ivada-infra/nginx-infra
2
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

chore: apply 251021 troubleshooting fixes
All checks were successful
Deploy Nginx Config to Ubuntu Server / deploy (push) Successful in 1s
Details

Browse Source 
- nginx: route /api and /admin to localhost:8100 (gateway)
- nginx: restrict ssl_protocols to TLSv1.2/TLSv1.3
- gateway: reduce HEALTHCHECK frequency and align health endpoint
This commit is contained in:
happybell80 2025-10-21 11:46:42 +09:00
parent 1e28ff2a93
commit d843bb18b1
2 changed files with 10 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
nginx.conf
View File

@ -41,7 +41,8 @@ http {
# SSL Settings
##
ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3; # Dropping SSLv3, ref: POODLE
# Restrict to modern TLS to avoid handshake issues
ssl_protocols TLSv1.2 TLSv1.3; # Drop TLSv1.0/1.1
ssl_prefer_server_ciphers on;
##

16
server-nginx-default
View File

@ -51,18 +51,18 @@ server {
try_files $uri $uri/ /index.html;
}
# API endpoints
# API endpoints -> route to gateway (host 8100 -> container 8000)
location /api/ {
proxy_pass http://localhost:8000;
proxy_pass http://localhost:8100;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
}
# Admin dashboard
# Admin dashboard -> route to gateway (host 8100 -> container 8000)
location /admin {
proxy_pass http://localhost:8000;
proxy_pass http://localhost:8100;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
@ -187,18 +187,18 @@ server {
try_files $uri $uri/ /index.html;
}
# API endpoints
# API endpoints -> route to gateway (host 8100 -> container 8000)
location /api/ {
proxy_pass http://localhost:8000;
proxy_pass http://localhost:8100;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
}
# Admin dashboard
# Admin dashboard -> route to gateway (host 8100 -> container 8000)
location /admin {
proxy_pass http://localhost:8000;
proxy_pass http://localhost:8100;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;