samsapti/lab-ansible
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

Disable request buffering in NGINX

Browse source
This commit is contained in:
Sam A. 2024-02-10 16:30:33 +01:00
parent 2c1aec040b
commit f183a1172d
Signed by: samsapti
GPG key ID: CBBBE7371E81C4EA
3 changed files with 46 additions and 35 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

35
roles/apps/templates/nginx/conf.d/ipfs.conf.j2
View file

@ -2,16 +2,21 @@
# THIS FILE IS MANAGED BY ANSIBLE
server {
listen 8080;
server_name {{ apps_vars.ipfs.domain }};
listen 8080;
set $upstream http://ipfs:5001;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto "https";
proxy_buffering off;
proxy_request_buffering off;
location / {
set $upstream http://ipfs:5001;
proxy_pass $upstream;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto "https";
proxy_set_header X-Real-IP $remote_addr;
}
}
@ -19,13 +24,17 @@ server {
listen 8080;
server_name ~^([\w-]+\.(ipfs|ipns)\.)?{{ apps_vars.ipfs.gateway_domain | replace('.', '\.') }}$;
location / {
set $upstream http://ipfs:8080;
proxy_pass $upstream;
set $upstream http://ipfs:8080;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto "https";
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header Host $host;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto "https";
proxy_buffering off;
proxy_request_buffering off;
location / {
proxy_pass $upstream;
}
}

18
roles/apps/templates/nginx/conf.d/monerod.conf.j2
View file

@ -2,16 +2,20 @@
# THIS FILE IS MANAGED BY ANSIBLE
server {
listen 8080;
server_name {{ apps_vars.monerod.domain }};
listen 8080;
set $upstream http://monerod:18089;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto "https";
proxy_buffering off;
proxy_request_buffering off;
location / {
set $upstream http://monerod:18089;
proxy_pass $upstream;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto "https";
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header Host $host;
}
}

28
roles/apps/templates/nginx/conf.d/nextcloud.conf.j2
View file

@ -2,26 +2,30 @@
# THIS FILE IS MANAGED BY ANSIBLE
server {
listen 8080;
server_name {{ apps_vars.nextcloud.domain }};
listen 8080;
set $upstream http://nextcloud:80;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto "https";
proxy_buffering off;
proxy_request_buffering off;
location / {
set $upstream http://nextcloud:80;
proxy_pass $upstream;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto "https";
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header Host $host;
# WebSocket support
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $connection_upgrade;
# Options required by Nextcloud
client_body_buffer_size 512k;
client_max_body_size 0;
client_max_body_size 0;
# UnifiedPush
proxy_connect_timeout 10m;
@ -31,13 +35,7 @@ server {
# UnifiedPush Matrix gateway
location /_matrix/push/v1/notify {
set $upstream http://nextcloud:80;
proxy_pass $upstream/index.php/apps/uppush/gateway/matrix;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto "https";
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header Host $host;
}
# CalDAV & CardDAV