X-Git-Url: https://git.arvados.org/arvados-formula.git/blobdiff_plain/6c52de7c70c90784df58e6dbc6c43a71b9cc7e7c..ad8af2094ca06d93dba1f61f3e96587b12e7f667:/test/salt/pillar/examples/nginx_workbench_configuration.sls diff --git a/test/salt/pillar/examples/nginx_workbench_configuration.sls b/test/salt/pillar/examples/nginx_workbench_configuration.sls index fbadc58..37fa31c 100644 --- a/test/salt/pillar/examples/nginx_workbench_configuration.sls +++ b/test/salt/pillar/examples/nginx_workbench_configuration.sls @@ -1,4 +1,8 @@ --- +# Copyright (C) The Arvados Authors. All rights reserved. +# +# SPDX-License-Identifier: Apache-2.0 + {%- if grains.os_family in ('RedHat',) %} {%- set group = 'nginx' %} {%- else %} @@ -12,15 +16,6 @@ arvados: ### NGINX nginx: - ### SERVER - server: - config: - - ### STREAMS - http: - upstream workbench_upstream: - - server: 'workbench.internal:9000 fail_timeout=10s' - ### SITES servers: managed: @@ -41,37 +36,19 @@ nginx: arvados_workbench_ssl.conf: enabled: true overwrite: true + requires: + file: nginx_snippet_arvados-snakeoil.conf config: - server: - server_name: workbench.fixme.example.net - listen: - 443 http2 ssl + - root: /var/www/arvados-workbench/current/public + - passenger_enabled: 'on' - index: index.html index.htm - - location /: - - proxy_pass: 'http://workbench_upstream' - - proxy_read_timeout: 300 - - proxy_connect_timeout: 90 - - proxy_redirect: 'off' - - proxy_set_header: X-Forwarded-Proto https - - proxy_set_header: 'Host $http_host' - - proxy_set_header: 'X-Real-IP $remote_addr' - - proxy_set_header: 'X-Forwarded-For $proxy_add_x_forwarded_for' - include: 'snippets/ssl_hardening_default.conf' - # - include: 'snippets/letsencrypt.conf' - - include: 'snippets/ssl_snakeoil.conf' + - include: 'snippets/arvados-snakeoil.conf' + # yamllint disable-line rule:line-length - access_log: /var/log/nginx/workbench.fixme.example.net.access.log combined - error_log: /var/log/nginx/workbench.fixme.example.net.error.log - arvados_workbench_upstream.conf: - enabled: true - overwrite: true - config: - - server: - - listen: 'workbench.internal:9000' - - server_name: workbench - - root: /var/www/arvados-workbench/current/public - - index: index.html index.htm - - passenger_enabled: 'on' - # yamllint disable-line rule:line-length - - access_log: /var/log/nginx/workbench.fixme.example.net-upstream.access.log combined - - error_log: /var/log/nginx/workbench.fixme.example.net-upstream.error.log