colin
/
host-port-ingress-proxy
1
0
Fork 0
Code Pull Requests Activity

Update nginx.conf

This commit is contained in:
colin 2023-11-21 17:54:44 +00:00
parent a373f322b5
commit 0d1d52f400
1 changed files with 14 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
nginx.conf
View File

@ -8,6 +8,12 @@ events {
http {
default_type application/octet-stream;
# Maps for handling WebSocket connections
map $http_upgrade $connection_upgrade {
default upgrade;
'' close;
}
server {
listen 80;
@ -24,23 +30,21 @@ http {
}
location / {
# Use the placeholders for the proxy pass
proxy_pass ${PROTOCOL}://${BACKEND_ADDRESS}:${BACKEND_PORT};
# Proxy pass to the backend using environment variables
proxy_pass http://${BACKEND_ADDRESS}:${BACKEND_PORT}; # Always use http for the backend connection
# General proxy settings
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "Upgrade";
proxy_set_header Connection $connection_upgrade;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme; # Inform the backend about the original protocol
# Do not use X-Forwarded-Proto to hide the SSL usage from the backend
proxy_set_header Accept-Encoding "";
proxy_buffering off;
proxy_ssl_verify off; # Skip SSL verification, be cautious
# Redirect HTTP to HTTPS
if ($scheme != "https") {
return 301 https://$host$request_uri;
}
# Skip SSL verification if you are proxying to an HTTPS backend, though this is typically not recommended
proxy_ssl_verify off;
}
}
}