ivada-infra/nginx-infra
2
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

chore: apply 251021 troubleshooting fixes
All checks were successful
Deploy Nginx Config to Ubuntu Server / deploy (push) Successful in 1s
Details

Browse Source 
- nginx: route /api and /admin to localhost:8100 (gateway)
- nginx: restrict ssl_protocols to TLSv1.2/TLSv1.3
- gateway: reduce HEALTHCHECK frequency and align health endpoint
This commit is contained in:
happybell80 2025-10-21 11:46:42 +09:00
parent 1e28ff2a93
commit d843bb18b1
2 changed files with 10 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
nginx.conf
View File

@ -41,7 +41,8 @@ http {
# SSL Settings # SSL Settings
## ##
ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3; # Dropping SSLv3, ref: POODLE # Restrict to modern TLS to avoid handshake issues
ssl_protocols TLSv1.2 TLSv1.3; # Drop TLSv1.0/1.1
ssl_prefer_server_ciphers on; ssl_prefer_server_ciphers on;
## ##

16
server-nginx-default
View File

@ -51,18 +51,18 @@ server {
try_files $uri $uri/ /index.html; try_files $uri $uri/ /index.html;
} }
# API endpoints # API endpoints -> route to gateway (host 8100 -> container 8000)
location /api/ { location /api/ {
proxy_pass http://localhost:8000; proxy_pass http://localhost:8100;
proxy_set_header Host $host; proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme; proxy_set_header X-Forwarded-Proto $scheme;
} }
# Admin dashboard # Admin dashboard -> route to gateway (host 8100 -> container 8000)
location /admin { location /admin {
proxy_pass http://localhost:8000; proxy_pass http://localhost:8100;
proxy_set_header Host $host; proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
@ -187,18 +187,18 @@ server {
try_files $uri $uri/ /index.html; try_files $uri $uri/ /index.html;
} }
# API endpoints # API endpoints -> route to gateway (host 8100 -> container 8000)
location /api/ { location /api/ {
proxy_pass http://localhost:8000; proxy_pass http://localhost:8100;
proxy_set_header Host $host; proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme; proxy_set_header X-Forwarded-Proto $scheme;
} }
# Admin dashboard # Admin dashboard -> route to gateway (host 8100 -> container 8000)
location /admin { location /admin {
proxy_pass http://localhost:8000; proxy_pass http://localhost:8100;
proxy_set_header Host $host; proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;