alisaza
d3c48a1ed1
Ship TLS nginx for backoffice, keep HTTP bootstrap until certs exist, proxy /monitoring to sentry-relay, and tunnel server/edge Sentry through Finland.
30 lines
819 B
Plaintext
30 lines
819 B
Plaintext
# Admin backoffice — HTTP bootstrap until Let's Encrypt exists.
|
|
# After: certbot certonly --webroot -w /var/www/html -d backoffice.ghabilee.ir
|
|
# deploy switches to deploy/nginx/backoffice.conf (TLS).
|
|
|
|
upstream ghabilee_admin {
|
|
server 127.0.0.1:3009;
|
|
keepalive 16;
|
|
}
|
|
|
|
server {
|
|
listen 80;
|
|
listen [::]:80;
|
|
server_name backoffice.ghabilee.ir;
|
|
|
|
location /.well-known/acme-challenge/ {
|
|
root /var/www/html;
|
|
}
|
|
|
|
location / {
|
|
proxy_pass http://ghabilee_admin;
|
|
proxy_http_version 1.1;
|
|
proxy_set_header Connection "";
|
|
proxy_set_header Host $host;
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
proxy_set_header X-Forwarded-Proto $scheme;
|
|
proxy_read_timeout 60s;
|
|
}
|
|
}
|