remotely/nginx/proxy.conf

90 lines
4.4 KiB
Plaintext
Raw Normal View History

# Reverse Proxy for remotely
server {
server_name REPLACE_NGINX_HOST *.REPLACE_NGINX_HOST REPLACE_NGINX_VHOSTS;
listen REPLACE_NGINX_PORT REPLACE_SERVER_LISTEN_OPTS;
listen [::]:REPLACE_NGINX_PORT REPLACE_SERVER_LISTEN_OPTS;
access_log /var/log/nginx/access.REPLACE_NGINX_HOST.log;
error_log /var/log/nginx/error.REPLACE_NGINX_HOST.log info;
client_max_body_size 0;
ssl_prefer_server_ciphers off;
keepalive_timeout 75 75;
ssl_protocols TLSv1.2 TLSv1.3;
ssl_certificate_key /etc/letsencrypt/live/domain/privkey.pem;
ssl_certificate /etc/letsencrypt/live/domain/fullchain.pem;
ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384;
add_header Strict-Transport-Security "max-age=7200";
include REPLACE_NGINX_INCLUDE;
include /etc/nginx/global.d/nginx-defaults.conf;
location / {
send_timeout 3600;
client_max_body_size 1024M;
proxy_http_version 1.1;
proxy_intercept_errors off;
proxy_send_timeout 3600;
proxy_read_timeout 3600;
proxy_connect_timeout 3600;
proxy_buffering off;
proxy_request_buffering off;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Forwarded-Scheme $scheme;
proxy_set_header X-Forwarded-For $remote_addr;
proxy_set_header X-Forwarded-Port $server_port;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $connection_upgrade;
proxy_set_header Accept-Encoding "";
proxy_redirect http:// https://;
proxy_pass REPLACE_HOST_PROXY;
}
location /_blazor {
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_set_header Host $host;
proxy_cache_bypass $http_upgrade;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Forwarded-Host $host;
proxy_pass REPLACE_HOST_PROXY;
}
location /AgentHub {
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_set_header Host $host;
proxy_cache_bypass $http_upgrade;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Forwarded-Host $host;
proxy_pass REPLACE_HOST_PROXY;
}
location /ViewerHub {
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_set_header Host $host;
proxy_cache_bypass $http_upgrade;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Forwarded-Host $host;
proxy_pass REPLACE_HOST_PROXY;
}
location /CasterHub {
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_set_header Host $host;
proxy_cache_bypass $http_upgrade;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Forwarded-Host $host;
proxy_pass REPLACE_HOST_PROXY;
}
}
}