From 0e16d7754e41e718ea0fd6879ea5f22c762d8c52 Mon Sep 17 00:00:00 2001
From: Adam Soltys <asoltys@gmail.com>
Date: Fri, 4 Jun 2021 14:14:56 -0700
Subject: config update

---
 sampleconfig/certbot/.gitkeep            |  1 +
 sampleconfig/nginx/coinos.conf           | 67 ++++++++++++++++++++++++++++++++
 sampleconfig/nginx/default.conf.template | 38 ------------------
 3 files changed, 68 insertions(+), 38 deletions(-)
 create mode 100644 sampleconfig/certbot/.gitkeep
 create mode 100644 sampleconfig/nginx/coinos.conf
 delete mode 100644 sampleconfig/nginx/default.conf.template

(limited to 'sampleconfig')

diff --git a/sampleconfig/certbot/.gitkeep b/sampleconfig/certbot/.gitkeep
new file mode 100644
index 00000000..8b137891
--- /dev/null
+++ b/sampleconfig/certbot/.gitkeep
@@ -0,0 +1 @@
+
diff --git a/sampleconfig/nginx/coinos.conf b/sampleconfig/nginx/coinos.conf
new file mode 100644
index 00000000..fecb0c9f
--- /dev/null
+++ b/sampleconfig/nginx/coinos.conf
@@ -0,0 +1,67 @@
+server {
+    listen 80;
+    server_name dev.coinos.io;
+
+    location /.well-known/acme-challenge/ {
+        root /var/www/certbot;
+    }
+
+    location / {
+        return 301 https://$host$request_uri;
+    }    
+}
+server {
+    listen 443 ssl;
+    server_name dev.coinos.io;
+
+    ssl_certificate /etc/letsencrypt/live/dev.coinos.io/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/dev.coinos.io/privkey.pem;
+    include /etc/letsencrypt/options-ssl-nginx.conf;
+    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
+    
+    location / {
+        proxy_pass http://ui:8085; #for demo purposes
+    }
+
+    location /api/ {
+     proxy_set_header  Host $host;
+     proxy_set_header  X-Real-IP $remote_addr;
+     proxy_set_header  X-Forwarded-Proto https;
+     proxy_set_header  X-Forwarded-For $remote_addr;
+     proxy_set_header  X-Forwarded-Host $remote_addr;
+     rewrite ^ $request_uri?;
+     rewrite ^/api/(.*) /$1 break;
+     return 400;
+     proxy_pass http://app:3119$uri$is_args;
+    }
+
+    location /api/balances {
+      proxy_set_header  Host $host;
+      proxy_set_header  X-Real-IP $remote_addr;
+      proxy_set_header  X-Forwarded-Proto https;
+      proxy_set_header  X-Forwarded-For $remote_addr;
+      proxy_set_header  X-Forwarded-Host $remote_addr;
+      rewrite ^/api/(.*) /$1 break;
+      proxy_pass http://app:3119$uri$is_args$args;
+    }
+
+    location /sockjs-node {
+     proxy_set_header Upgrade $http_upgrade;
+     proxy_set_header Connection "upgrade";
+     proxy_http_version 1.1;
+     proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+     proxy_set_header Host $host;
+     rewrite ^/ws/(.*) /$1 break;
+     proxy_pass http://ui:8085;
+    }
+
+    location /ws {
+     proxy_set_header Upgrade $http_upgrade;
+     proxy_set_header Connection "upgrade";
+     proxy_http_version 1.1;
+     proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+     proxy_set_header Host $host;
+     rewrite ^/ws/(.*) /$1 break;
+     proxy_pass http://app:3119;
+    }
+}
diff --git a/sampleconfig/nginx/default.conf.template b/sampleconfig/nginx/default.conf.template
deleted file mode 100644
index 73dceb8c..00000000
--- a/sampleconfig/nginx/default.conf.template
+++ /dev/null
@@ -1,38 +0,0 @@
-server {
-    listen 80;
-    server_name .${NGINX_HOST};
-    server_tokens off;
-
-    location / {
-        return 301 https://$host$request_uri;
-    }
-}
-
- server {
-     listen 443 ssl;
-     server_name .${NGINX_HOST};
-     server_tokens off;
- 
-     ssl_certificate /etc/letsencrypt/live/${NGINX_HOST}/fullchain.pem;
-     ssl_certificate_key /etc/letsencrypt/live/${NGINX_HOST}/privkey.pem;
-     include /etc/letsencrypt/options-ssl-nginx.conf;
-     ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
-
-     client_max_body_size 5G;
-
-     location /api/ {
-       proxy_set_header Cookie $http_cookie;
-
-       proxy_pass http://app:3119/;
-     } 
- 
-     location @rewrites {
-      rewrite ^(.+)$ /index.html last;
-     }
-
-     location / {
-       root /coinos;
-       index  index.html;
-       try_files $uri $uri/ /index.html;
-     }
- }
-- 
cgit v1.2.3