From e09a7dce2515731b8cb384fb29a3e385046a28bc Mon Sep 17 00:00:00 2001 From: Ward Vandewege Date: Tue, 5 Jun 2018 17:37:14 -0400 Subject: [PATCH] Update the nginx config for the keep-proxy-https pod. No issue # Arvados-DCO-1.1-Signed-off-by: Ward Vandewege --- charts/arvados/templates/keep-proxy-https.yaml | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/charts/arvados/templates/keep-proxy-https.yaml b/charts/arvados/templates/keep-proxy-https.yaml index 9c6b1af..cc53d82 100644 --- a/charts/arvados/templates/keep-proxy-https.yaml +++ b/charts/arvados/templates/keep-proxy-https.yaml @@ -65,26 +65,26 @@ data: listen 0.0.0.0:25107 ssl; server_name arvados-keep-proxy-https; - proxy_connect_timeout 90s; - proxy_read_timeout 300s; - proxy_set_header X-Real-IP $remote_addr; - ssl on; ssl_certificate /etc/nginx/ssl.crt; ssl_certificate_key /etc/nginx/ssl.key; # Clients need to be able to upload blocks of data up to 64MiB in size. + client_body_buffer_size 64M; client_max_body_size 64m; # Redirect plain HTTP requests to HTTPS. error_page 497 301 =307 https://$host:$server_port$request_uri; location / { - proxy_pass http://httpContainer; - proxy_set_header Upgrade $http_upgrade; - proxy_set_header Connection "upgrade"; - proxy_set_header Host $host:$server_port; - proxy_set_header X-Forwarded-For $remote_addr; + proxy_pass http://httpContainer; + proxy_connect_timeout 90s; + proxy_read_timeout 300s; + proxy_redirect off; + proxy_set_header X-Forwarded-Proto https; + proxy_set_header Host $host:$server_port; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; } } --- -- 2.30.2