mirror of
https://github.com/YunoHost-Apps/domoticz_ynh.git
synced 2024-09-03 18:26:17 +02:00
55 lines
No EOL
1.6 KiB
Nginx Configuration File
55 lines
No EOL
1.6 KiB
Nginx Configuration File
#sub_path_only rewrite ^__PATH__$ __PATH__/ permanent;
|
|
location __PATH__/ {
|
|
|
|
#Settings for main domoticz interface via web browser
|
|
proxy_http_version 1.1;
|
|
proxy_read_timeout 90;
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
proxy_set_header X-Forwarded_Proto $scheme;
|
|
proxy_set_header X-Scheme $scheme;
|
|
proxy_set_header Upgrade $http_upgrade;
|
|
proxy_set_header Connection $connection_upgrade;
|
|
more_set_headers "X-Frame-Options: SAMEORIGIN";
|
|
proxy_pass http://localhost:__PORT__/;
|
|
proxy_set_header Host $host;
|
|
#Allow upload until 10M to upload floorplan
|
|
client_max_body_size 10M;
|
|
|
|
# Include SSOWAT user panel.
|
|
include conf.d/yunohost_panel.conf.inc;
|
|
}
|
|
|
|
|
|
#sub_path_only rewrite ^api___PATH__$ api___PATH__/ permanent;
|
|
location __API_PATH__/ {
|
|
#Alternative path for api, only authorized json command will be accepted
|
|
|
|
#allow only local network on IPv4
|
|
allow 192.168.0.0/16;
|
|
#allow all address in IPv6 => how to filter?
|
|
allow ::/1;
|
|
deny all;
|
|
|
|
proxy_http_version 1.1;
|
|
proxy_read_timeout 90;
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
proxy_set_header X-Forwarded_Proto $scheme;
|
|
proxy_set_header X-Scheme $scheme;
|
|
proxy_set_header Upgrade $http_upgrade;
|
|
proxy_set_header Connection $connection_upgrade;
|
|
more_set_headers "X-Frame-Options: SAMEORIGIN";
|
|
proxy_pass http://localhost:__PORT__/;
|
|
proxy_set_header Host $host;
|
|
|
|
set $api "0";
|
|
|
|
include /etc/nginx/conf.d/__DOMAIN__.d/api___APP__.conf;
|
|
|
|
if ($api = 0) {
|
|
return 403;
|
|
}
|
|
|
|
}
|
|
|