33 lines
1.1 KiB
Plaintext
33 lines
1.1 KiB
Plaintext
proxy_cache_path /data/nginx/cache/abcapi levels=1:2 keys_zone=abcapi:10m max_size=10g
|
|
inactive=60m use_temp_path=off;
|
|
|
|
#upstream abcapi_upstream {
|
|
# server tasks.abc-api_nginx:8084;
|
|
# server dkhost.xai-corp.net:8084 backup;
|
|
#}
|
|
|
|
server {
|
|
# this is the internal Docker DNS, cache only for 30s
|
|
resolver 127.0.0.11 valid=30s;
|
|
|
|
set $backend http://dkhost.xai-corp.net:8084;
|
|
|
|
listen 443 ssl ipv6only=off;
|
|
server_name abcapi.xai-corp.net;
|
|
ssl_certificate /etc/letsencrypt/live/xai-corp.net/fullchain.pem;
|
|
ssl_certificate_key /etc/letsencrypt/live/xai-corp.net/privkey.pem;
|
|
|
|
#Strict-Transport-Security: max-age=15768000
|
|
add_header Strict-Transport-Security "max-age=15768000; includeSubDomains" always;
|
|
|
|
location / {
|
|
proxy_pass $backend;
|
|
proxy_set_header Host $host; # required for docker client's sake
|
|
proxy_set_header X-Real-IP $remote_addr; # pass on real client's IP
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
proxy_set_header X-Forwarded-Proto $scheme;
|
|
proxy_set_header Connection $http_connection;
|
|
}
|
|
|
|
}
|