pi-ux-ce/Reverse_proxy_Nginx
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

clean manifest
Gitea Actions Demo / Explore-Gitea-Actions (push) Successful in 1m46s
Details

Browse Source
This commit is contained in:
pi-ux-ce
2025-04-23 10:15:12 +01:00
parent a947004e54
commit 089504b76d
2 changed files with 10 additions and 45 deletions
Download Patch File Download Diff File Expand all files Collapse all files
nginx-config.configmap.yaml
+7 -21
View File
@@ -6,36 +6,22 @@ data:
\ proxy_set_header Accept-Encoding \"\";\n\tproxy_set_header \ proxy_set_header Accept-Encoding \"\";\n\tproxy_set_header
\ Host $host;\n\tproxy_set_header X-Real-IP $remote_addr;\n\tproxy_set_header \ Host $host;\n\tproxy_set_header X-Real-IP $remote_addr;\n\tproxy_set_header
\ X-Forwarded-For $proxy_add_x_forwarded_for;\n\tproxy_set_header X-Forwarded-Host \ X-Forwarded-For $proxy_add_x_forwarded_for;\n\tproxy_set_header X-Forwarded-Host
$server_name;\n\t#proxy_set_header Upgrade $http_upgrade;\n\t#proxy_set_header $server_name;\n\n\t#compression settings\n\tgzip on;\n\tgzip_types text/plain
Connection 'upgrade';\n\t#proxy_cache_bypass $http_upgrade; \n\n\tgzip on;\n\tgzip_types application/xml application/json image/svg+xml text/css;\n\tgzip_min_length 1000;\n
text/plain application/xml application/json image/svg+xml text/css;\n\tgzip_min_length \ \n\t#custom log format to display the webiste visited and the IP used\n\tlog_format
1000;\n \n\tlog_format my_custom_format '$http_host $remote_addr - $remote_user my_custom_format '$http_host $remote_addr - $remote_user [$time_local] \"$request\"
[$time_local] \"$request\" $status $body_bytes_sent \"$http_referer\" \"$http_user_agent\"';\n\n\n\tserver $status $body_bytes_sent \"$http_referer\" \"$http_user_agent\"';\n\n\n\tserver
{\n\tlisten 80;\n listen 443 default ssl;\n\tssl_certificate /etc/nginx/ssl/live/default.tryton.geeraert.eu/fullchain.pem; {\n\tlisten 80;\n listen 443 default ssl;\n\tssl_certificate /etc/nginx/ssl/live/default.tryton.geeraert.eu/fullchain.pem;
# managed by$\n ssl_certificate_key /etc/nginx/ssl/live/default.tryton.geeraert.eu/privkey.pem; # managed by$\n ssl_certificate_key /etc/nginx/ssl/live/default.tryton.geeraert.eu/privkey.pem;
# managed $\n location / {\n proxy_pass http://1.1.1.1;\n # managed $\n location / {\n proxy_pass http://1.1.1.1;\n
\ proxy_redirect off;\n proxy_set_header Host $host;\n \ proxy_redirect off;\n proxy_set_header Host $host;\n
\ proxy_set_header X-Real-IP $remote_addr;\n proxy_set_header \ proxy_set_header X-Real-IP $remote_addr;\n proxy_set_header
\ X-Forwarded-For $proxy_add_x_forwarded_for;\n proxy_set_header X-Forwarded-Host \ X-Forwarded-For $proxy_add_x_forwarded_for;\n proxy_set_header X-Forwarded-Host
$server_name;\n\t\t}\n\t}\n\t# Connection header for WebSocket reverse proxy\n\tmap $server_name;\n\t\t}\n\t}\n\n\t# Connection header for WebSocket reverse proxy\n\tmap
$http_upgrade $connection_upgrade {\n\t\tdefault upgrade;\n '' close;\n\t}\n\n\tinclude $http_upgrade $connection_upgrade {\n\t\tdefault upgrade;\n '' close;\n\t}\n\n\tinclude
/etc/nginx/conf.d/*.conf;\n\tresolver 127.0.0.1 ipv6=off valid=40s; # The DNS /etc/nginx/conf.d/*.conf;\n\tresolver 127.0.0.1 ipv6=off valid=40s; # The DNS
IP server\n\t\n\t#https://www.tweaked.io/guide/nginx-proxying/\n\tproxy_cache_path IP server\n\t\n\t#https://www.tweaked.io/guide/nginx-proxying/\n\tproxy_cache_path
/tmp/cache levels=1:2 keys_zone=cache:60m max_size=1G;\n\n#\tlog_format main '$remote_addr /tmp/cache levels=1:2 keys_zone=cache:60m max_size=1G;\n\n\n}\n\n\n"
- $remote_user [$time_local] '\n# '\"$request\" $status
$body_bytes_sent '\n# '\"$http_referer\" \"$http_user_agent\"
\"$gzip_ratio\"'\n# 'host - $host '\n# '$scheme
$proxy_add_x_forwarded_for '\n# '$remote_addr [$time_local]'\n#
\ '\"$request\" $status $body_bytes_sent '\n# '\"$http_referer\"
\"$http_user_agent\"'\n# '\"$request\" $status $body_bytes_sent
'\n# '\"$http_referer\" \"$http_user_agent\" \"$gzip_ratio\"';\n\n#
\ log_format upstream_time '$remote_addr - $remote_user [$time_local] '\n# '\"$request\"
$status $body_bytes_sent '\n# '\"$http_referer\" \"$http_user_agent\"'\n#
\ 'host + $host '\n# '$scheme
$proxy_add_x_forwarded_for '\n# '$remote_addr [$time_local]'\n#
\ '\"$request\" $status $body_bytes_sent '\n# '\"$http_referer\"
\"$http_user_agent\"'\n# 'rt=$request_time uct=\"$upstream_connect_time\"
uht=\"$upstream_header_time\" urt=\"$upstream_response_time\"';\n\n\n}\n\n\n"
kind: ConfigMap kind: ConfigMap
metadata: metadata:
creationTimestamp: null creationTimestamp: null
nginx.conf
+3 -24
View File
@@ -13,14 +13,13 @@ http {
proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Host $server_name; proxy_set_header X-Forwarded-Host $server_name;
#proxy_set_header Upgrade $http_upgrade;
#proxy_set_header Connection 'upgrade';
#proxy_cache_bypass $http_upgrade;
#compression settings
gzip on; gzip on;
gzip_types text/plain application/xml application/json image/svg+xml text/css; gzip_types text/plain application/xml application/json image/svg+xml text/css;
gzip_min_length 1000; gzip_min_length 1000;
#custom log format to display the webiste visited and the IP used
log_format my_custom_format '$http_host $remote_addr - $remote_user [$time_local] "$request" $status $body_bytes_sent "$http_referer" "$http_user_agent"'; log_format my_custom_format '$http_host $remote_addr - $remote_user [$time_local] "$request" $status $body_bytes_sent "$http_referer" "$http_user_agent"';
@@ -38,6 +37,7 @@ http {
proxy_set_header X-Forwarded-Host $server_name; proxy_set_header X-Forwarded-Host $server_name;
} }
} }
# Connection header for WebSocket reverse proxy # Connection header for WebSocket reverse proxy
map $http_upgrade $connection_upgrade { map $http_upgrade $connection_upgrade {
default upgrade; default upgrade;
@@ -50,27 +50,6 @@ http {
#https://www.tweaked.io/guide/nginx-proxying/ #https://www.tweaked.io/guide/nginx-proxying/
proxy_cache_path /tmp/cache levels=1:2 keys_zone=cache:60m max_size=1G; proxy_cache_path /tmp/cache levels=1:2 keys_zone=cache:60m max_size=1G;
# log_format main '$remote_addr - $remote_user [$time_local] '
# '"$request" $status $body_bytes_sent '
# '"$http_referer" "$http_user_agent" "$gzip_ratio"'
# 'host - $host '
# '$scheme $proxy_add_x_forwarded_for '
# '$remote_addr [$time_local]'
# '"$request" $status $body_bytes_sent '
# '"$http_referer" "$http_user_agent"'
# '"$request" $status $body_bytes_sent '
# '"$http_referer" "$http_user_agent" "$gzip_ratio"';
# log_format upstream_time '$remote_addr - $remote_user [$time_local] '
# '"$request" $status $body_bytes_sent '
# '"$http_referer" "$http_user_agent"'
# 'host + $host '
# '$scheme $proxy_add_x_forwarded_for '
# '$remote_addr [$time_local]'
# '"$request" $status $body_bytes_sent '
# '"$http_referer" "$http_user_agent"'
# 'rt=$request_time uct="$upstream_connect_time" uht="$upstream_header_time" urt="$upstream_response_time"';
} }