forked from M-Labs/it-infra
81 lines
2.5 KiB
Plaintext
81 lines
2.5 KiB
Plaintext
|
upstream rfq_server {
|
||
|
|
server 127.0.0.1:5000;
|
||
|
|
}
|
||
|
|
|
||
|
|
server {
|
||
|
|
limit_conn addr 5;
|
||
|
|
|
||
|
|
root /var/www/m-labs-intl.com/html;
|
||
|
|
index index.html index.htm index.nginx-debian.html;
|
||
|
|
|
||
|
|
server_name m-labs-intl.com;
|
||
|
|
|
||
|
|
location / {
|
||
|
|
try_files $uri $uri/ =404;
|
||
|
|
}
|
||
|
|
|
||
|
|
listen [::]:443 ssl ipv6only=on; # managed by Certbot
|
||
|
|
listen 443 ssl; # managed by Certbot
|
||
|
|
ssl_certificate /etc/letsencrypt/live/m-labs-intl.com/fullchain.pem; # managed by Certbot
|
||
|
|
ssl_certificate_key /etc/letsencrypt/live/m-labs-intl.com/privkey.pem; # managed by Certbot
|
||
|
|
include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
|
||
|
|
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
|
||
|
|
}
|
||
|
|
|
||
|
|
server {
|
||
|
|
server_name www.m-labs-intl.com;
|
||
|
|
return 301 https://m-labs-intl.com$request_uri;
|
||
|
|
|
||
|
|
listen [::]:443 ssl; # managed by Certbot
|
||
|
|
listen 443 ssl; # managed by Certbot
|
||
|
|
ssl_certificate /etc/letsencrypt/live/m-labs-intl.com/fullchain.pem; # managed by Certbot
|
||
|
|
ssl_certificate_key /etc/letsencrypt/live/m-labs-intl.com/privkey.pem; # managed by Certbot
|
||
|
|
include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
|
||
|
|
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
|
||
|
|
}
|
||
|
|
|
||
|
|
server {
|
||
|
|
server_name hooks.m-labs-intl.com;
|
||
|
|
limit_conn addr 5;
|
||
|
|
|
||
|
|
location /rfq {
|
||
|
|
proxy_pass http://rfq_server/rfq;
|
||
|
|
proxy_set_header Host $host;
|
||
|
|
proxy_set_header X-Real-IP $remote_addr;
|
||
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||
|
|
proxy_set_header X-Forwarded-Proto $scheme;
|
||
|
|
proxy_read_timeout 30;
|
||
|
|
proxy_connect_timeout 30;
|
||
|
|
proxy_send_timeout 30;
|
||
|
|
}
|
||
|
|
|
||
|
|
location / {
|
||
|
|
return 418;
|
||
|
|
}
|
||
|
|
|
||
|
|
listen [::]:443 ssl; # managed by Certbot
|
||
|
|
listen 443 ssl; # managed by Certbot
|
||
|
|
ssl_certificate /etc/letsencrypt/live/m-labs-intl.com/fullchain.pem; # managed by Certbot
|
||
|
|
ssl_certificate_key /etc/letsencrypt/live/m-labs-intl.com/privkey.pem; # managed by Certbot
|
||
|
|
include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
|
||
|
|
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
|
||
|
|
}
|
||
|
|
|
||
|
|
server {
|
||
|
|
limit_conn addr 5;
|
||
|
|
if ($host = m-labs-intl.com) {
|
||
|
|
return 301 https://$host$request_uri;
|
||
|
|
} # managed by Certbot
|
||
|
|
|
||
|
|
|
||
|
|
if ($host = www.m-labs-intl.com) {
|
||
|
|
return 301 https://m-labs-intl.com$request_uri;
|
||
|
|
} # managed by Certbot
|
||
|
|
|
||
|
|
|
||
|
|
listen 80;
|
||
|
|
listen [::]:80;
|
||
|
|
|
||
|
|
server_name m-labs-intl.com www.m-labs-intl.com hooks.m-labs-intl.com;
|
||
|
|
return 301 https://$host$request_uri;
|
||
|
|
}
|