702dd68f6caf94f0854a7b8bca98e2b0287e6fc7
[arvados.git] / tools / salt-install / config_examples / single_host / single_hostname / pillars / nginx_keepweb_configuration.sls
1 ---
2 # Copyright (C) The Arvados Authors. All rights reserved.
3 #
4 # SPDX-License-Identifier: AGPL-3.0
5
6 ### NGINX
7 nginx:
8   ### SERVER
9   server:
10     config:
11       ### STREAMS
12       http:
13         upstream collections_downloads_upstream:
14           - server: '__IP_INT__:9003 fail_timeout=10s'
15
16   servers:
17     managed:
18       ### COLLECTIONS / DOWNLOAD
19       arvados_collections_download_ssl:
20         enabled: true
21         overwrite: true
22         config:
23           - server:
24             - server_name: __HOSTNAME_EXT__
25             - listen:
26               - __KEEPWEB_EXT_SSL_PORT__ http2 ssl
27             - index: index.html index.htm
28             - location /:
29               - proxy_pass: 'http://collections_downloads_upstream'
30               - proxy_read_timeout: 90
31               - proxy_connect_timeout: 90
32               - proxy_redirect: 'off'
33               - proxy_set_header: X-Forwarded-Proto https
34               - proxy_set_header: 'Host $http_host'
35               - proxy_set_header: 'X-Real-IP $remote_addr'
36               - proxy_set_header: 'X-Forwarded-For $proxy_add_x_forwarded_for'
37               - proxy_buffering: 'off'
38             - client_max_body_size: 0
39             - proxy_http_version: '1.1'
40             - proxy_request_buffering: 'off'
41             - include: 'snippets/arvados-snakeoil.conf'
42             - access_log: /var/log/nginx/keepweb.__CLUSTER__.__DOMAIN__.access.log combined
43             - error_log: /var/log/nginx/keepweb.__CLUSTER__.__DOMAIN__.error.log