Add copyright headers to comply with Arvados
[arvados-formula.git] / test / salt / pillar / examples / nginx_controller_configuration.sls
1 ---
2 # Copyright (C) The Arvados Authors. All rights reserved.
3 #
4 # SPDX-License-Identifier: Apache-2.0
5
6 ### NGINX
7 nginx:
8   ### SERVER
9   server:
10     config:
11       ### STREAMS
12       http:
13         'geo $external_client':
14           default: 1
15           '127.0.0.0/8': 0
16         upstream controller_upstream:
17           - server: 'controller.internal:8003  fail_timeout=10s'
18
19   ### SITES
20   servers:
21     managed:
22       ### DEFAULT
23       arvados_controller_default.conf:
24         enabled: true
25         overwrite: true
26         config:
27           - server:
28             - server_name: fixme.example.net
29             - listen:
30               - 80 default
31             - location /.well-known:
32               - root: /var/www
33             - location /:
34               - return: '301 https://$host$request_uri'
35
36       arvados_controller_ssl.conf:
37         enabled: true
38         overwrite: true
39         config:
40           - server:
41             - server_name: fixme.example.net
42             - listen:
43               - 443 http2 ssl
44             - index: index.html index.htm
45             - location /:
46               - proxy_pass: 'http://controller_upstream'
47               - proxy_read_timeout: 300
48               - proxy_connect_timeout: 90
49               - proxy_redirect: 'off'
50               - proxy_set_header: X-Forwarded-Proto https
51               - proxy_set_header: 'Host $http_host'
52               - proxy_set_header: 'X-Real-IP $remote_addr'
53               - proxy_set_header: 'X-Forwarded-For $proxy_add_x_forwarded_for'
54               - proxy_set_header: 'X-External-Client $external_client'
55             - include: 'snippets/ssl_hardening_default.conf'
56             # - include: 'snippets/letsencrypt.conf'
57             - include: 'snippets/ssl_snakeoil.conf'
58             - access_log: /var/log/nginx/fixme.example.net.access.log combined
59             - error_log: /var/log/nginx/fixme.example.net.error.log
60             - client_max_body_size: 128m