map $http_upgrade $connection_upgrade { default upgrade; '' close; } server { listen 8080 default_server; server_name _; return 301 https://$host$request_uri; # redirect to https } server { listen 8443 ssl; #listen [::]:8443; server_name _; ssl_certificate /etc/nginx/certs/tls.crt; ssl_certificate_key /etc/nginx/certs/tls.key; # allow special characters in headers ignore_invalid_headers off; # allow any size file to be uploaded. # set to a value such as 1000m; to restrict file size to a specific value client_max_body_size 0; # disable buffering proxy_buffering off; proxy_request_buffering off; #------- ROOT ------- location / { default_type text/html; return 200 "

Welcome on NGINX proxy SSL!

\n"; } #------- GRAFANA ------- location /grafana { proxy_set_header Host $host; proxy_pass http://grafana:3000/; rewrite ^/grafana/(.*) /$1 break; } # Proxy Grafana Live WebSocket connections. location /grafana/api/live/ { proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection $connection_upgrade; proxy_set_header Host $host; proxy_pass http://grafana:3000; rewrite ^/grafana/(.*) /$1 break; } #------- MINIO UI ------- location /minio/ui/ { rewrite ^/minio/ui/(.*) /$1 break; proxy_set_header Host $http_host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $scheme; proxy_set_header X-NginX-Proxy true; # this is necessary to pass the correct IP to be hashed real_ip_header X-Real-IP; proxy_connect_timeout 300; # to support websockets in MinIO versions released after January 2023 proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; # some environments may encounter CORS errors (Kubernetes + Nginx Ingress) # uncomment the following line to set the Origin request to an empty string # proxy_set_header Origin ''; chunked_transfer_encoding off; proxy_pass http://minio:9001/; } # location /prometheus/ { # #rewrite /prometheus/(.*) /$1 break; # proxy_pass http://prometheus:9090/; # } }