38 lines
1.2 KiB
Plaintext
38 lines
1.2 KiB
Plaintext
proxy_cache_path /data/nginx/cache/dkui levels=1:2 keys_zone=dkui:10m max_size=10g
|
|
inactive=60m use_temp_path=off;
|
|
|
|
#upstream portainer_upstream {
|
|
# server tasks.dkui_app:9000;
|
|
#}
|
|
|
|
# dkui.xai-corp.net
|
|
server {
|
|
# this is the internal Docker DNS, cache only for 30s
|
|
resolver 127.0.0.11 valid=30s;
|
|
|
|
set $backend http://tasks.dkui_app:9000;
|
|
|
|
# listen 443 ssl ipv6only=off;
|
|
listen 443 ssl;
|
|
server_name dkui.xai-corp.net;
|
|
ssl_certificate /etc/letsencrypt/live/xai-corp.net/fullchain.pem;
|
|
ssl_certificate_key /etc/letsencrypt/live/xai-corp.net/privkey.pem;
|
|
|
|
#Strict-Transport-Security: max-age=15768000
|
|
add_header Strict-Transport-Security "max-age=600; includeSubDomains" always;
|
|
|
|
location / {
|
|
proxy_set_header Connection $http_connection;
|
|
proxy_set_header Host $host:$server_port;
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
proxy_set_header X-Forwarded-Host $host;
|
|
proxy_set_header X-Forwarded-Proto $scheme;
|
|
proxy_pass $backend;
|
|
|
|
proxy_connect_timeout 3s;
|
|
# proxy_next_upstream_timeout 1.5s;
|
|
}
|
|
|
|
}
|