mirror of
https://github.com/suitenumerique/drive.git
synced 2026-04-25 17:15:19 +02:00
dd6f0be90a
This commit, with contributions from Sylvain Grizard, adds support for PaaS deployment platforms such as Scalingo, which build the project on commit. It uses the La Suite Buildpack, which compiles the frontend first as static files, and serves them along with the backend with nginx.
81 lines
2.4 KiB
Plaintext
81 lines
2.4 KiB
Plaintext
upstream docs_backend {
|
|
server backend:8000 fail_timeout=0;
|
|
}
|
|
|
|
upstream docs_frontend {
|
|
server frontend:8080 fail_timeout=0;
|
|
}
|
|
|
|
server {
|
|
listen 8083 ssl;
|
|
server_name localhost;
|
|
|
|
# Disables server version feedback on pages and in headers
|
|
server_tokens off;
|
|
|
|
ssl_certificate /etc/nginx/ssl/fullchain.pem;
|
|
ssl_certificate_key /etc/nginx/ssl/privkey.pem;
|
|
|
|
location @proxy_to_docs_backend {
|
|
proxy_set_header X-Forwarded-Proto https;
|
|
proxy_set_header Host $http_host;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
|
|
proxy_redirect off;
|
|
proxy_pass http://docs_backend;
|
|
}
|
|
|
|
location @proxy_to_docs_frontend {
|
|
proxy_set_header X-Forwarded-Proto https;
|
|
proxy_set_header Host $http_host;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
|
|
proxy_redirect off;
|
|
proxy_pass http://docs_frontend;
|
|
}
|
|
|
|
location / {
|
|
try_files $uri @proxy_to_docs_frontend;
|
|
}
|
|
|
|
location /api {
|
|
try_files $uri @proxy_to_docs_backend;
|
|
}
|
|
|
|
location /admin {
|
|
try_files $uri @proxy_to_docs_backend;
|
|
}
|
|
|
|
# Proxy auth for media
|
|
location /media/ {
|
|
# Auth request configuration
|
|
auth_request /media-auth;
|
|
auth_request_set $authHeader $upstream_http_authorization;
|
|
auth_request_set $authDate $upstream_http_x_amz_date;
|
|
auth_request_set $authContentSha256 $upstream_http_x_amz_content_sha256;
|
|
|
|
# Pass specific headers from the auth response
|
|
proxy_set_header Authorization $authHeader;
|
|
proxy_set_header X-Amz-Date $authDate;
|
|
proxy_set_header X-Amz-Content-SHA256 $authContentSha256;
|
|
|
|
# Get resource from Minio
|
|
proxy_pass http://minio:9000/docs-media-storage/;
|
|
proxy_set_header Host minio:9000;
|
|
}
|
|
|
|
location /media-auth {
|
|
proxy_pass http://docs_backend/api/v1.0/items/media-auth/;
|
|
proxy_set_header X-Forwarded-Proto https;
|
|
proxy_set_header Host $host;
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
proxy_set_header X-Original-URL $request_uri;
|
|
|
|
# Prevent the body from being passed
|
|
proxy_pass_request_body off;
|
|
proxy_set_header Content-Length "";
|
|
proxy_set_header X-Original-Method $request_method;
|
|
}
|
|
}
|