# * `max_request_size` in the API server's application.yml file
client_max_body_size 128m;
}
-
-upstream api {
- server 127.0.0.1:8000 fail_timeout=10s;
-}
-
-proxy_http_version 1.1;
-
-# When Keep clients request a list of Keep services from the API server, the
-# server will automatically return the list of available proxies if
-# the request headers include X-External-Client: 1. Following the example
-# here, at the end of this section, add a line for each netmask that has
-# direct access to Keep storage daemons to set this header value to 0.
-geo $external_client {
- default 1;
- 10.0.0.0/8 0;
-}
-
-server {
- listen 0.0.0.0:444 ssl;
- server_name public-api;
-
- ssl on;
- ssl_certificate /etc/ssl/certs/api-server.pem;
- ssl_certificate_key /etc/ssl/private/api-server.key;
-
- index index.html index.htm index.php;
-
- # Refer to the comment about this setting in the server section above.
- client_max_body_size 128m;
-
- location / {
- proxy_pass http://api;
- proxy_redirect off;
- proxy_connect_timeout 90s;
- proxy_read_timeout 300s;
-
- proxy_set_header X-Forwarded-Proto https;
- proxy_set_header Host $http_host;
- proxy_set_header X-External-Client $external_client;
- proxy_set_header X-Real-IP $remote_addr;
- proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
- }
-}