upgrade for Evo.Gateway
This commit is contained in:
parent
937ae35c08
commit
0fcafeeb46
@ -17,6 +17,5 @@ services:
|
|||||||
|
|
||||||
networks:
|
networks:
|
||||||
internal_network:
|
internal_network:
|
||||||
name: internal_network
|
external:
|
||||||
web:
|
name: internal_network
|
||||||
external: true
|
|
||||||
|
|||||||
@ -1,15 +0,0 @@
|
|||||||
version: '3'
|
|
||||||
|
|
||||||
services:
|
|
||||||
server:
|
|
||||||
container_name: ${TRAEFIK_APP_NAME}
|
|
||||||
labels:
|
|
||||||
- 'traefik.enable=true'
|
|
||||||
- 'traefik.backend=${TRAEFIK_APP_NAME}'
|
|
||||||
- 'traefik.docker.network=web'
|
|
||||||
- 'traefik.http.routers.${TRAEFIK_APP_NAME}.rule=Host(`${WEB_HOST}`)'
|
|
||||||
- 'traefik.http.routers.${TRAEFIK_APP_NAME}.entrypoints=web-secure'
|
|
||||||
- 'traefik.http.routers.${TRAEFIK_APP_NAME}.tls.certresolver=le'
|
|
||||||
- 'traefik.port=80'
|
|
||||||
networks:
|
|
||||||
- web
|
|
||||||
70
nginx.conf
70
nginx.conf
@ -1,67 +1,37 @@
|
|||||||
|
|
||||||
upstream auth_server {
|
upstream auth_server {
|
||||||
server auth_server:80;
|
server auth_server:80;
|
||||||
}
|
}
|
||||||
|
|
||||||
server {
|
server {
|
||||||
listen 80;
|
listen 80;
|
||||||
|
|
||||||
gzip on;
|
gzip on;
|
||||||
gzip_min_length 1000;
|
gzip_min_length 1000;
|
||||||
gzip_proxied any;
|
gzip_proxied any;
|
||||||
gzip_comp_level 1;
|
gzip_comp_level 1;
|
||||||
gzip_types text/css text/javascript text/xml text/plain text/x-component application/javascript application/json application/xml application/rss+xml font/truetype font/opentype application/vnd.ms-fontobject image/svg+xml;
|
gzip_types text/css text/javascript text/xml text/plain text/x-component application/javascript application/json application/xml application/rss+xml font/truetype font/opentype application/vnd.ms-fontobject image/svg+xml;
|
||||||
gzip_vary on;
|
gzip_vary on;
|
||||||
gzip_disable "msie6";
|
gzip_disable "msie6";
|
||||||
|
|
||||||
include /etc/nginx/mime.types;
|
include /etc/nginx/mime.types;
|
||||||
|
|
||||||
# AUTHENTICATION
|
|
||||||
error_page 401 @error401;
|
|
||||||
|
|
||||||
location @error401 {
|
|
||||||
add_header Cache-Control 'no-store, no-cache';
|
|
||||||
# rewrite ^ /login?uri=$request_uri permanent;
|
|
||||||
rewrite ^ /login permanent;
|
|
||||||
}
|
|
||||||
|
|
||||||
location / {
|
location / {
|
||||||
auth_request /auth;
|
|
||||||
|
|
||||||
# kill cache
|
# kill cache
|
||||||
add_header Last-Modified $date_gmt;
|
add_header Last-Modified $date_gmt;
|
||||||
add_header Cache-Control 'no-store, no-cache';
|
add_header Cache-Control 'no-store, no-cache';
|
||||||
if_modified_since off;
|
if_modified_since off;
|
||||||
expires off;
|
expires off;
|
||||||
etag off;
|
etag off;
|
||||||
|
|
||||||
root /usr/share/nginx/html;
|
root /usr/share/nginx/html;
|
||||||
try_files $uri $uri/ /index.html =404;
|
try_files $uri $uri/ /index.html =404;
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
location = /auth {
|
|
||||||
internal;
|
|
||||||
proxy_pass http://auth_server;
|
|
||||||
proxy_pass_request_body off;
|
|
||||||
proxy_set_header Content-Length "";
|
|
||||||
proxy_set_header X-Original-URI $request_uri;
|
|
||||||
proxy_set_header X-Original-Remote-Addr $remote_addr;
|
|
||||||
proxy_set_header X-Original-Host $host;
|
|
||||||
}
|
|
||||||
|
|
||||||
location ~ ^/(login|signin|logout|get-user) {
|
|
||||||
proxy_pass http://auth_server;
|
|
||||||
}
|
}
|
||||||
|
|
||||||
location /download {
|
location /download {
|
||||||
auth_request /auth;
|
auth_request /auth;
|
||||||
proxy_pass $URL_DOWNLOAD;
|
proxy_pass $URL_DOWNLOAD;
|
||||||
}
|
|
||||||
|
|
||||||
location = /health {
|
|
||||||
access_log off;
|
|
||||||
add_header 'Content-Type' 'application/json';
|
|
||||||
return 200 'UP';
|
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
Loading…
x
Reference in New Issue
Block a user