2019-03-27 01:10:33 +01:00
|
|
|
#sub_path_only rewrite ^__PATH__$ __PATH__/ permanent;
|
|
|
|
location __PATH__/ {
|
2020-05-30 16:34:01 +02:00
|
|
|
|
2017-04-01 16:53:29 +02:00
|
|
|
if ($scheme = http) {
|
|
|
|
rewrite ^ https://$server_name$request_uri? permanent;
|
2017-02-07 22:29:21 +01:00
|
|
|
}
|
|
|
|
|
2019-03-03 18:09:22 +01:00
|
|
|
# This is important for user's privacy !
|
|
|
|
access_log off;
|
2017-04-01 18:16:18 +02:00
|
|
|
error_log /var/log/nginx/lufi.error.log;
|
2017-02-07 22:29:21 +01:00
|
|
|
|
|
|
|
# This is important ! Make it OK with your Lutim configuration
|
2019-03-03 18:04:44 +01:00
|
|
|
client_max_body_size __MAX_FILE_SIZE__M;
|
2017-02-07 22:29:21 +01:00
|
|
|
|
2019-03-03 18:09:22 +01:00
|
|
|
if ($request_uri ~* ^/(img|css|font|js)/) {
|
2019-03-20 00:32:40 +01:00
|
|
|
more_set_headers Expires "Thu, 31 Dec 2037 23:55:55 GMT";
|
|
|
|
more_set_headers Cache-Control "public, max-age=315360000";
|
2019-03-03 18:09:22 +01:00
|
|
|
}
|
|
|
|
|
|
|
|
proxy_pass http://127.0.0.1:__PORT____PATH__;
|
2017-04-01 16:53:29 +02:00
|
|
|
|
|
|
|
# Really important ! Lufi uses WebSocket, it won't work without this
|
|
|
|
proxy_set_header Upgrade $http_upgrade ;
|
|
|
|
proxy_set_header Connection "upgrade" ;
|
2017-02-07 22:29:21 +01:00
|
|
|
|
2019-03-03 18:09:22 +01:00
|
|
|
proxy_http_version 1.1;
|
2017-02-07 22:29:21 +01:00
|
|
|
proxy_set_header Host $host;
|
|
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
2019-03-03 18:04:44 +01:00
|
|
|
proxy_set_header X-Remote-Port $remote_port;
|
|
|
|
proxy_set_header X-Forwarded-Proto $scheme;
|
2017-02-07 22:29:21 +01:00
|
|
|
|
|
|
|
# We expect the downsteam servers to redirect to the right hostname, so don't do any rewrite$
|
|
|
|
proxy_redirect off;
|
2017-04-01 16:53:29 +02:00
|
|
|
|
2019-03-03 18:04:44 +01:00
|
|
|
# Include SSOWAT user panel.
|
|
|
|
include conf.d/yunohost_panel.conf.inc;
|
2017-02-07 22:29:21 +01:00
|
|
|
}
|