X-Git-Url: https://git.arvados.org/arvados.git/blobdiff_plain/e1577a7fbba344f1c7d784d085d5f8b099bc28bf..b7d5f7b673fd35ef6eb7348a9a96ba100995427f:/tools/salt-install/config_examples/multi_host/aws/pillars/nginx_workbench2_configuration.sls diff --git a/tools/salt-install/config_examples/multi_host/aws/pillars/nginx_workbench2_configuration.sls b/tools/salt-install/config_examples/multi_host/aws/pillars/nginx_workbench2_configuration.sls index 47eafeeece..081be151ef 100644 --- a/tools/salt-install/config_examples/multi_host/aws/pillars/nginx_workbench2_configuration.sls +++ b/tools/salt-install/config_examples/multi_host/aws/pillars/nginx_workbench2_configuration.sls @@ -21,7 +21,7 @@ nginx: overwrite: true config: - server: - - server_name: workbench2.__CLUSTER__.__DOMAIN__ + - server_name: workbench2.__DOMAIN__ - listen: - 80 - location /: @@ -34,22 +34,18 @@ nginx: __CERT_REQUIRES__ config: - server: - - server_name: workbench2.__CLUSTER__.__DOMAIN__ + - server_name: workbench2.__DOMAIN__ - listen: - __CONTROLLER_EXT_SSL_PORT__ http2 ssl - - index: index.html index.htm + - location /: - - root: /var/www/arvados-workbench2/workbench2 - - try_files: '$uri $uri/ /index.html' - - 'if (-f $document_root/maintenance.html)': - - return: 503 - - location /config.json: - - return: {{ "200 '" ~ '{"API_HOST":"__CLUSTER__.__DOMAIN__:__CONTROLLER_EXT_SSL_PORT__"}' ~ "'" }} + - return: '301 https://workbench.__DOMAIN__$request_uri' + - include: snippets/ssl_hardening_default.conf - ssl_certificate: __CERT_PEM__ - ssl_certificate_key: __CERT_KEY__ {%- if ssl_key_encrypted_pillar.ssl_key_encrypted.enabled %} - ssl_password_file: {{ '/run/arvados/' | path_join(ssl_key_encrypted_pillar.ssl_key_encrypted.privkey_password_filename) }} {%- endif %} - - access_log: /var/log/nginx/workbench2.__CLUSTER__.__DOMAIN__.access.log combined - - error_log: /var/log/nginx/workbench2.__CLUSTER__.__DOMAIN__.error.log + - access_log: /var/log/nginx/workbench2.__DOMAIN__.access.log combined + - error_log: /var/log/nginx/workbench2.__DOMAIN__.error.log