yaso_meth/mih-project
2
4
Fork 2
Code Issues 8 Pull Requests Actions Packages Projects Releases 1 Wiki Activity

minio nginx

Browse Source
This commit is contained in:
yaso-meth
2024-07-25 11:46:41 +02:00
parent ca1d74a58d
commit 05d49dd60a
1 changed files with 124 additions and 124 deletions
Download Patch File Download Diff File Expand all files Collapse all files

248
nginx/nginx.conf
View File

@@ -28,172 +28,172 @@ http {
server_name app.mzansi-innovation-hub.co.za; server_name app.mzansi-innovation-hub.co.za;
# #Web App # #Web App
# location / {
# proxy_pass http://MIH-UX:83/;
# }
# location ~ /.well-known/acme-challenge/ {
# root /var/www/certbot;
# }
return 301 https://app.mzansi-innovation-hub.co.za$request_uri;
}
server {
listen 443 ssl;
http2 on;
# use the certificates
ssl_certificate /etc/letsencrypt/live/mzansi-innovation-hub.co.za-0002/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/mzansi-innovation-hub.co.za-0002/privkey.pem;
server_name app.mzansi-innovation-hub.co.za;
root /var/www/html;
index index.php index.html index.htm;
# To allow special characters in headers
ignore_invalid_headers off;
# Allow any size file to be uploaded.
# Set to a value such as 1000m; to restrict file size to a specific value
client_max_body_size 0;
# To disable buffering
proxy_buffering off;
proxy_request_buffering off;
# Web App
location / { location / {
proxy_pass http://MIH-UX:83/; proxy_pass http://MIH-UX:83/;
} }
location ~ /.well-known/acme-challenge/ { location ~ /.well-known/acme-challenge/ {
root /var/www/certbot; root /var/www/certbot;
} }
# return 301 https://app.mzansi-innovation-hub.co.za$request_uri;
} }
# server {
# listen 443 ssl;
# http2 on;
# # use the certificates
# ssl_certificate /etc/letsencrypt/live/mzansi-innovation-hub.co.za-0002/fullchain.pem;
# ssl_certificate_key /etc/letsencrypt/live/mzansi-innovation-hub.co.za-0002/privkey.pem;
# server_name app.mzansi-innovation-hub.co.za;
# root /var/www/html;
# index index.php index.html index.htm;
# # To allow special characters in headers
# ignore_invalid_headers off;
# # Allow any size file to be uploaded.
# # Set to a value such as 1000m; to restrict file size to a specific value
# client_max_body_size 0;
# # To disable buffering
# proxy_buffering off;
# proxy_request_buffering off;
# # Web App
# location / {
# proxy_pass http://MIH-UX:83/;
# }
# location ~ /.well-known/acme-challenge/ {
# root /var/www/certbot;
# }
# }
server { server {
listen 80; listen 80;
server_name api.mzansi-innovation-hub.co.za; server_name api.mzansi-innovation-hub.co.za;
# #Web App # #Web App
# location / {
# proxy_pass http://MIH-API-Hub:8080/;
# }
# location ~ /.well-known/acme-challenge/ {
# root /var/www/certbot;
# }
return 301 https://api.mzansi-innovation-hub.co.za$request_uri;
}
server {
listen 443 ssl;
http2 on;
# use the certificates
ssl_certificate /etc/letsencrypt/live/mzansi-innovation-hub.co.za-0002/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/mzansi-innovation-hub.co.za-0002/privkey.pem;
server_name api.mzansi-innovation-hub.co.za;
root /var/www/html;
index index.php index.html index.htm;
# To allow special characters in headers
ignore_invalid_headers off;
# Allow any size file to be uploaded.
# Set to a value such as 1000m; to restrict file size to a specific value
client_max_body_size 0;
# To disable buffering
proxy_buffering off;
proxy_request_buffering off;
# Web Api
location / { location / {
proxy_pass http://MIH-API-Hub:80/; proxy_pass http://MIH-API-Hub:8080/;
} }
location ~ /.well-known/acme-challenge/ { location ~ /.well-known/acme-challenge/ {
root /var/www/certbot; root /var/www/certbot;
} }
# return 301 https://api.mzansi-innovation-hub.co.za$request_uri;
} }
# server {
# listen 443 ssl;
# http2 on;
# # use the certificates
# ssl_certificate /etc/letsencrypt/live/mzansi-innovation-hub.co.za-0002/fullchain.pem;
# ssl_certificate_key /etc/letsencrypt/live/mzansi-innovation-hub.co.za-0002/privkey.pem;
# server_name api.mzansi-innovation-hub.co.za;
# root /var/www/html;
# index index.php index.html index.htm;
# # To allow special characters in headers
# ignore_invalid_headers off;
# # Allow any size file to be uploaded.
# # Set to a value such as 1000m; to restrict file size to a specific value
# client_max_body_size 0;
# # To disable buffering
# proxy_buffering off;
# proxy_request_buffering off;
# # Web Api
# location / {
# proxy_pass http://MIH-API-Hub:80/;
# }
# location ~ /.well-known/acme-challenge/ {
# root /var/www/certbot;
# }
# }
server { server {
listen 80; listen 80;
server_name minio.mzansi-innovation-hub.co.za; server_name minio.mzansi-innovation-hub.co.za;
# #Web App #Web App
# location / { location / {
# proxy_pass http://MIH-API-Hub:8080/; proxy_pass https://minioAPI;
# } }
# location ~ /.well-known/acme-challenge/ { location ~ /.well-known/acme-challenge/ {
# root /var/www/certbot; root /var/www/certbot;
# } }
return 301 https://minio.mzansi-innovation-hub.co.za$request_uri; # return 301 https://minio.mzansi-innovation-hub.co.za$request_uri;
} }
server { # server {
listen 443 ssl; # listen 443 ssl;
http2 on; # http2 on;
# use the certificates # # use the certificates
ssl_certificate /etc/letsencrypt/live/mzansi-innovation-hub.co.za-0002/fullchain.pem; # ssl_certificate /etc/letsencrypt/live/mzansi-innovation-hub.co.za-0002/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/mzansi-innovation-hub.co.za-0002/privkey.pem; # ssl_certificate_key /etc/letsencrypt/live/mzansi-innovation-hub.co.za-0002/privkey.pem;
server_name minio.mzansi-innovation-hub.co.za; # server_name minio.mzansi-innovation-hub.co.za;
root /var/www/html; # root /var/www/html;
index index.php index.html index.htm; # index index.php index.html index.htm;
# To allow special characters in headers # # To allow special characters in headers
ignore_invalid_headers off; # ignore_invalid_headers off;
# Allow any size file to be uploaded. # # Allow any size file to be uploaded.
# Set to a value such as 1000m; to restrict file size to a specific value # # Set to a value such as 1000m; to restrict file size to a specific value
client_max_body_size 0; # client_max_body_size 0;
# To disable buffering # # To disable buffering
proxy_buffering off; # proxy_buffering off;
proxy_request_buffering off; # proxy_request_buffering off;
location / { # location / {
proxy_set_header Host $http_host; # proxy_set_header Host $http_host;
proxy_set_header X-Real-IP $remote_addr; # proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; # proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme; # proxy_set_header X-Forwarded-Proto $scheme;
proxy_connect_timeout 300; # proxy_connect_timeout 300;
# Default is HTTP/1, keepalive is only enabled in HTTP/1.1 # # Default is HTTP/1, keepalive is only enabled in HTTP/1.1
proxy_http_version 1.1; # proxy_http_version 1.1;
proxy_set_header Connection ""; # proxy_set_header Connection "";
chunked_transfer_encoding off; # chunked_transfer_encoding off;
proxy_pass https://minioAPI; # This uses the upstream directive definition to load balance # proxy_pass https://minioAPI; # This uses the upstream directive definition to load balance
} # }
location /minio/ui/ { # location /minio/ui/ {
rewrite ^/minio/ui/(.*) /$1 break; # rewrite ^/minio/ui/(.*) /$1 break;
proxy_set_header Host $http_host; # proxy_set_header Host $http_host;
proxy_set_header X-Real-IP $remote_addr; # proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; # proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme; # proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-NginX-Proxy true; # proxy_set_header X-NginX-Proxy true;
# This is necessary to pass the correct IP to be hashed # # This is necessary to pass the correct IP to be hashed
real_ip_header X-Real-IP; # real_ip_header X-Real-IP;
proxy_connect_timeout 300; # proxy_connect_timeout 300;
# To support websockets in MinIO versions released after January 2023 # # To support websockets in MinIO versions released after January 2023
proxy_http_version 1.1; # proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade; # proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade"; # proxy_set_header Connection "upgrade";
# Some environments may encounter CORS errors (Kubernetes + Nginx Ingress) # # Some environments may encounter CORS errors (Kubernetes + Nginx Ingress)
# Uncomment the following line to set the Origin request to an empty string # # Uncomment the following line to set the Origin request to an empty string
# proxy_set_header Origin ''; # # proxy_set_header Origin '';
chunked_transfer_encoding off; # chunked_transfer_encoding off;
proxy_pass https://minioUI; # This uses the upstream directive definition to load balance # proxy_pass https://minioUI; # This uses the upstream directive definition to load balance
} # }
location ~ /.well-known/acme-challenge/ { # location ~ /.well-known/acme-challenge/ {
root /var/www/certbot; # root /var/www/certbot;
} # }
} }
} }