ansible_roles/zen_rev_proxy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

0.1.6-DEV-20191031-140910

Browse Source 
-------------------------
    * ADD:
      - added special section just for seafile to proxy_site.j2; this is both unfortunate and unavoidable

    * MODIFY:
      - images.thezengarden.net was having issues chaining ssl's; its now a port 80 site with ssl handled only via nginx
This commit is contained in:
Chris Hammer
2019-10-31 14:11:14 -04:00
parent bd82ec227c
commit 2519c0b86c
3 changed files with 25 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
templates/proxy_site.j2
View File

@ -31,7 +31,8 @@ client_max_body_size {{ proxy_sites[item.key]['max_upload'] }};
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
#proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Forwarded-Proto https;
proxy_set_header Host $host;
proxy_pass {{ proxy_sites[item.key]['proto'] }}://{{ proxy_sites[item.key]['dest'] }}:{{ proxy_sites[item.key]['port'] }};
@ -40,4 +41,18 @@ client_max_body_size {{ proxy_sites[item.key]['max_upload'] }};
# re-write redirects to http as to https
proxy_redirect http:// https://;
}
{% if item.key == "seafile.thezengarden.net" %}
location /seafhttp {
rewrite ^/seafhttp(.*)$ $1 break;
proxy_pass {{ proxy_sites[item.key]['proto'] }}://{{ proxy_sites[item.key]['dest'] }}:{{ proxy_sites[item.key]['seafhttp_port'] }};
client_max_body_size 0;
proxy_connect_timeout 36000s;
proxy_read_timeout 36000s;
proxy_send_timeout 36000s;
send_timeout 36000s;
proxy_request_buffering off;
}
{% endif %}
}