update some sslproxy host files to use variables. This will allow nginx to start even if the upstream is not ready

This commit is contained in:
2019-02-04 06:23:15 -05:00
parent 3b0d6248ca
commit 32268ea916
6 changed files with 44 additions and 21 deletions

View File

@@ -1,13 +1,17 @@
proxy_cache_path /data/nginx/cache/abcapi levels=1:2 keys_zone=abcapi:10m max_size=10g
inactive=60m use_temp_path=off;
upstream abcapi_upstream {
server tasks.abc-api_nginx:8084;
server dkhost.xai-corp.net:8084 backup;
}
#upstream abcapi_upstream {
# server tasks.abc-api_nginx:8084;
# server dkhost.xai-corp.net:8084 backup;
#}
server {
# this is the internal Docker DNS, cache only for 30s
resolver 127.0.0.11 valid=30s;
set $backend http://tasks.abc-api_nginx:8084;
listen 443 ssl ipv6only=off;
server_name abcapi.xai-corp.net;
ssl_certificate /etc/letsencrypt/live/xai-corp.net/fullchain.pem;
@@ -17,7 +21,7 @@ server {
add_header Strict-Transport-Security "max-age=15768000; includeSubDomains" always;
location / {
proxy_pass http://abcapi_upstream;
proxy_pass $upstream_addr;
proxy_set_header Host $host; # required for docker client's sake
proxy_set_header X-Real-IP $remote_addr; # pass on real client's IP
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;