2 error_log stderr info; # Yes, must be specified here _and_ cmdline
6 access_log {{ACCESSLOG}} combined;
7 upstream arv-git-http {
8 server localhost:{{GITPORT}};
11 listen *:{{GITSSLPORT}} ssl default_server;
13 ssl_certificate {{SSLCERT}};
14 ssl_certificate_key {{SSLKEY}};
16 proxy_pass http://arv-git-http;
20 server localhost:{{KEEPPROXYPORT}};
23 listen *:{{KEEPPROXYSSLPORT}} ssl default_server;
25 ssl_certificate {{SSLCERT}};
26 ssl_certificate_key {{SSLKEY}};
28 proxy_pass http://keepproxy;
32 server localhost:{{KEEPWEBPORT}};
35 listen *:{{KEEPWEBSSLPORT}} ssl default_server;
36 server_name ~^(?<request_host>.*)$;
37 ssl_certificate {{SSLCERT}};
38 ssl_certificate_key {{SSLKEY}};
40 proxy_pass http://keep-web;
41 proxy_set_header Host $request_host:{{KEEPWEBPORT}};
42 proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
46 listen *:{{KEEPWEBDLSSLPORT}} ssl default_server;
48 ssl_certificate {{SSLCERT}};
49 ssl_certificate_key {{SSLKEY}};
51 proxy_pass http://keep-web;
52 proxy_set_header Host download:{{KEEPWEBPORT}};
53 proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
54 proxy_redirect //download:{{KEEPWEBPORT}}/ https://$host:{{KEEPWEBDLSSLPORT}}/;
58 server localhost:{{WSPORT}};
61 listen *:{{WSSPORT}} ssl default_server;
62 server_name ~^(?<request_host>.*)$;
63 ssl_certificate {{SSLCERT}};
64 ssl_certificate_key {{SSLKEY}};
67 proxy_set_header Upgrade $http_upgrade;
68 proxy_set_header Connection "upgrade";
69 proxy_set_header Host $request_host:{{WSPORT}};
70 proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;