147 lines
5.2 KiB
Text
147 lines
5.2 KiB
Text
location ~* /general_stats {
|
|
deny all;
|
|
}
|
|
location /healthz {
|
|
return 200 'OK';
|
|
}
|
|
location ~ ^/(mobs|sessions-assets|frontend|static|sourcemaps|ios-images)/ {
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
proxy_set_header X-Forwarded-Proto $scheme;
|
|
proxy_set_header Host $http_host;
|
|
|
|
proxy_connect_timeout 300;
|
|
# Default is HTTP/1, keepalive is only enabled in HTTP/1.1
|
|
proxy_http_version 1.1;
|
|
proxy_set_header Connection "";
|
|
chunked_transfer_encoding off;
|
|
|
|
proxy_pass http://minio.db.svc.cluster.local:9000;
|
|
}
|
|
|
|
location /minio/ {
|
|
proxy_http_version 1.1;
|
|
proxy_set_header Upgrade $http_upgrade;
|
|
proxy_set_header Connection "Upgrade";
|
|
proxy_set_header Host $host;
|
|
proxy_pass http://minio.db.svc.cluster.local:9000;
|
|
}
|
|
location /ingest/ {
|
|
rewrite ^/ingest/(.*) /$1 break;
|
|
proxy_http_version 1.1;
|
|
proxy_set_header Upgrade $http_upgrade;
|
|
proxy_set_header Connection "Upgrade";
|
|
proxy_set_header X-Forwarded-For $real_ip;
|
|
proxy_set_header X-Forwarded-Host $real_ip;
|
|
proxy_set_header X-Real-IP $real_ip;
|
|
proxy_set_header Host $host;
|
|
proxy_pass http://http-openreplay.app.svc.cluster.local;
|
|
proxy_read_timeout 300;
|
|
proxy_connect_timeout 120;
|
|
proxy_send_timeout 300;
|
|
}
|
|
location /grafana {
|
|
set $target http://monitoring-grafana.monitoring.svc.cluster.local;
|
|
rewrite ^/grafana/(.*) /$1 break;
|
|
proxy_http_version 1.1;
|
|
proxy_set_header Upgrade $http_upgrade;
|
|
proxy_set_header Connection "Upgrade";
|
|
proxy_set_header Host $host;
|
|
proxy_pass $target;
|
|
}
|
|
location /api/ {
|
|
rewrite ^/api/(.*) /$1 break;
|
|
proxy_http_version 1.1;
|
|
proxy_set_header Upgrade $http_upgrade;
|
|
proxy_set_header Connection "Upgrade";
|
|
proxy_set_header Host $host;
|
|
proxy_set_header X-Forwarded-Proto $scheme;
|
|
proxy_pass http://chalice-openreplay.app.svc.cluster.local:8000;
|
|
}
|
|
location /assist/ {
|
|
rewrite ^/assist/(.*) /$1 break;
|
|
proxy_http_version 1.1;
|
|
proxy_set_header Upgrade $http_upgrade;
|
|
proxy_set_header Connection "Upgrade";
|
|
proxy_set_header Host $host;
|
|
proxy_pass http://utilities-openreplay.app.svc.cluster.local:9000;
|
|
}
|
|
location /assets/ {
|
|
rewrite ^/assets/(.*) /sessions-assets/$1 break;
|
|
proxy_http_version 1.1;
|
|
proxy_set_header Upgrade $http_upgrade;
|
|
proxy_set_header Connection "Upgrade";
|
|
proxy_set_header Host $host;
|
|
proxy_pass http://minio.db.svc.cluster.local:9000;
|
|
}
|
|
location / {
|
|
index /index.html;
|
|
rewrite ^((?!.(js|css|png|svg|jpg|woff|woff2)).)*$ /frontend/index.html break;
|
|
include /etc/nginx/conf.d/compression.conf;
|
|
proxy_set_header Host $http_host;
|
|
proxy_pass http://minio.db.svc.cluster.local:9000/frontend/;
|
|
proxy_intercept_errors on; # see http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_intercept_errors
|
|
error_page 404 =200 /index.html;
|
|
}
|
|
mpression.conf: |-
|
|
# Compression
|
|
gzip on;
|
|
gzip_comp_level 5;
|
|
gzip_min_length 256; # 256Bytes
|
|
gzip_proxied any;
|
|
gzip_vary on;
|
|
# Content types for compression
|
|
gzip_types
|
|
application/atom+xml
|
|
application/javascript
|
|
application/json
|
|
application/ld+json
|
|
application/manifest+json
|
|
application/rss+xml
|
|
application/vnd.geo+json
|
|
application/vnd.ms-fontobject
|
|
application/x-font-ttf
|
|
application/x-web-app-manifest+json
|
|
application/xhtml+xml
|
|
application/xml
|
|
font/opentype
|
|
image/bmp
|
|
image/svg+xml
|
|
image/x-icon
|
|
text/cache-manifest
|
|
text/css
|
|
text/plain
|
|
;
|
|
|
|
tes.conf: |-
|
|
# Ref: https://github.com/openresty/openresty/#resolvconf-parsing
|
|
resolver local=on;
|
|
# Need real ip address for flags in replay.
|
|
# Some LBs will forward real ips as x-forwarded-for
|
|
# So making that as priority
|
|
map $http_x_forwarded_for $real_ip {
|
|
~^(\d+\.\d+\.\d+\.\d+) $1;
|
|
default $remote_addr;
|
|
}
|
|
map $http_upgrade $connection_upgrade {
|
|
default upgrade;
|
|
'' close;
|
|
}
|
|
server {
|
|
listen 80 default_server;
|
|
listen [::]:80 default_server;
|
|
# server_name _;
|
|
|
|
include /etc/nginx/conf.d/location.list;
|
|
client_max_body_size 10M;
|
|
}
|
|
server {
|
|
listen 443 ssl;
|
|
ssl_certificate /etc/secrets/site.crt;
|
|
ssl_certificate_key /etc/secrets/site.key;
|
|
ssl_protocols TLSv1.2 TLSv1.3;
|
|
ssl_ciphers "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH+aRSA+RC4 EECDH EDH+aRSA HIGH !RC4 !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS";
|
|
include /etc/nginx/conf.d/location.list;
|
|
client_max_body_size 10M;
|
|
}
|
|
|