrypt/live/2020.fet.at/fullchain.pem;
|
|
ssl_certificate_key /etc/letsencrypt/live/2020.fet.at/privkey.pem;
|
|
ssl_trusted_certificate /etc/letsencrypt/live/2020.fet.at/chain.pem;
|
|
include snippets/ssl.conf;
|
|
# include snippets/header.conf;
|
|
client_max_body_size 1000M;
|
|
location / {
|
|
|
|
proxy_pass http://fetsitedev:80;
|
|
include snippets/proxy_header.conf;
|
|
proxy_http_version 1.1;
|
|
proxy_set_header Upgrade $http_upgrade;
|
|
proxy_set_header Connection "upgrade";
|
|
proxy_set_header Authorization "";
|
|
proxy_set_header REMOTE_USER $remote_user;
|
|
}
|
|
location /admin {
|
|
|
|
|
|
proxy_pass http://fetsitedev:80;
|
|
include snippets/proxy_header.conf;
|
|
proxy_http_version 1.1;
|
|
proxy_set_header Upgrade $http_upgrade;
|
|
proxy_set_header Connection "upgrade";
|
|
proxy_set_header Authorization "";
|
|
proxy_set_header REMOTE_USER $remote_user;
|
|
}
|
|
|
|
|
|
}
|
|
|
|
|
|
server {
|
|
listen 443 ssl http2;
|
|
server_name alpha.2020.fet.at;
|
|
|
|
ssl_certificate /etc/letsencrypt/live/2020.fet.at/fullchain.pem;
|
|
ssl_certificate_key /etc/letsencrypt/live/2020.fet.at/privkey.pem;
|
|
ssl_trusted_certificate /etc/letsencrypt/live/2020.fet.at/chain.pem;
|
|
include snippets/ssl.conf;
|
|
# include snippets/header.conf;
|
|
# include snippets/ldap.conf;
|
|
client_max_body_size 1000M;
|
|
location / {
|
|
|
|
proxy_pass http://fetsite6:8001;
|
|
include snippets/proxy_header.conf;
|
|
proxy_http_version 1.1;
|
|
proxy_set_header Upgrade $http_upgrade;
|
|
proxy_set_header Connection "upgrade";
|
|
proxy_set_header Authorization "";
|
|
proxy_set_header REMOTE_USER $remote_user;
|
|
}
|
|
|
|
location /api {
|
|
satisfy any;
|
|
allow 192.168.86.0/24;
|
|
allow 128.130.95.206;
|
|
allow 128.130.95.200;
|
|
include snippets/ldap.conf;
|
|
# deny all;
|
|
proxy_pass http://fetsite6:8001;
|
|
include snippets/proxy_header.conf;
|
|
proxy_http_version 1.1;
|
|
proxy_set_header Upgrade $http_upgrade;
|
|
proxy_set_header Connection "upgrade";
|
|
proxy_set_header Authorization "";
|
|
proxy_set_header REMOTE_USER $remote_user;
|
|
}
|
|
|
|
|
|
}
|
|
|