You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
dc3-web/dc3/nginx/conf.d/default.conf

57 lines
1.7 KiB

5 years ago
server {
listen 80;
4 years ago
server_name demo.dc3.site;
5 years ago
location / {
root /usr/share/nginx/html;
index index.html index.htm;
}
error_page 500 502 503 504 /50x.html;
location = /50x.html {
root /usr/share/nginx/html;
}
5 years ago
return 301 https://$server_name$request_uri;
5 years ago
}
server {
listen 443 ssl;
4 years ago
server_name dc3-web;
5 years ago
add_header X-Xss-Protection 1;
add_header X-Frame-Options DENY;
add_header X-Content-Type-Options nosniff;
ssl_prefer_server_ciphers on;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_dhparam /etc/ssl/certs/dhparam.pem;
ssl_ciphers "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH+aRSA+RC4 EECDH EDH+aRSA !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS !RC4";
4 years ago
ssl_certificate /etc/nginx/conf.crt/dc3.site/fullchain.pem;
ssl_certificate_key /etc/nginx/conf.crt/dc3.site/privkey.pem;
5 years ago
location / {
root /usr/share/nginx/html;
index index.html index.htm;
}
5 years ago
location ^~/user_api/ {
proxy_pass http://dc3-auth:8300/;
}
location ^~/manager_api/ {
5 years ago
proxy_pass http://dc3-manager:8400/;
}
5 years ago
location ^~/data_api/ {
proxy_pass http://dc3-data:8500/;
}
5 years ago
error_page 500 502 503 504 /50x.html;
location = /50x.html {
root /usr/share/nginx/html;
}
}