mirror of
https://gitlab.archlinux.org/archlinux/infrastructure.git
synced 2026-11-06 09:18:46 +01:00
Mark HegrebergandChristian Heusel
410f59cb5a
these are all the systems that the new redirect snippet can be cleanly applied to. there are a few others not included, that will need a more manual approach: - gitlab (multiple domains) - mta.sts(multiple domains) - archweb(mutltiple domains, snippets) - buildbtw(dynamic dev domains) - redirects(different structure) - public html(multiple domains) - archweb maintenence(different structure) - maintenence(different structure) some of these might be solvable by tweaking the snippet to accept multiple domains. I'll look into this Co-authored-by: Christian Heusel <christian@heusel.eu>
75 lines
2.7 KiB
Django/Jinja
75 lines
2.7 KiB
Django/Jinja
{% for config in matrix_nginx_config %}
|
|
upstream matrix_{{ config.name }} {
|
|
server 127.0.0.1:{{ config.port }};
|
|
}
|
|
|
|
{% endfor %}
|
|
|
|
include snippets/redirect-80.conf;
|
|
|
|
server {
|
|
include snippets/listen-443.conf;
|
|
server_name {{ matrix_domain }};
|
|
|
|
access_log /var/log/nginx/{{ matrix_domain }}/access.log reduced;
|
|
access_log /var/log/nginx/{{ matrix_domain }}/access.log.json json_reduced;
|
|
error_log /var/log/nginx/{{ matrix_domain }}/error.log;
|
|
|
|
ssl_certificate /etc/letsencrypt/live/{{ matrix_domain }}/fullchain.pem;
|
|
ssl_certificate_key /etc/letsencrypt/live/{{ matrix_domain }}/privkey.pem;
|
|
|
|
{% for config in matrix_nginx_config %}
|
|
# {{ config.name }}
|
|
{% for location in config.locations %}
|
|
{% if location is string %}
|
|
{% set location = { 'path': location } %}
|
|
{% endif %}
|
|
location {{ location.path }} {
|
|
access_log /var/log/nginx/{{ matrix_domain }}/access.log main;
|
|
access_log /var/log/nginx/{{ matrix_domain }}/access.log.json json_main;
|
|
{% if location.add_cors | default(false) %}
|
|
include snippets/headers.conf;
|
|
add_header Access-Control-Allow-Origin "*" always;
|
|
add_header Access-Control-Allow-Methods "GET,HEAD,POST,PUT,DELETE,OPTIONS" always;
|
|
add_header Access-Control-Allow-Headers "Authorization,Content-Type,Accept,Origin,User-Agent,DNT,Cache-Control,X-Mx-ReqToken,Keep-Alive,X-Requested-With,If-Modified-Since,Date" always;
|
|
add_header Access-Control-Expose-Headers "Content-Length,Content-Range" always;
|
|
add_header Access-Control-Max-Age 1728000;
|
|
{% endif %}
|
|
proxy_pass http://matrix_{{ config.name }}{{ location.pass | default('') }};
|
|
proxy_http_version 1.1;
|
|
proxy_set_header X-Forwarded-For $remote_addr;
|
|
proxy_set_header X-Forwarded-Proto $scheme;
|
|
proxy_set_header Host $host;
|
|
proxy_read_timeout 900s;
|
|
client_max_body_size {{ matrix_max_upload_size }};
|
|
}
|
|
{% endfor %}
|
|
|
|
{% endfor %}
|
|
{% for ep in matrix_metrics_endpoints %}
|
|
location = /metrics/{{ ep.name }} {
|
|
if ($http_authorization != "Bearer {{ vault_matrix_metrics_token }}") {
|
|
return 403;
|
|
}
|
|
proxy_pass http://127.0.0.1:{{ ep.port }}/{{ ep.path | default('') }};
|
|
}
|
|
|
|
{% endfor %}
|
|
location = /metrics {
|
|
if ($http_authorization != "Bearer {{ vault_matrix_metrics_token }}") {
|
|
return 403;
|
|
}
|
|
default_type text/plain;
|
|
return 200 "Available endpoints:\n{% for ep in matrix_metrics_endpoints %} /metrics/{{ ep.name }}\n{% endfor %}";
|
|
}
|
|
|
|
location = / {
|
|
default_type text/plain;
|
|
return 200 "Nothing to see here.";
|
|
}
|
|
|
|
location / {
|
|
return 404;
|
|
}
|
|
}
|