65 lines
1.9 KiB
Plaintext
65 lines
1.9 KiB
Plaintext
server {
|
|
listen 8080 default_server;
|
|
server_name _;
|
|
return 301 https://$host$request_uri; # redirect to https
|
|
}
|
|
|
|
server {
|
|
listen 8443 ssl;
|
|
#listen [::]:8443;
|
|
server_name _;
|
|
ssl_certificate /etc/nginx/certs/vdglab.net.crt;
|
|
ssl_certificate_key /etc/nginx/certs/vdglab.net.key;
|
|
# allow special characters in headers
|
|
ignore_invalid_headers off;
|
|
# allow any size file to be uploaded.
|
|
# set to a value such as 1000m; to restrict file size to a specific value
|
|
client_max_body_size 0;
|
|
# disable buffering
|
|
proxy_buffering off;
|
|
proxy_request_buffering off;
|
|
|
|
#------- ROOT -------
|
|
location / {
|
|
default_type text/html;
|
|
return 200 "<!DOCTYPE html><h3>Welcome on NGINX proxy SSL!</h3>\n";
|
|
}
|
|
|
|
#------- GRAFANA -------
|
|
location /grafana/ {
|
|
proxy_pass http://grafana:3000/;
|
|
proxy_set_header Host $host;
|
|
}
|
|
|
|
#------- MINIO UI -------
|
|
location /minio/ui/ {
|
|
rewrite ^/minio/ui/(.*) /$1 break;
|
|
proxy_set_header Host $http_host;
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
proxy_set_header X-Forwarded-Proto $scheme;
|
|
proxy_set_header X-NginX-Proxy true;
|
|
|
|
# this is necessary to pass the correct IP to be hashed
|
|
real_ip_header X-Real-IP;
|
|
|
|
proxy_connect_timeout 300;
|
|
|
|
# to support websockets in MinIO versions released after January 2023
|
|
proxy_http_version 1.1;
|
|
proxy_set_header Upgrade $http_upgrade;
|
|
proxy_set_header Connection "upgrade";
|
|
# some environments may encounter CORS errors (Kubernetes + Nginx Ingress)
|
|
# uncomment the following line to set the Origin request to an empty string
|
|
# proxy_set_header Origin '';
|
|
|
|
chunked_transfer_encoding off;
|
|
|
|
proxy_pass http://minio:9001/;
|
|
}
|
|
# location /prometheus/ {
|
|
# #rewrite /prometheus/(.*) /$1 break;
|
|
# proxy_pass http://prometheus:9090/;
|
|
# }
|
|
}
|