Page MenuHomeDevCentral
Paste P153

Dwellers /etc/nginx/nginx.conf
ActivePublic
Actions

Authored by dereckson on Jan 20 2016, 15:06.
worker_processes 1;
events {
worker_connections 1024;
}
http {
include mime.types;
default_type application/octet-stream;
sendfile on;
#tcp_nopush on;
client_max_body_size 32M;
#keepalive_timeout 0;
keepalive_timeout 65;
#gzip on;
server_names_hash_bucket_size 128;
map $http_upgrade $connection_upgrade {
default upgrade;
'' close;
}
#
# Nasqueron
#
server {
listen 80;
listen [::]:80;
server_name dwellers.nasqueron.org;
include ssl_params;
ssl_certificate /etc/nginx/ssl/dwellers.crt;
ssl_certificate_key /etc/nginx/ssl/dwellers.key;
location / {
root html;
index index.html index.htm;
}
error_page 500 502 503 504 /50x.html;
location = /50x.html {
root html;
}
}
server {
listen 80;
listen [::]:80;
server_name phabricator.nasqueron.org;
include letsencrypt;
include ssl_params;
ssl_certificate /data/letsencrypt/etc/live/phabricator.nasqueron.org/fullchain.pem;
ssl_certificate_key /data/letsencrypt/etc/live/phabricator.nasqueron.org/privkey.pem;
rewrite ^ https://devcentral.nasqueron.org$request_uri? permanent;
}
server {
listen 80;
listen [::]:80;
server_name phabricator-files-for-devcentral-nasqueron.spacetechnology.net;
include letsencrypt;
include ssl_params;
ssl_certificate /data/letsencrypt/etc/live/phabricator-files-for-devcentral-nasqueron.spacetechnology.net/fullchain.pem;
ssl_certificate_key /data/letsencrypt/etc/live/phabricator-files-for-devcentral-nasqueron.spacetechnology.net/privkey.pem;
include proxy_params;
location / {
proxy_pass http://localhost:31080;
}
}
server {
listen 80;
listen [::]:80;
server_name devcentral.nasqueron.org;
include ssl_params;
ssl_certificate /etc/nginx/ssl/devcentral.crt;
ssl_certificate_key /etc/nginx/ssl/devcentral.key;
include proxy_params;
location / {
proxy_pass http://localhost:31080;
}
location ~ ^/maniphest/task/create {
rewrite ^/maniphest/task/create/?(.*) /maniphest/task/edit/form/1/$1;
}
#502 error
root /var/wwwroot/devcentral.nasqueron.org;
error_page 502 /502.html;
location /502.html {}
}
server {
listen 80;
listen [::]:80;
server_name server.nasqueron.org serveur.nasqueron.org serveurs.nasqueron.org;
include letsencrypt;
include ssl_params;
ssl_certificate /data/letsencrypt/etc/live/phabricator.nasqueron.org/fullchain.pem;
ssl_certificate_key /data/letsencrypt/etc/live/phabricator.nasqueron.org/privkey.pem;
rewrite ^ https://servers.nasqueron.org$request_uri? permanent;
}
server {
listen 80;
listen [::]:80;
server_name forum.nasqueron.org;
include ssl_params;
ssl_certificate /etc/nginx/ssl/forum.crt;
ssl_certificate_key /etc/nginx/ssl/forum.key;
root /var/wwwroot/forum.nasqueron.org;
error_page 502 /502.html;
include proxy_params;
#location / { proxy_pass http://localhost:32000; }
location / {
proxy_pass http://localhost:32080;
}
location /502.html {}
}
server {
listen 80;
listen [::]:80;
server_name notifications.nasqueron.org;
include letsencrypt;
include ssl_params;
ssl_certificate /data/letsencrypt/etc/live/notifications.nasqueron.org/fullchain.pem;
ssl_certificate_key /data/letsencrypt/etc/live/notifications.nasqueron.org/privkey.pem;
root /var/wwwroot/notifications.nasqueron.org;
error_page 502 /502.html;
# include proxy_params;
location / {
# TODO: switch from dev to prod when T674 is resolved
# !!! Don't forget to uncomment include proxy_params !!!
# proxy_pass http://localhost:37080;
proxy_pass http://notifications-dereckson.c9users.io;
}
location /502.html {}
}
server {
listen 80;
listen [::]:80;
server_name servers.nasqueron.org;
include letsencrypt;
include ssl_params;
ssl_certificate /data/letsencrypt/etc/live/phabricator.nasqueron.org/fullchain.pem;
ssl_certificate_key /data/letsencrypt/etc/live/phabricator.nasqueron.org/privkey.pem;
root /var/wwwroot/devcentral.nasqueron.org;
error_page 502 /502-servers.html;
location / {
include proxy_params;
proxy_pass http://localhost:31080;
}
location ~ T[0.9]* {
rewrite ^ http://devcentral.nasqueron.org$request_uri? redirect;
}
location /tag/ {
rewrite ^ http://devcentral.nasqueron.org$request_uri? redirect;
}
location /502-servers.html {}
}
# server {
# listen 80;
# listen [::]:80;
# server_name engelbart-phabricator.trantorium.com phabricator-files-for-engelbart.radioactif.org;
#
# include proxy_params;
# location / { proxy_pass http://localhost:41080; }
# }
server {
listen 80;
listen [::]:80;
server_name pad.nasqueron.org;
include ssl_params;
ssl_certificate /etc/nginx/ssl/pad.crt;
ssl_certificate_key /etc/nginx/ssl/pad.key;
include proxy_params;
location / { proxy_pass http://localhost:34080; }
root /var/wwwroot/$server_name;
error_page 502 /502.html;
location /502.html {}
}
server {
listen 80;
listen [::]:80;
server_name ci.nasqueron.org;
include ssl_params;
ssl_certificate /etc/nginx/ssl/ci.crt;
ssl_certificate_key /etc/nginx/ssl/ci.key;
include proxy_params;
location / { proxy_pass http://localhost:38080; }
#root /var/wwwroot/$server_name;
#error_page 502 /502.html;
#location /502.html {}
}
server {
listen 80;
listen [::]:80;
server_name builds.nasqueron.org build.nasqueron.org;
include letsencrypt;
include ssl_params;
ssl_certificate /data/letsencrypt/etc/live/notifications.nasqueron.org/fullchain.pem;
ssl_certificate_key /data/letsencrypt/etc/live/notifications.nasqueron.org/privkey.pem;
include proxy_params;
location / { proxy_pass http://localhost:24080; }
}
server {
listen 80;
listen [::]:80;
server_name adjutage.nasqueron.org;
include proxy_params;
location / {
proxy_pass http://localhost:28080;
}
}
server {
listen 80;
listen [::]:80;
server_name deck.nasqueron.org rundeck.nasqueron.org;
include proxy_params;
location / { proxy_pass http://localhost:4440; }
}
server {
listen 80;
listen [::]:80;
server_name white-rabbit.nasqueron.org;
include letsencrypt;
include ssl_params;
ssl_certificate /data/letsencrypt/etc/live/phabricator.nasqueron.org/fullchain.pem;
ssl_certificate_key /data/letsencrypt/etc/live/phabricator.nasqueron.org/privkey.pem;
location / {
# Proxy to Web-Stomp (SockJS)
proxy_pass http://localhost:15674;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
}
}
server {
listen 80;
listen [::]:80;
server_name status.nasqueron.org;
include letsencrypt;
include ssl_params;
ssl_certificate /data/letsencrypt/etc/live/phabricator.nasqueron.org/fullchain.pem;
ssl_certificate_key /data/letsencrypt/etc/live/phabricator.nasqueron.org/privkey.pem;
include proxy_params;
location / {
proxy_pass http://localhost:39080;
}
}
#
# Mail infrastructure
#
server {
listen 80;
listen [::]:80;
server_name vma.nasqueron.org mail.nasqueron.org mail.bioty.co mail.wolfplex.be mail.dereckson.be;
include letsencrypt;
return 301 https://$host$request_uri;
}
server {
server_name vma.nasqueron.org;
include ssl_params;
ssl_certificate /etc/nginx/ssl/vma.crt;
ssl_certificate_key /etc/nginx/ssl/vma.key;
include proxy_params;
location / {
proxy_pass http://vma.nasqinternal;
}
#502 error
root /var/wwwroot/mail.nasqueron.org;
error_page 502 /502.html;
location /502.html {}
location /airmail.jpg {}
}
server {
server_name mail.nasqueron.org;
include mailserver_params;
# If you wish migrate from Startcom to Let's encrypt:
#
# ssl_certificate /data/letsencrypt/etc/live/mail.nasqueron.org/fullchain.pem;
# ssl_certificate_key /data/letsencrypt/etc/live/mail.nasqueron.org/privkey.pem;
#
# It's also possible to prepend mail.nasqueron.org to the next block instead.
ssl_certificate /etc/nginx/ssl/mailserver.crt;
ssl_certificate_key /etc/nginx/ssl/mailserver.key;
}
server {
server_name mail.wolfplex.be mail.bioty.co mail.dereckson.be;
include mailserver_params;
ssl_certificate /data/letsencrypt/etc/live/mail.nasqueron.org/fullchain.pem;
ssl_certificate_key /data/letsencrypt/etc/live/mail.nasqueron.org/privkey.pem;
}
#
# Espace Win
#
server {
listen 80;
listen [::]:80;
server_name bugzilla.espace-win.org;
include proxy_params;
location / { proxy_pass http://localhost:33080; }
}
#
# Zed
#
server {
listen 80;
listen [::]:80;
server_name code.zed.dereckson.be;
include proxy_params;
location / { proxy_pass http://localhost:36080; }
location ~ ^/maniphest/task/create {
rewrite ^/maniphest/task/create/?(.*) /maniphest/task/edit/form/1/$1;
}
}
#
# Wolfplex
#
server {
listen 80;
listen [::]:80;
server_name pad.wolfplex.be;
include ssl_params;
ssl_certificate /etc/nginx/ssl/pad.wolfplex.be.crt;
ssl_certificate_key /etc/nginx/ssl/pad.wolfplex.be.key;
include proxy_params;
location / { proxy_pass http://localhost:34080; }
root /var/wwwroot/pad.nasqueron.org;
error_page 502 /502.html;
location /502.html {}
}
server {
listen 80;
listen [::]:80;
server_name phabricator-files-for-wolfplex.nasqueron.org;
include ssl_params;
ssl_certificate /etc/nginx/ssl/phabricator-files-for-wolfplex.crt;
ssl_certificate_key /etc/nginx/ssl/phabricator-files-for-wolfplex.key;
include proxy_params;
location / { proxy_pass http://localhost:35080; }
location ~ ^/maniphest/task/create {
rewrite ^/maniphest/task/create/?(.*) /maniphest/task/edit/form/1/$1;
}
}
server {
listen 80;
listen [::]:80;
server_name phabricator.wolfplex.be;
return 301 https://phabricator.wolfplex.be$request_uri;
}
server {
server_name phabricator.wolfplex.be;
include ssl_params;
ssl_certificate /etc/nginx/ssl/phabricator.wolfplex.be.crt;
ssl_certificate_key /etc/nginx/ssl/phabricator.wolfplex.be.key;
include proxy_params;
location / { proxy_pass http://localhost:35080; }
location = /ws/ {
proxy_pass http://localhost:22280/;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_read_timeout 999999999;
}
}
}

Event Timeline

dereckson edited the content of this paste. (Show Details)Jan 20 2016, 15:06
dereckson changed the title of this paste from untitled to Dwellers /etc/nginx/nginx.conf.
dereckson added projects: Servers, Nasqueron Docker deployment squad.Jan 20 2016, 15:08
Nasqueron DevCentral · If it had been much bigger the moon would have had a core of ice. · Powered by Phabricator