entrouvert
/
publik-common
17
0
Fork 0
Code Issues Pull Requests Releases Activity

doc: do not mix nginx configuration (#32096)

This commit is contained in:
Christophe Siraut 2019-04-09 16:38:29 +02:00
parent 4f5a9e96de
commit e657b14e14
23 changed files with 400 additions and 401 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

37
doc/nginx/sites-available-haproxy/authentic.conf Normal file
View File

@ -0,0 +1,37 @@
server {
listen 80;
listen [::]:80;
server_name ~^connexion.* ~^authentic-.*;
access_log /var/log/nginx/authentic2-multitenant-access.log combined_full;
error_log /var/log/nginx/authentic2-multitenant-error.log;
location ~ ^/static/(.+)$ {
root /;
try_files /var/lib/authentic2-multitenant/tenants/$host/static/$1
/var/lib/authentic2-multitenant/tenants/$host/theme/static/$1
/var/lib/authentic2-multitenant/collectstatic/$1
=404;
}
location ~ ^/media/(.+)$ {
alias /var/lib/authentic2-multitenant/tenants/$host/media/$1;
}
location /robots.txt {
alias /var/lib/authentic2-multitenant/www/robots.txt;
}
location / {
add_header 'Access-Control-Allow-Origin' '*';
proxy_pass http://unix:/var/run/authentic2-multitenant/authentic2-multitenant.sock;
proxy_set_header Host $http_host;
proxy_set_header X-Forwarded-SSL on;
proxy_set_header X-Forwarded-Protocol ssl;
proxy_set_header X-Forwarded-Proto https;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
}

35
doc/nginx/sites-available-haproxy/bijoe.conf Normal file
View File

@ -0,0 +1,35 @@
server {
listen 80;
listen [::]:80;
server_name ~^bijoe.*;
access_log /var/log/nginx/bijoe-access.log combined_full;
error_log /var/log/nginx/bijoe-error.log;
location ~ ^/static/(.+)$ {
root /;
try_files /var/lib/bijoe/tenants/$host/static/$1
/var/lib/bijoe/tenants/$host/theme/static/$1
/var/lib/bijoe/collectstatic/$1
=404;
}
location ~ ^/media/(.+)$ {
alias /var/lib/bijoe/tenants/$host/media/$1;
}
location /robots.txt {
alias /var/lib/bijoe/www/robots.txt;
}
location / {
proxy_pass http://unix:/var/run/bijoe/bijoe.sock;
proxy_set_header Host $http_host;
proxy_set_header X-Forwarded-SSL on;
proxy_set_header X-Forwarded-Protocol ssl;
proxy_set_header X-Forwarded-Proto https;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
}

35
doc/nginx/sites-available-haproxy/chrono.conf Normal file
View File

@ -0,0 +1,35 @@
server {
listen 80;
listen [::]:80;
server_name ~^agenda.* ~^agendas.*;
access_log /var/log/nginx/chrono-access.log combined_full;
error_log /var/log/nginx/chrono-error.log;
location ~ ^/static/(.+)$ {
root /;
try_files /var/lib/chrono/tenants/$host/static/$1
/var/lib/chrono/tenants/$host/theme/static/$1
/var/lib/chrono/collectstatic/$1
=404;
}
location ~ ^/media/(.+)$ {
alias /var/lib/chrono/tenants/$host/media/$1;
}
location /robots.txt {
alias /var/lib/chrono/www/robots.txt;
}
location / {
proxy_pass http://unix:/var/run/chrono/chrono.sock;
proxy_set_header Host $http_host;
proxy_set_header X-Forwarded-SSL on;
proxy_set_header X-Forwarded-Protocol ssl;
proxy_set_header X-Forwarded-Proto https;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
}

36
doc/nginx/sites-available-haproxy/combo.conf Normal file
View File

@ -0,0 +1,36 @@
server {
listen 80 default_server;
listen [::]:80 default_server;
server_name ~^mon.* ~^agents.*;
access_log /var/log/nginx/combo-access.log combined_full;
error_log /var/log/nginx/combo-error.log;
location ~ ^/static/(.+)$ {
root /;
try_files /var/lib/combo/tenants/$host/static/$1
/var/lib/combo/tenants/$host/theme/static/$1
/var/lib/combo/collectstatic/$1
=404;
add_header 'Access-Control-Allow-Origin' '*';
}
location ~ ^/media/(.+)$ {
alias /var/lib/combo/tenants/$host/media/$1;
}
location /robots.txt {
alias /var/lib/combo/www/robots.txt;
}
location / {
proxy_pass http://unix:/var/run/combo/combo.sock;
proxy_set_header Host $http_host;
proxy_set_header X-Forwarded-SSL on;
proxy_set_header X-Forwarded-Protocol ssl;
proxy_set_header X-Forwarded-Proto https;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
}

35
doc/nginx/sites-available-haproxy/corbo.conf Normal file
View File

@ -0,0 +1,35 @@
server {
listen 80;
listen [::]:80;
server_name ~^corbo.*;
access_log /var/log/nginx/corbo-access.log combined_full;
error_log /var/log/nginx/corbo-error.log;
location ~ ^/static/(.+)$ {
root /;
try_files /var/lib/corbo/tenants/$host/static/$1
/var/lib/corbo/tenants/$host/theme/static/$1
/var/lib/corbo/collectstatic/$1
=404;
}
location ~ ^/media/(.+)$ {
alias /var/lib/corbo/tenants/$host/media/$1;
}
location /robots.txt {
alias /var/lib/corbo/www/robots.txt;
}
location / {
proxy_pass http://unix:/var/run/corbo/corbo.sock;
proxy_set_header Host $http_host;
proxy_set_header X-Forwarded-SSL on;
proxy_set_header X-Forwarded-Protocol ssl;
proxy_set_header X-Forwarded-Proto https;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
}

35
doc/nginx/sites-available-haproxy/fargo.conf Normal file
View File

@ -0,0 +1,35 @@
server {
listen 80;
listen [::]:80;
server_name ~^portedoc.* ~^porte-doc.*;
access_log /var/log/nginx/fargo-access.log combined_full;
error_log /var/log/nginx/fargo-error.log;
location ~ ^/static/(.+)$ {
root /;
try_files /var/lib/fargo/tenants/$host/static/$1
/var/lib/fargo/tenants/$host/theme/static/$1
/var/lib/fargo/collectstatic/$1
=404;
}
location ~ ^/media/(.+)$ {
alias /var/lib/fargo/tenants/$host/media/$1;
}
location /robots.txt {
alias /var/lib/fargo/www/robots.txt;
}
location / {
proxy_pass http://unix:/var/run/fargo/fargo.sock;
proxy_set_header Host $http_host;
proxy_set_header X-Forwarded-SSL on;
proxy_set_header X-Forwarded-Protocol ssl;
proxy_set_header X-Forwarded-Proto https;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
}

35
doc/nginx/sites-available-haproxy/hobo.conf Normal file
View File

@ -0,0 +1,35 @@
server {
listen 80;
listen [::]:80;
server_name ~^hobo.*;
access_log /var/log/nginx/hobo-access.log combined_full;
error_log /var/log/nginx/hobo-error.log;
location ~ ^/static/(.+)$ {
root /;
try_files /var/lib/hobo/tenants/$host/static/$1
/var/lib/hobo/tenants/$host/theme/static/$1
/var/lib/hobo/collectstatic/$1
=404;
}
location ~ ^/media/(.+)$ {
alias /var/lib/hobo/tenants/$host/media/$1;
}
location /robots.txt {
alias /var/lib/hobo/www/robots.txt;
}
location / {
proxy_pass http://unix:/var/run/hobo/hobo.sock;
proxy_set_header Host $http_host;
proxy_set_header X-Forwarded-SSL on;
proxy_set_header X-Forwarded-Protocol ssl;
proxy_set_header X-Forwarded-Proto https;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
}

35
doc/nginx/sites-available-haproxy/mandayejs.conf Normal file
View File

@ -0,0 +1,35 @@
server {
listen 80;
listen [::]:80;
server_name ~^mandayejs.*;
access_log /var/log/nginx/mandayejs-access.log combined_full;
error_log /var/log/nginx/mandayejs-error.log;
location ~ ^/static/(.+)$ {
root /;
try_files /var/lib/mandayejs/tenants/$host/static/$1
/var/lib/mandayejs/tenants/$host/theme/static/$1
/var/lib/mandayejs/collectstatic/$1
=404;
}
location ~ ^/media/(.+)$ {
alias /var/lib/mandayejs/tenants/$host/media/$1;
}
location /robots.txt {
alias /var/lib/mandayejs/www/robots.txt;
}
location / {
proxy_pass http://unix:/var/run/mandayejs/mandayejs.sock;
proxy_set_header Host $http_host;
proxy_set_header X-Forwarded-SSL on;
proxy_set_header X-Forwarded-Protocol ssl;
proxy_set_header X-Forwarded-Proto https;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
}

35
doc/nginx/sites-available-haproxy/passerelle.conf Normal file
View File

@ -0,0 +1,35 @@
server {
listen 80;
listen [::]:80;
server_name ~^passerelle.*;
access_log /var/log/nginx/passerelle-access.log combined_full;
error_log /var/log/nginx/passerelle-error.log;
location ~ ^/static/(.+)$ {
root /;
try_files /var/lib/passerelle/tenants/$host/static/$1
/var/lib/passerelle/tenants/$host/theme/static/$1
/var/lib/passerelle/collectstatic/$1
=404;
}
location ~ ^/media/(.+)$ {
alias /var/lib/passerelle/tenants/$host/media/$1;
}
location /robots.txt {
alias /var/lib/passerelle/www/robots.txt;
}
location / {
proxy_pass http://unix:/var/run/passerelle/passerelle.sock;
proxy_set_header Host $http_host;
proxy_set_header X-Forwarded-SSL on;
proxy_set_header X-Forwarded-Protocol ssl;
proxy_set_header X-Forwarded-Proto https;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
}

36
doc/nginx/sites-available-haproxy/wcs.conf Normal file
View File

@ -0,0 +1,36 @@
server {
listen 80;
listen [::]:80;
server_name ~^demarches.* ~^formulaires.*;
access_log /var/log/nginx/wcs-access.log combined_full;
error_log /var/log/nginx/wcs-error.log;
location ~ ^/static/(.+)$ {
root /;
try_files /var/lib/wcs/$host/static/$1
/var/lib/wcs/$host/theme/static/$1
/var/lib/wcs/collectstatic/$1
=404;
}
location ~ ^/media/(.+)$ {
alias /var/lib/wcs/$host/media/$1;
}
location /robots.txt {
alias /var/lib/wcs/www/robots.txt;
}
location / {
add_header 'Access-Control-Allow-Origin' '*';
proxy_pass http://unix:/var/run/wcs/wcs.sock;
proxy_set_header Host $http_host;
proxy_set_header X-Forwarded-SSL on;
proxy_set_header X-Forwarded-Protocol ssl;
proxy_set_header X-Forwarded-Proto https;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
}

36
doc/nginx/sites-available-haproxy/welco.conf Normal file
View File

@ -0,0 +1,36 @@
server {
listen 80;
listen [::]:80;
server_name ~^welco.*;
access_log /var/log/nginx/welco-access.log combined_full;
error_log /var/log/nginx/welco-error.log;
location ~ ^/static/(.+)$ {
root /;
try_files /var/lib/welco/tenants/$host/static/$1
/var/lib/welco/tenants/$host/theme/static/$1
/var/lib/welco/collectstatic/$1
=404;
}
location ~ ^/media/(.+)$ {
alias /var/lib/welco/tenants/$host/media/$1;
}
location /robots.txt {
alias /var/lib/welco/www/robots.txt;
}
location / {
proxy_pass http://unix:/var/run/welco/welco.sock;
proxy_set_header Host $http_host;
proxy_set_header X-Forwarded-SSL on;
proxy_set_header X-Forwarded-Protocol ssl;
proxy_set_header X-Forwarded-Proto https;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
}

10
doc/nginx/sites-available/0_http-to-https.conf Normal file
View File

@ -0,0 +1,10 @@
server {
listen 80 default_server;
server_name ~.*;
access_log /var/log/nginx/http-to-https-access.log combined_full;
error_log /var/log/nginx/http-to-https-error.log;
return 302 https://$host$request_uri;
}

38
doc/nginx/sites-available/authentic.conf
View File

@ -1,41 +1,3 @@
server {
listen 80;
listen [::]:80;
server_name ~^connexion.* ~^authentic-.*;
access_log /var/log/nginx/authentic2-multitenant-access.log combined_full;
error_log /var/log/nginx/authentic2-multitenant-error.log;
location ~ ^/static/(.+)$ {
root /;
try_files /var/lib/authentic2-multitenant/tenants/$host/static/$1
/var/lib/authentic2-multitenant/tenants/$host/theme/static/$1
/var/lib/authentic2-multitenant/collectstatic/$1
=404;
}
location ~ ^/media/(.+)$ {
alias /var/lib/authentic2-multitenant/tenants/$host/media/$1;
}
location /robots.txt {
alias /var/lib/authentic2-multitenant/www/robots.txt;
}
location / {
add_header 'Access-Control-Allow-Origin' '*';
proxy_pass http://unix:/var/run/authentic2-multitenant/authentic2-multitenant.sock;
proxy_set_header Host $http_host;
proxy_set_header X-Forwarded-SSL on;
proxy_set_header X-Forwarded-Protocol ssl;
proxy_set_header X-Forwarded-Proto https;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
}
server {
listen 443 ssl;
listen [::]:443 ssl;

36
doc/nginx/sites-available/bijoe.conf
View File

@ -1,39 +1,3 @@
server {
listen 80;
listen [::]:80;
server_name ~^bijoe.*;
access_log /var/log/nginx/bijoe-access.log combined_full;
error_log /var/log/nginx/bijoe-error.log;
location ~ ^/static/(.+)$ {
root /;
try_files /var/lib/bijoe/tenants/$host/static/$1
/var/lib/bijoe/tenants/$host/theme/static/$1
/var/lib/bijoe/collectstatic/$1
=404;
}
location ~ ^/media/(.+)$ {
alias /var/lib/bijoe/tenants/$host/media/$1;
}
location /robots.txt {
alias /var/lib/bijoe/www/robots.txt;
}
location / {
proxy_pass http://unix:/var/run/bijoe/bijoe.sock;
proxy_set_header Host $http_host;
proxy_set_header X-Forwarded-SSL on;
proxy_set_header X-Forwarded-Protocol ssl;
proxy_set_header X-Forwarded-Proto https;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
}
server {
listen 443 ssl;
listen [::]:443 ssl;

36
doc/nginx/sites-available/chrono.conf
View File

@ -1,39 +1,3 @@
server {
listen 80;
listen [::]:80;
server_name ~^agenda.* ~^agendas.*;
access_log /var/log/nginx/chrono-access.log combined_full;
error_log /var/log/nginx/chrono-error.log;
location ~ ^/static/(.+)$ {
root /;
try_files /var/lib/chrono/tenants/$host/static/$1
/var/lib/chrono/tenants/$host/theme/static/$1
/var/lib/chrono/collectstatic/$1
=404;
}
location ~ ^/media/(.+)$ {
alias /var/lib/chrono/tenants/$host/media/$1;
}
location /robots.txt {
alias /var/lib/chrono/www/robots.txt;
}
location / {
proxy_pass http://unix:/var/run/chrono/chrono.sock;
proxy_set_header Host $http_host;
proxy_set_header X-Forwarded-SSL on;
proxy_set_header X-Forwarded-Protocol ssl;
proxy_set_header X-Forwarded-Proto https;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
}
server {
listen 443 ssl;
listen [::]:443 ssl;

37
doc/nginx/sites-available/combo.conf
View File

@ -1,40 +1,3 @@
server {
listen 80 default_server;
listen [::]:80 default_server;
server_name ~^mon.* ~^agents.*;
access_log /var/log/nginx/combo-access.log combined_full;
error_log /var/log/nginx/combo-error.log;
location ~ ^/static/(.+)$ {
root /;
try_files /var/lib/combo/tenants/$host/static/$1
/var/lib/combo/tenants/$host/theme/static/$1
/var/lib/combo/collectstatic/$1
=404;
add_header 'Access-Control-Allow-Origin' '*';
}
location ~ ^/media/(.+)$ {
alias /var/lib/combo/tenants/$host/media/$1;
}
location /robots.txt {
alias /var/lib/combo/www/robots.txt;
}
location / {
proxy_pass http://unix:/var/run/combo/combo.sock;
proxy_set_header Host $http_host;
proxy_set_header X-Forwarded-SSL on;
proxy_set_header X-Forwarded-Protocol ssl;
proxy_set_header X-Forwarded-Proto https;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
}
server {
listen 443 ssl default_server;
listen [::]:443 ssl default_server;

36
doc/nginx/sites-available/corbo.conf
View File

@ -1,39 +1,3 @@
server {
listen 80;
listen [::]:80;
server_name ~^corbo.*;
access_log /var/log/nginx/corbo-access.log combined_full;
error_log /var/log/nginx/corbo-error.log;
location ~ ^/static/(.+)$ {
root /;
try_files /var/lib/corbo/tenants/$host/static/$1
/var/lib/corbo/tenants/$host/theme/static/$1
/var/lib/corbo/collectstatic/$1
=404;
}
location ~ ^/media/(.+)$ {
alias /var/lib/corbo/tenants/$host/media/$1;
}
location /robots.txt {
alias /var/lib/corbo/www/robots.txt;
}
location / {
proxy_pass http://unix:/var/run/corbo/corbo.sock;
proxy_set_header Host $http_host;
proxy_set_header X-Forwarded-SSL on;
proxy_set_header X-Forwarded-Protocol ssl;
proxy_set_header X-Forwarded-Proto https;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
}
server {
listen 443 ssl;
listen [::]:443 ssl;

36
doc/nginx/sites-available/fargo.conf
View File

@ -1,39 +1,3 @@
server {
listen 80;
listen [::]:80;
server_name ~^portedoc.* ~^porte-doc.*;
access_log /var/log/nginx/fargo-access.log combined_full;
error_log /var/log/nginx/fargo-error.log;
location ~ ^/static/(.+)$ {
root /;
try_files /var/lib/fargo/tenants/$host/static/$1
/var/lib/fargo/tenants/$host/theme/static/$1
/var/lib/fargo/collectstatic/$1
=404;
}
location ~ ^/media/(.+)$ {
alias /var/lib/fargo/tenants/$host/media/$1;
}
location /robots.txt {
alias /var/lib/fargo/www/robots.txt;
}
location / {
proxy_pass http://unix:/var/run/fargo/fargo.sock;
proxy_set_header Host $http_host;
proxy_set_header X-Forwarded-SSL on;
proxy_set_header X-Forwarded-Protocol ssl;
proxy_set_header X-Forwarded-Proto https;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
}
server {
listen 443 ssl;
listen [::]:443 ssl;

36
doc/nginx/sites-available/hobo.conf
View File

@ -1,39 +1,3 @@
server {
listen 80;
listen [::]:80;
server_name ~^hobo.*;
access_log /var/log/nginx/hobo-access.log combined_full;
error_log /var/log/nginx/hobo-error.log;
location ~ ^/static/(.+)$ {
root /;
try_files /var/lib/hobo/tenants/$host/static/$1
/var/lib/hobo/tenants/$host/theme/static/$1
/var/lib/hobo/collectstatic/$1
=404;
}
location ~ ^/media/(.+)$ {
alias /var/lib/hobo/tenants/$host/media/$1;
}
location /robots.txt {
alias /var/lib/hobo/www/robots.txt;
}
location / {
proxy_pass http://unix:/var/run/hobo/hobo.sock;
proxy_set_header Host $http_host;
proxy_set_header X-Forwarded-SSL on;
proxy_set_header X-Forwarded-Protocol ssl;
proxy_set_header X-Forwarded-Proto https;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
}
server {
listen 443 ssl;
listen [::]:443 ssl;

36
doc/nginx/sites-available/mandayejs.conf
View File

@ -1,39 +1,3 @@
server {
listen 80;
listen [::]:80;
server_name ~^mandayejs.*;
access_log /var/log/nginx/mandayejs-access.log combined_full;
error_log /var/log/nginx/mandayejs-error.log;
location ~ ^/static/(.+)$ {
root /;
try_files /var/lib/mandayejs/tenants/$host/static/$1
/var/lib/mandayejs/tenants/$host/theme/static/$1
/var/lib/mandayejs/collectstatic/$1
=404;
}
location ~ ^/media/(.+)$ {
alias /var/lib/mandayejs/tenants/$host/media/$1;
}
location /robots.txt {
alias /var/lib/mandayejs/www/robots.txt;
}
location / {
proxy_pass http://unix:/var/run/mandayejs/mandayejs.sock;
proxy_set_header Host $http_host;
proxy_set_header X-Forwarded-SSL on;
proxy_set_header X-Forwarded-Protocol ssl;
proxy_set_header X-Forwarded-Proto https;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
}
server {
listen 443 ssl;
listen [::]:443 ssl;

36
doc/nginx/sites-available/passerelle.conf
View File

@ -1,39 +1,3 @@
server {
listen 80;
listen [::]:80;
server_name ~^passerelle.*;
access_log /var/log/nginx/passerelle-access.log combined_full;
error_log /var/log/nginx/passerelle-error.log;
location ~ ^/static/(.+)$ {
root /;
try_files /var/lib/passerelle/tenants/$host/static/$1
/var/lib/passerelle/tenants/$host/theme/static/$1
/var/lib/passerelle/collectstatic/$1
=404;
}
location ~ ^/media/(.+)$ {
alias /var/lib/passerelle/tenants/$host/media/$1;
}
location /robots.txt {
alias /var/lib/passerelle/www/robots.txt;
}
location / {
proxy_pass http://unix:/var/run/passerelle/passerelle.sock;
proxy_set_header Host $http_host;
proxy_set_header X-Forwarded-SSL on;
proxy_set_header X-Forwarded-Protocol ssl;
proxy_set_header X-Forwarded-Proto https;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
}
server {
listen 443 ssl;
listen [::]:443 ssl;

37
doc/nginx/sites-available/wcs.conf
View File

@ -1,40 +1,3 @@
server {
listen 80;
listen [::]:80;
server_name ~^demarches.* ~^formulaires.*;
access_log /var/log/nginx/wcs-access.log combined_full;
error_log /var/log/nginx/wcs-error.log;
location ~ ^/static/(.+)$ {
root /;
try_files /var/lib/wcs/$host/static/$1
/var/lib/wcs/$host/theme/static/$1
/var/lib/wcs/collectstatic/$1
=404;
}
location ~ ^/media/(.+)$ {
alias /var/lib/wcs/$host/media/$1;
}
location /robots.txt {
alias /var/lib/wcs/www/robots.txt;
}
location / {
add_header 'Access-Control-Allow-Origin' '*';
proxy_pass http://unix:/var/run/wcs/wcs.sock;
proxy_set_header Host $http_host;
proxy_set_header X-Forwarded-SSL on;
proxy_set_header X-Forwarded-Protocol ssl;
proxy_set_header X-Forwarded-Proto https;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
}
server {
listen 443;
listen [::]:443;

37
doc/nginx/sites-available/welco.conf
View File

@ -1,40 +1,3 @@
server {
listen 80;
listen [::]:80;
server_name ~^welco.*;
access_log /var/log/nginx/welco-access.log combined_full;
error_log /var/log/nginx/welco-error.log;
location ~ ^/static/(.+)$ {
root /;
try_files /var/lib/welco/tenants/$host/static/$1
/var/lib/welco/tenants/$host/theme/static/$1
/var/lib/welco/collectstatic/$1
=404;
}
location ~ ^/media/(.+)$ {
alias /var/lib/welco/tenants/$host/media/$1;
}
location /robots.txt {
alias /var/lib/welco/www/robots.txt;
}
location / {
proxy_pass http://unix:/var/run/welco/welco.sock;
proxy_set_header Host $http_host;
proxy_set_header X-Forwarded-SSL on;
proxy_set_header X-Forwarded-Protocol ssl;
proxy_set_header X-Forwarded-Proto https;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
}
server {
listen 443 ssl;
listen [::]:443 ssl;