Fixes for Reverse Proxy Go-Live (#6)
* Add new area for defining upstream systems. * Example file for demonstration domain. * Use the new upstream hosts section. * Do the proxy directives in the main file. * Commit any final changes. * Fix example resource name. * Mention the need to have ports specified in the upstream file, not server block. * Adjust formatting.
This commit is contained in:
@ -14,7 +14,7 @@ http {
|
||||
include /etc/nginx/mime.types;
|
||||
default_type application/octet-stream;
|
||||
|
||||
log_format main '$remote_addr - $remote_user [$time_local] "$request" '
|
||||
log_format main '$remote_addr - $remote_user [$time_local] $host "$request" '
|
||||
'$status $body_bytes_sent "$http_referer" '
|
||||
'"$http_user_agent" "$http_x_forwarded_for"';
|
||||
|
||||
@ -27,6 +27,27 @@ http {
|
||||
|
||||
#gzip on;
|
||||
|
||||
## Proxy Settings ##
|
||||
proxy_redirect off;
|
||||
proxy_set_header Host $host;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_set_header X-Forwarded-For $remote_addr;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
proxy_set_header HTTP_AUTHORIZATION $http_authorization;
|
||||
proxy_hide_header X-Powered-By;
|
||||
proxy_intercept_errors on;
|
||||
proxy_http_version 1.1;
|
||||
# Proxy Buffer settings - See http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_buffer_size
|
||||
proxy_buffer_size 4k;
|
||||
proxy_buffers 4 32k;
|
||||
proxy_busy_buffers_size 64k;
|
||||
proxy_temp_file_write_size 64k;
|
||||
# Timeouts, give up to 5 minutes for slow apps.
|
||||
proxy_connect_timeout 600;
|
||||
proxy_send_timeout 600;
|
||||
proxy_read_timeout 600;
|
||||
send_timeout 600;
|
||||
|
||||
## LetsEncrypt Certbot Setup ##
|
||||
# Allow nginx to fulfill LetsEncrypt Certbot challenges.
|
||||
server {
|
||||
@ -35,6 +56,9 @@ http {
|
||||
}
|
||||
}
|
||||
|
||||
## Upstream Configuration ##
|
||||
include /etc/nginx/hosts/*;
|
||||
|
||||
## Reverse Proxied Website Configurations ##
|
||||
include /etc/nginx/conf.d/*;
|
||||
}
|
||||
|
Reference in New Issue
Block a user