added example nginx configs

This commit is contained in:
hyperdefined 2023-07-27 12:02:31 -04:00
parent 38ceb1be77
commit d5e5cb0533
No known key found for this signature in database
GPG Key ID: EB0B55B31E88AB03
3 changed files with 146 additions and 0 deletions

2
web-configs/README.md Normal file
View File

@ -0,0 +1,2 @@
# Example Webserver Configs
These are example webserver configurations for how to run cobalt.

View File

@ -0,0 +1,59 @@
# Define the location for where cobalt web runs. Change the port to fit your needs.
upstream cobaltweb {
server 127.0.0.1:9000;
keepalive 64;
}
# Define the location for where cobalt API runs. Change the port to fit your needs.
upstream cobaltapi {
server 127.0.0.1:9001;
keepalive 64;
}
# Server block definition for cobalt web.
server {
# Listen for for requests to the domain on port 80.
listen 80;
listen [::]:80;
server_name co.wukko.sh;
# Set loggging.
access_log /var/log/nginx/co.wukko.sh.access.log;
error_log /var/log/nginx/co.wukko.sh.error.log;
# Pass all requests to cobalt web, as defined above.
location / {
proxy_set_header X-Forwarded-Host $host;
proxy_set_header X-Forwarded-Server $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_pass http://cobaltweb;
proxy_http_version 1.1;
proxy_pass_request_headers on;
proxy_set_header Connection "keep-alive";
proxy_store off;
}
}
# Server block definition for cobalt API.
server {
# Listen for for requests to the domain on port 80.
listen 80;
listen [::]:80;
server_name co.wuk.sh;
# Set loggging.
access_log /var/log/nginx/co.wuk.sh.access.log;
error_log /var/log/nginx/co.wuk.sh.error.log;
# Pass all requests to cobalt API, as defined above.
location / {
proxy_set_header X-Forwarded-Host $host;
proxy_set_header X-Forwarded-Server $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_pass http://cobaltapi;
proxy_http_version 1.1;
proxy_pass_request_headers on;
proxy_set_header Connection "keep-alive";
proxy_store off;
}
}

View File

@ -0,0 +1,85 @@
# Redirect any HTTP traffic to HTTPS
server {
listen 80;
listen [::]:80;
server_name co.wukko.sh;
return 301 https://$host$request_uri;
}
# Redirect any HTTP traffic to HTTPS
server {
listen 80;
listen [::]:80;
server_name co.wuk.sh;
return 301 https://$host$request_uri;
}
# Define the location for where cobalt web runs. Change the port to fit your needs.
upstream cobaltweb {
server 127.0.0.1:9000;
keepalive 64;
}
# Define the location for where cobalt API runs. Change the port to fit your needs.
upstream cobaltapi {
server 127.0.0.1:9001;
keepalive 64;
}
# Server block definition for cobalt web.
server {
# Listen for for requests to the domain on port 443.
listen 443 ssl http2;
listen [::]:443 ssl http2;
server_name co.wukko.sh;
# Set loggging.
access_log /var/log/nginx/co.wukko.sh.access.log;
error_log /var/log/nginx/co.wukko.sh.error.log;
# Set your HTTPS certificate.
ssl_certificate /etc/letsencrypt/live/co.wukko.sh/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/co.wukko.sh/privkey.pem;
# Pass all requests to cobalt web, as defined above.
location / {
proxy_set_header X-Forwarded-Host $host;
proxy_set_header X-Forwarded-Server $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_pass http://cobaltweb;
proxy_http_version 1.1;
proxy_pass_request_headers on;
proxy_set_header Connection "keep-alive";
proxy_store off;
}
}
# Server block definition for cobalt API.
server {
# Listen for for requests to the domain on port 443.
listen 443 ssl http2;
listen [::]:443 ssl http2;
server_name co.wuk.sh;
# Set loggging.
access_log /var/log/nginx/co.wuk.sh.access.log;
error_log /var/log/nginx/co.wuk.sh.error.log;
# Set your HTTPS certificate.
ssl_certificate /etc/letsencrypt/live/co.wuk.sh/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/co.wuk.sh/privkey.pem;
# Pass all requests to cobalt API, as defined above.
location / {
proxy_set_header X-Forwarded-Host $host;
proxy_set_header X-Forwarded-Server $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_pass http://cobaltapi;
proxy_http_version 1.1;
proxy_pass_request_headers on;
proxy_set_header Connection "keep-alive";
proxy_store off;
}
}