Fix 2.4.2 upgrade notes formatting refs #19330
[arvados.git] / sdk / python / tests / nginx.conf
1 # Copyright (C) The Arvados Authors. All rights reserved.
2 #
3 # SPDX-License-Identifier: Apache-2.0
4
5 daemon off;
6 events {
7 }
8 http {
9   log_format customlog
10     '[$time_local] "$http_x_request_id" $server_name $status $body_bytes_sent $request_time $request_method "$scheme://$http_host$request_uri" $remote_addr:$remote_port '
11     '"$http_referer" "$http_user_agent"';
12   access_log "{{ACCESSLOG}}" customlog;
13   client_body_temp_path "{{TMPDIR}}";
14   proxy_temp_path "{{TMPDIR}}";
15   fastcgi_temp_path "{{TMPDIR}}";
16   uwsgi_temp_path "{{TMPDIR}}";
17   scgi_temp_path "{{TMPDIR}}";
18   upstream controller {
19     server {{UPSTREAMHOST}}:{{CONTROLLERPORT}};
20   }
21   server {
22     listen {{LISTENHOST}}:{{CONTROLLERSSLPORT}} ssl;
23     server_name controller ~.*;
24     ssl_certificate "{{SSLCERT}}";
25     ssl_certificate_key "{{SSLKEY}}";
26     client_max_body_size 0;
27     location  / {
28       proxy_pass http://controller;
29       proxy_set_header Host $http_host;
30       proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
31       proxy_set_header X-Forwarded-Proto https;
32       proxy_redirect off;
33       proxy_max_temp_file_size 0;
34       proxy_request_buffering off;
35       proxy_buffering off;
36       proxy_http_version 1.1;
37     }
38   }
39   upstream arv-git-http {
40     server {{UPSTREAMHOST}}:{{GITPORT}};
41   }
42   server {
43     listen {{LISTENHOST}}:{{GITSSLPORT}} ssl;
44     server_name arv-git-http git.*;
45     ssl_certificate "{{SSLCERT}}";
46     ssl_certificate_key "{{SSLKEY}}";
47     location  / {
48       proxy_pass http://arv-git-http;
49       proxy_set_header Host $http_host;
50       proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
51       proxy_set_header X-Forwarded-Proto https;
52       proxy_redirect off;
53     }
54   }
55   upstream keepproxy {
56     server {{UPSTREAMHOST}}:{{KEEPPROXYPORT}};
57   }
58   server {
59     listen {{LISTENHOST}}:{{KEEPPROXYSSLPORT}} ssl;
60     server_name keepproxy keep.*;
61     ssl_certificate "{{SSLCERT}}";
62     ssl_certificate_key "{{SSLKEY}}";
63     location  / {
64       proxy_pass http://keepproxy;
65       proxy_set_header Host $http_host;
66       proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
67       proxy_set_header X-Forwarded-Proto https;
68       proxy_redirect off;
69
70       client_max_body_size 67108864;
71       proxy_http_version 1.1;
72       proxy_request_buffering off;
73     }
74   }
75   upstream keep-web {
76     server {{UPSTREAMHOST}}:{{KEEPWEBPORT}};
77   }
78   server {
79     listen {{LISTENHOST}}:{{KEEPWEBSSLPORT}} ssl;
80     server_name keep-web collections.* ~\.collections\.;
81     ssl_certificate "{{SSLCERT}}";
82     ssl_certificate_key "{{SSLKEY}}";
83     location  / {
84       proxy_pass http://keep-web;
85       proxy_set_header Host $http_host;
86       proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
87       proxy_set_header X-Forwarded-Proto https;
88       proxy_redirect off;
89
90       client_max_body_size 0;
91       proxy_http_version 1.1;
92       proxy_request_buffering off;
93     }
94   }
95   upstream health {
96     server {{UPSTREAMHOST}}:{{HEALTHPORT}};
97   }
98   server {
99     listen {{LISTENHOST}}:{{HEALTHSSLPORT}} ssl;
100     server_name health health.*;
101     ssl_certificate "{{SSLCERT}}";
102     ssl_certificate_key "{{SSLKEY}}";
103     location  / {
104       proxy_pass http://health;
105       proxy_set_header Host $http_host;
106       proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
107       proxy_set_header X-Forwarded-Proto https;
108       proxy_redirect off;
109
110       proxy_http_version 1.1;
111       proxy_request_buffering off;
112     }
113   }
114   server {
115     listen {{LISTENHOST}}:{{KEEPWEBDLSSLPORT}} ssl;
116     server_name keep-web-dl download.* ~.*;
117     ssl_certificate "{{SSLCERT}}";
118     ssl_certificate_key "{{SSLKEY}}";
119     location  / {
120       proxy_pass http://keep-web;
121       proxy_set_header Host $http_host;
122       proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
123       proxy_set_header X-Forwarded-Proto https;
124       proxy_redirect off;
125
126       client_max_body_size 0;
127       proxy_http_version 1.1;
128       proxy_request_buffering off;
129     }
130   }
131   upstream ws {
132     server {{UPSTREAMHOST}}:{{WSPORT}};
133   }
134   server {
135     listen {{LISTENHOST}}:{{WSSSLPORT}} ssl;
136     server_name websocket ws.*;
137     ssl_certificate "{{SSLCERT}}";
138     ssl_certificate_key "{{SSLKEY}}";
139     location  / {
140       proxy_pass http://ws;
141       proxy_set_header Upgrade $http_upgrade;
142       proxy_set_header Connection "upgrade";
143       proxy_set_header Host $http_host;
144       proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
145       proxy_set_header X-Forwarded-Proto https;
146       proxy_redirect off;
147
148       client_max_body_size 0;
149       proxy_http_version 1.1;
150       proxy_request_buffering off;
151     }
152   }
153   upstream workbench1 {
154     server {{UPSTREAMHOST}}:{{WORKBENCH1PORT}};
155   }
156   server {
157     listen {{LISTENHOST}}:{{WORKBENCH1SSLPORT}} ssl;
158     server_name workbench1 workbench1.* workbench.*;
159     ssl_certificate "{{SSLCERT}}";
160     ssl_certificate_key "{{SSLKEY}}";
161     location  / {
162       proxy_pass http://workbench1;
163       proxy_set_header Host $http_host;
164       proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
165       proxy_set_header X-Forwarded-Proto https;
166       proxy_redirect off;
167     }
168   }
169   upstream workbench2 {
170     server {{UPSTREAMHOST}}:{{WORKBENCH2PORT}};
171   }
172   server {
173     listen {{LISTENHOST}}:{{WORKBENCH2SSLPORT}} ssl;
174     server_name workbench2 workbench2.*;
175     ssl_certificate "{{SSLCERT}}";
176     ssl_certificate_key "{{SSLKEY}}";
177     location / {
178       proxy_pass http://workbench2;
179       proxy_set_header Host $http_host;
180       proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
181       proxy_set_header X-Forwarded-Proto https;
182       proxy_redirect off;
183     }
184   }
185 }