test/salt/pillar/examples/nginx_controller_configuration.sls

   1 ---
   2 ### NGINX
   3 nginx:
   4   ### SERVER
   5   server:
   6     config:
   7       ### STREAMS
   8       http:
   9         'geo $external_client':
  10           default: 1
  11           '127.0.0.0/8': 0
  12         upstream controller_upstream:
  13           - server: '127.0.0.2:8003  fail_timeout=10s'
  14
  15   ### SITES
  16   servers:
  17     managed:
  18       ### DEFAULT
  19       arvados_controller_default.conf:
  20         enabled: true
  21         overwrite: true
  22         config:
  23           - server:
  24             - server_name: fixme.example.net
  25             - listen:
  26               - 80 default
  27             - location /.well-known:
  28               - root: /var/www
  29             - location /:
  30               - return: '301 https://$host$request_uri'
  31
  32       arvados_controller_ssl.conf:
  33         enabled: true
  34         overwrite: true
  35         config:
  36           - server:
  37             - server_name: fixme.example.net
  38             - listen:
  39               - 443 http2 ssl
  40             - index: index.html index.htm
  41             - location /:
  42               - proxy_pass: 'http://controller_upstream'
  43               - proxy_read_timeout: 300
  44               - proxy_connect_timeout: 90
  45               - proxy_redirect: 'off'
  46               - proxy_set_header: X-Forwarded-Proto https
  47               - proxy_set_header: 'Host $http_host'
  48               - proxy_set_header: 'X-Real-IP $remote_addr'
  49               - proxy_set_header: 'X-Forwarded-For $proxy_add_x_forwarded_for'
  50               - proxy_set_header: 'X-External-Client $external_client'
  51             - include: 'snippets/ssl_hardening_default.conf'
  52             # - include: 'snippets/letsencrypt.conf'
  53             - include: 'snippets/ssl_snakeoil.conf'
  54             - access_log: /var/log/nginx/fixme.example.net.access.log combined
  55             - error_log: /var/log/nginx/fixme.example.net.error.log
  56             - client_max_body_size: 128m