57 lines
1.3 KiB
Text
57 lines
1.3 KiB
Text
|
{{ ansible_header | comment }}
|
||
|
|
|
||
|
|
# Automatic Connection header for WebSocket support
|
||
|
|
# See http://nginx.org/en/docs/http/websocket.html
|
||
|
|
map $http_upgrade $connection_upgrade {
|
||
|
|
default upgrade;
|
||
|
|
'' close;
|
||
|
|
}
|
||
|
|
|
||
|
|
{% for site in nginx.reverseproxy_sites %}
|
||
|
|
# Redirect http://{{ site.from }} to https://{{ site.from }}
|
||
|
|
server {
|
||
|
|
listen 80;
|
||
|
|
listen [::]:80;
|
||
|
|
|
||
|
|
server_name {{ site.from }};
|
||
|
|
|
||
|
|
location / {
|
||
|
|
return 302 https://$host$request_uri;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
# Reverse proxify https://{{ site.from }} to http://{{ site.to }}
|
||
|
|
server {
|
||
|
|
listen 443 ssl http2;
|
||
|
|
listen [::]:443 ssl http2;
|
||
|
|
|
||
|
|
server_name {{ site.from }};
|
||
|
|
|
||
|
|
# SSL common conf
|
||
|
|
include "/etc/nginx/snippets/options-ssl.conf";
|
||
|
|
|
||
|
|
# Log into separate log files
|
||
|
|
access_log /var/log/nginx/{{ site.from }}.log;
|
||
|
|
error_log /var/log/nginx/{{ site.from }}_error.log;
|
||
|
|
|
||
|
|
# Keep the TCP connection open a bit for faster browsing
|
||
|
|
keepalive_timeout 70;
|
||
|
|
|
||
|
|
# Custom error page
|
||
|
|
error_page 500 502 503 504 /50x.html;
|
||
|
|
location = /50x.html {
|
||
|
|
root /var/www/html;
|
||
|
|
}
|
||
|
|
|
||
|
|
set_real_ip_from 10.231.136.0/24;
|
||
|
|
set_real_ip_from 2a0c:700:0:2::/64;
|
||
|
|
real_ip_header P-Real-Ip;
|
||
|
|
|
||
|
|
location / {
|
||
|
|
proxy_pass http://{{ site.to }};
|
||
|
|
include "/etc/nginx/snippets/options-proxypass.conf";
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
{% endfor %}
|