test/salt/pillar/examples/nginx_workbench_configuration.sls

   1 ---
   2 {% set nginx_log = '/var/log/nginx' %}
   3
   4 ### ARVADOS
   5 arvados:
   6   config:
   7     group: www-data
   8
   9 ### NGINX
  10 nginx:
  11   ### SERVER
  12   server:
  13     config:
  14
  15       ### STREAMS
  16       http:
  17         upstream workbench_upstream:
  18           - server: '127.0.0.1:9000 fail_timeout=10s'
  19
  20   ### SITES
  21   servers:
  22     managed:
  23       ### DEFAULT
  24       arvados_workbench_default:
  25         enabled: true
  26         overwrite: true
  27         config:
  28           - server:
  29             - server_name: workbench.example.net
  30             - listen:
  31               - 80
  32             - location /.well-known:
  33               - root: /var/www
  34             - location /:
  35               - return: '301 https://$host$request_uri'
  36
  37       arvados_workbench:
  38         enabled: true
  39         overwrite: true
  40         config:
  41           - server:
  42             - server_name: workbench.example.net
  43             - listen:
  44               - 443 http2 ssl
  45             - index: index.html index.htm
  46             - location /:
  47               - proxy_pass: 'http://workbench_upstream'
  48               - proxy_read_timeout: 300
  49               - proxy_connect_timeout: 90
  50               - proxy_redirect: 'off'
  51               - proxy_set_header: X-Forwarded-Proto https
  52               - proxy_set_header: 'Host $http_host'
  53               - proxy_set_header: 'X-Real-IP $remote_addr'
  54               - proxy_set_header: 'X-Forwarded-For $proxy_add_x_forwarded_for'
  55             # - include: 'snippets/letsencrypt.conf'
  56             - include: 'snippets/snakeoil.conf'
  57             - access_log: {{ nginx_log }}/workbench.example.net.access.log combined
  58             - error_log: {{ nginx_log }}/workbench.example.net.error.log
  59
  60       arvados_workbench_upstream:
  61         enabled: true
  62         overwrite: true
  63         config:
  64           - server:
  65             - listen: '127.0.0.1:9000'
  66             - server_name: workbench
  67             - root: /var/www/arvados-workbench/current/public
  68             - index:  index.html index.htm
  69             # yamllint disable-line rule:line-length
  70             - access_log: {{ nginx_log }}/workbench.example.net-upstream.access.log combined
  71             - error_log: {{ nginx_log }}/workbench.example.net-upstream.error.log