sdk/python/tests/nginx.conf

   1 # Copyright (C) The Arvados Authors. All rights reserved.
   2 #
   3 # SPDX-License-Identifier: Apache-2.0
   4
   5 daemon off;
   6 events {
   7 }
   8 http {
   9   log_format customlog
  10     '[$time_local] "$http_x_request_id" $server_name $status $body_bytes_sent $request_time $request_method "$scheme://$http_host$request_uri" $remote_addr:$remote_port '
  11     '"$http_referer" "$http_user_agent"';
  12   access_log "{{ACCESSLOG}}" customlog;
  13   client_body_temp_path "{{TMPDIR}}";
  14   proxy_temp_path "{{TMPDIR}}";
  15   fastcgi_temp_path "{{TMPDIR}}";
  16   uwsgi_temp_path "{{TMPDIR}}";
  17   scgi_temp_path "{{TMPDIR}}";
  18   upstream controller {
  19     server {{LISTENHOST}}:{{CONTROLLERPORT}};
  20   }
  21   server {
  22     listen {{LISTENHOST}}:{{CONTROLLERSSLPORT}} ssl;
  23     server_name controller ~.*;
  24     ssl_certificate "{{SSLCERT}}";
  25     ssl_certificate_key "{{SSLKEY}}";
  26     client_max_body_size 0;
  27     location  / {
  28       proxy_pass http://controller;
  29       proxy_set_header Host $http_host;
  30       proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  31       proxy_set_header X-Forwarded-Proto https;
  32       proxy_redirect off;
  33       proxy_max_temp_file_size 0;
  34       proxy_request_buffering off;
  35       proxy_buffering off;
  36       proxy_http_version 1.1;
  37     }
  38   }
  39   upstream arv-git-http {
  40     server {{LISTENHOST}}:{{GITPORT}};
  41   }
  42   server {
  43     listen {{LISTENHOST}}:{{GITSSLPORT}} ssl;
  44     server_name arv-git-http git.*;
  45     ssl_certificate "{{SSLCERT}}";
  46     ssl_certificate_key "{{SSLKEY}}";
  47     location  / {
  48       proxy_pass http://arv-git-http;
  49       proxy_set_header Host $http_host;
  50       proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  51       proxy_set_header X-Forwarded-Proto https;
  52       proxy_redirect off;
  53     }
  54   }
  55   upstream keepproxy {
  56     server {{LISTENHOST}}:{{KEEPPROXYPORT}};
  57   }
  58   server {
  59     listen {{LISTENHOST}}:{{KEEPPROXYSSLPORT}} ssl;
  60     server_name keepproxy keep.*;
  61     ssl_certificate "{{SSLCERT}}";
  62     ssl_certificate_key "{{SSLKEY}}";
  63     location  / {
  64       proxy_pass http://keepproxy;
  65       proxy_set_header Host $http_host;
  66       proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  67       proxy_set_header X-Forwarded-Proto https;
  68       proxy_redirect off;
  69
  70       client_max_body_size 67108864;
  71       proxy_http_version 1.1;
  72       proxy_request_buffering off;
  73     }
  74   }
  75   upstream keep-web {
  76     server {{LISTENHOST}}:{{KEEPWEBPORT}};
  77   }
  78   server {
  79     listen {{LISTENHOST}}:{{KEEPWEBSSLPORT}} ssl;
  80     server_name keep-web collections.* ~\.collections\.;
  81     ssl_certificate "{{SSLCERT}}";
  82     ssl_certificate_key "{{SSLKEY}}";
  83     location  / {
  84       proxy_pass http://keep-web;
  85       proxy_set_header Host $http_host;
  86       proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  87       proxy_set_header X-Forwarded-Proto https;
  88       proxy_redirect off;
  89
  90       client_max_body_size 0;
  91       proxy_http_version 1.1;
  92       proxy_request_buffering off;
  93     }
  94   }
  95   upstream health {
  96     server {{LISTENHOST}}:{{HEALTHPORT}};
  97   }
  98   server {
  99     listen {{LISTENHOST}}:{{HEALTHSSLPORT}} ssl;
 100     server_name health health.*;
 101     ssl_certificate "{{SSLCERT}}";
 102     ssl_certificate_key "{{SSLKEY}}";
 103     location  / {
 104       proxy_pass http://health;
 105       proxy_set_header Host $http_host;
 106       proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
 107       proxy_set_header X-Forwarded-Proto https;
 108       proxy_redirect off;
 109
 110       proxy_http_version 1.1;
 111       proxy_request_buffering off;
 112     }
 113   }
 114   server {
 115     listen {{LISTENHOST}}:{{KEEPWEBDLSSLPORT}} ssl;
 116     server_name keep-web-dl download.* ~.*;
 117     ssl_certificate "{{SSLCERT}}";
 118     ssl_certificate_key "{{SSLKEY}}";
 119     location  / {
 120       proxy_pass http://keep-web;
 121       proxy_set_header Host $http_host;
 122       proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
 123       proxy_set_header X-Forwarded-Proto https;
 124       proxy_redirect off;
 125
 126       client_max_body_size 0;
 127       proxy_http_version 1.1;
 128       proxy_request_buffering off;
 129     }
 130   }
 131   upstream ws {
 132     server {{LISTENHOST}}:{{WSPORT}};
 133   }
 134   server {
 135     listen {{LISTENHOST}}:{{WSSSLPORT}} ssl;
 136     server_name websocket ws.*;
 137     ssl_certificate "{{SSLCERT}}";
 138     ssl_certificate_key "{{SSLKEY}}";
 139     location  / {
 140       proxy_pass http://ws;
 141       proxy_set_header Upgrade $http_upgrade;
 142       proxy_set_header Connection "upgrade";
 143       proxy_set_header Host $http_host;
 144       proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
 145       proxy_set_header X-Forwarded-Proto https;
 146       proxy_redirect off;
 147     }
 148   }
 149   upstream workbench1 {
 150     server {{LISTENHOST}}:{{WORKBENCH1PORT}};
 151   }
 152   server {
 153     listen {{LISTENHOST}}:{{WORKBENCH1SSLPORT}} ssl;
 154     server_name workbench1 workbench1.* workbench.*;
 155     ssl_certificate "{{SSLCERT}}";
 156     ssl_certificate_key "{{SSLKEY}}";
 157     location  / {
 158       proxy_pass http://workbench1;
 159       proxy_set_header Host $http_host;
 160       proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
 161       proxy_set_header X-Forwarded-Proto https;
 162       proxy_redirect off;
 163     }
 164   }
 165   upstream workbench2 {
 166     server {{LISTENHOST}}:{{WORKBENCH2PORT}};
 167   }
 168   server {
 169     listen {{LISTENHOST}}:{{WORKBENCH2SSLPORT}} ssl;
 170     server_name workbench2 workbench2.*;
 171     ssl_certificate "{{SSLCERT}}";
 172     ssl_certificate_key "{{SSLKEY}}";
 173     location / {
 174       proxy_pass http://workbench2;
 175       proxy_set_header Host $http_host;
 176       proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
 177       proxy_set_header X-Forwarded-Proto https;
 178       proxy_redirect off;
 179     }
 180   }
 181 }