samsapti
/
lab-ansible
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Disable request buffering in NGINX

This commit is contained in:
Sam A. 2024-02-10 16:30:33 +01:00
parent 2c1aec040b
commit f183a1172d
Signed by: samsapti
GPG Key ID: CBBBE7371E81C4EA
3 changed files with 46 additions and 35 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

35
roles/apps/templates/nginx/conf.d/ipfs.conf.j2
View File

@ -2,16 +2,21 @@
# THIS FILE IS MANAGED BY ANSIBLE # THIS FILE IS MANAGED BY ANSIBLE
server { server {
listen 8080;
server_name {{ apps_vars.ipfs.domain }}; server_name {{ apps_vars.ipfs.domain }};
listen 8080;
set $upstream http://ipfs:5001;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto "https";
proxy_buffering off;
proxy_request_buffering off;
location / { location / {
set $upstream http://ipfs:5001;
proxy_pass $upstream; proxy_pass $upstream;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto "https";
proxy_set_header X-Real-IP $remote_addr;
} }
} }
@ -19,13 +24,17 @@ server {
listen 8080; listen 8080;
server_name ~^([\w-]+\.(ipfs|ipns)\.)?{{ apps_vars.ipfs.gateway_domain | replace('.', '\.') }}$; server_name ~^([\w-]+\.(ipfs|ipns)\.)?{{ apps_vars.ipfs.gateway_domain | replace('.', '\.') }}$;
location / { set $upstream http://ipfs:8080;
set $upstream http://ipfs:8080;
proxy_pass $upstream;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header Host $host;
proxy_set_header X-Forwarded-Proto "https"; proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Host $host; proxy_set_header X-Forwarded-Proto "https";
proxy_buffering off;
proxy_request_buffering off;
location / {
proxy_pass $upstream;
} }
} }

18
roles/apps/templates/nginx/conf.d/monerod.conf.j2
View File

@ -2,16 +2,20 @@
# THIS FILE IS MANAGED BY ANSIBLE # THIS FILE IS MANAGED BY ANSIBLE
server { server {
listen 8080;
server_name {{ apps_vars.monerod.domain }}; server_name {{ apps_vars.monerod.domain }};
listen 8080;
set $upstream http://monerod:18089;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto "https";
proxy_buffering off;
proxy_request_buffering off;
location / { location / {
set $upstream http://monerod:18089;
proxy_pass $upstream; proxy_pass $upstream;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto "https";
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header Host $host;
} }
} }

28
roles/apps/templates/nginx/conf.d/nextcloud.conf.j2
View File

@ -2,26 +2,30 @@
# THIS FILE IS MANAGED BY ANSIBLE # THIS FILE IS MANAGED BY ANSIBLE
server { server {
listen 8080;
server_name {{ apps_vars.nextcloud.domain }}; server_name {{ apps_vars.nextcloud.domain }};
listen 8080;
set $upstream http://nextcloud:80;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto "https";
proxy_buffering off;
proxy_request_buffering off;
location / { location / {
set $upstream http://nextcloud:80;
proxy_pass $upstream; proxy_pass $upstream;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto "https";
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header Host $host;
# WebSocket support # WebSocket support
proxy_http_version 1.1; proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade; proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $connection_upgrade; proxy_set_header Connection $connection_upgrade;
# Options required by Nextcloud # Options required by Nextcloud
client_body_buffer_size 512k; client_body_buffer_size 512k;
client_max_body_size 0; client_max_body_size 0;
# UnifiedPush # UnifiedPush
proxy_connect_timeout 10m; proxy_connect_timeout 10m;
@ -31,13 +35,7 @@ server {
# UnifiedPush Matrix gateway # UnifiedPush Matrix gateway
location /_matrix/push/v1/notify { location /_matrix/push/v1/notify {
set $upstream http://nextcloud:80;
proxy_pass $upstream/index.php/apps/uppush/gateway/matrix; proxy_pass $upstream/index.php/apps/uppush/gateway/matrix;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto "https";
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header Host $host;
} }
# CalDAV & CardDAV # CalDAV & CardDAV