stage-and-suitcase-mih/nginx/nginx.conf

events {
    worker_connections  1024;
}


http {
    server_tokens off;
    charset utf-8;

    upstream minioUI {
        server minio:9001;
    }

    upstream minioAPI {
        server minio:9000;
    }

    # always redirect to https
    server {
        listen 80 default_server;

        server_name _;

        return 301 https://$host$request_uri;
    }

    server {
        listen 443 ssl;
        http2 on;
        # use the certificates
        ssl_certificate     /etc/letsencrypt/live/mzansi-innovation-hub.co.za/fullchain.pem;
        ssl_certificate_key /etc/letsencrypt/live/mzansi-innovation-hub.co.za/privkey.pem;
        server_name mzansi-innovation-hub.co.za;
        root /var/www/html;
        index index.php index.html index.htm;

        # To allow special characters in headers
        ignore_invalid_headers off;
        # Allow any size file to be uploaded.
        # Set to a value such as 1000m; to restrict file size to a specific value
        client_max_body_size 0;
        # To disable buffering
        proxy_buffering off;
        proxy_request_buffering off;

        # Web App
        location / {
            proxy_pass http://MIH-UX:83/;
        }

        # API Hub
        location /api/ {
            proxy_pass http://MIH-API-Hub:8080/;
        }

        #Minio storage
        location /files/UI/ {
            proxy_set_header Host domain;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_http_version 1.1;
            # proxy_hide_header Upgrade;
            proxy_set_header X-Forwarded-Proto $scheme;
            proxy_set_header Upgrade $http_upgrade;
            proxy_set_header Connection $connection_upgrade;
            chunked_transfer_encoding off;
            

            proxy_cache_key $request_method$scheme$host$request_uri;

            proxy_cache_convert_head off;

            proxy_cache_revalidate on;
            proxy_cache_min_uses 3;
            proxy_cache_use_stale error timeout updating http_500 http_502 http_503 http_504;
            proxy_cache_background_update on;
            proxy_cache_lock on;

            proxy_ignore_headers Cache-Control;
            proxy_cache_valid 5m;
            proxy_cache_methods GET;

            proxy_request_buffering off;


            add_header X-ProxyCache "Enabled";
            add_header X-Cache-Status $upstream_cache_status;

            # Allow any size file to be uploaded.
            # Set to a value such as 1000m; to restrict file size to a specific value
            client_max_body_size 0;
            # Disable buffering
            proxy_buffering off;

            proxy_pass http://minioUI/login;
        }

        #Minio storage API
        location /files/ {
            proxy_set_header Host domain;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_http_version 1.1;
            # proxy_hide_header Upgrade;
            proxy_set_header X-Forwarded-Proto $scheme;
            proxy_set_header Upgrade $http_upgrade;
            proxy_set_header Connection $connection_upgrade;
            chunked_transfer_encoding off;
            

            proxy_cache_key $request_method$scheme$host$request_uri;

            proxy_cache_convert_head off;

            proxy_cache_revalidate on;
            proxy_cache_min_uses 3;
            proxy_cache_use_stale error timeout updating http_500 http_502 http_503 http_504;
            proxy_cache_background_update on;
            proxy_cache_lock on;

            proxy_ignore_headers Cache-Control;
            proxy_cache_valid 5m;
            proxy_cache_methods GET;

            proxy_request_buffering off;


            add_header X-ProxyCache "Enabled";
            add_header X-Cache-Status $upstream_cache_status;

            # Allow any size file to be uploaded.
            # Set to a value such as 1000m; to restrict file size to a specific value
            client_max_body_size 0;
            # Disable buffering
            proxy_buffering off;

            proxy_pass http://minioAPI;
        }

        # location /phpmyadmin/ {
        #     proxy_pass http://192.168.1.69:8081/;
        # }

        location ~ /.well-known/acme-challenge/ {
            root /var/www/certbot;
        }
    }
}

# events {
#     worker_connections  1024;
# }

# http {
#     server_tokens off;
#     charset utf-8;

#     # always redirect to https
#     server {
#         listen 80 default_server;

#         server_name mzansi-innovation-hub.co.za www.mzansi-innovation-hub.co.za;

#         location / {
#             proxy_pass http://MIH-UX:83/;
#         }
#         location ~ /.well-known/acme-challenge/ {
#             root /var/www/certbot;
#         }

#         # return 301 https://$host$request_uri;
#     }
# }