sogun/chezmoi
1
0
Fork 0
Code Activity

nginx: /files, /static www paths

Browse source
This commit is contained in:
Vladimír Dudr 2022-05-13 14:15:13 +02:00
parent 8613e39a81
commit dcb3d1c0f4
1 changed files with 126 additions and 23 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

103
dot_config/nginx/nginx.conf.tmpl
View file

@ -202,12 +202,24 @@ http {
proxy_pass http://s3.appsincloud.net:7480/; proxy_pass http://s3.appsincloud.net:7480/;
} }
location /files/ {
proxy_set_header X-Forwarded-Proto $scheme;
proxy_pass http://s3.appsincloud.net:7480/;
}
location /_static/ { location /_static/ {
internal; internal;
root {{ .chezmoi.homeDir }}/jopixel/$project/www/static; root {{ .chezmoi.homeDir }}/jopixel/$project/www/static;
try_files $uri =404; try_files $uri =404;
} }
# ^~ == prefix location, ignoruj regexp locations
location ^~ /static/ {
alias {{ .chezmoi.homeDir }}/jopixel/$project/www/static/;
expires max;
log_not_found off;
}
location ~* \.(js|css|png|jpg|jpeg|gif|ico)$ { location ~* \.(js|css|png|jpg|jpeg|gif|ico)$ {
expires max; expires max;
log_not_found off; log_not_found off;
@ -425,4 +437,95 @@ http {
} }
} }
server {
listen 443 ssl;
listen [::]:443 ssl;
server_name djinn1.localhost;
# Mozilla Guideline v5.4, nginx 1.17.7, OpenSSL 1.1.1d, intermediate configuration
ssl_protocols TLSv1.2 TLSv1.3;
ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384;
ssl_prefer_server_ciphers off;
ssl_session_timeout 1d;
ssl_session_cache shared:SSL:10m; # about 40000 sessions
ssl_session_tickets off;
add_header Strict-Transport-Security "max-age=63072000" always;
set $prefix "";
ssl_certificate {{ .chezmoi.homeDir }}/.config/nginx/ssl/localhost.crt;
ssl_certificate_key {{ .chezmoi.homeDir }}/.config/nginx/ssl/localhost.key;
root {{ .chezmoi.homeDir }}/jopixel/jitsi-meet/;
# ssi on with javascript for multidomain variables in config.js
ssi on;
ssi_types application/x-javascript application/javascript;
index index.html index.htm;
error_page 404 /static/404.html;
gzip on;
gzip_types text/plain text/css application/javascript application/json image/x-icon application/octet-stream application/wasm;
gzip_vary on;
gzip_proxied no-cache no-store private expired auth;
gzip_min_length 512;
# location = /config.js {
# alias /etc/jitsi/meet/djinn1.jopixel.cz-config.js;
# }
# location = /external_api.js {
# alias /usr/share/jitsi-meet/libs/external_api.min.js;
# }
# ensure all static content can always be found first
location ~ ^/(libs|css|static|images|fonts|lang|sounds|connection_optimization|.well-known)/(.*)$
{
add_header 'Access-Control-Allow-Origin' '*';
alias {{ .chezmoi.homeDir }}/jopixel/jitsi-meet/$1/$2;
}
location ~ ^/([^/?&:'"]+)$ {
try_files $uri @root_path;
}
location @root_path {
rewrite ^/(.*)$ / break;
}
# location ~ ^/([^/?&:'"]+)/config.js$
# {
# set $subdomain "$1.";
# set $subdir "$1/";
# alias /etc/jitsi/meet/djinn1.jopixel.cz-config.js;
# }
# BOSH for subdomains
location ~ ^/([^/?&:'"]+)/http-bind {
set $subdomain "$1.";
set $subdir "$1/";
set $prefix "$1";
rewrite ^/(.*)$ /http-bind;
}
# websockets for subdomains
location ~ ^/([^/?&:'"]+)/xmpp-websocket {
set $subdomain "$1.";
set $subdir "$1/";
set $prefix "$1";
rewrite ^/(.*)$ /xmpp-websocket;
}
# Anything that didn't match above, and isn't a real file, assume it's a room name and redirect to /
location ~ ^/([^/?&:'"]+)/(.*)$ {
set $subdomain "$1.";
set $subdir "$1/";
rewrite ^/([^/?&:'"]+)/(.*)$ /$2;
}
}
} }