Compare commits
2 commits
920c9db231
...
e91e293dda
| Author | SHA1 | Date | |
|---|---|---|---|
| e91e293dda | |||
| 17b1c0f5ab |
3 changed files with 19 additions and 7 deletions
12
appinfo.yml
12
appinfo.yml
|
|
@ -1,9 +1,15 @@
|
|||
mainunit: nginx.service
|
||||
mainunitfile: nginx.service.j2
|
||||
version: 3
|
||||
mainunit: nginx
|
||||
enableunits:
|
||||
- nginx.service
|
||||
templatefiles:
|
||||
- src: nginx.conf.j2
|
||||
dest: ~/nginx.conf
|
||||
backuptype: none
|
||||
- src: nginx.service.j2
|
||||
dest: ~/.config/systemd/user/nginx.service
|
||||
plugins:
|
||||
- type: builtin
|
||||
name: backups_none
|
||||
configdefinition:
|
||||
"$id": "nginx config"
|
||||
"$schema": "http://json-schema.org/draft-07/schema#"
|
||||
|
|
|
|||
|
|
@ -83,8 +83,8 @@ http {
|
|||
ssl_prefer_server_ciphers on;
|
||||
add_header Strict-Transport-Security max-age=15768000;
|
||||
|
||||
{# allow large file uploads, currently 500 meg. Should be increased if we really need big uploads #}
|
||||
client_max_body_size 500M;
|
||||
{# allow large file uploads, currently 50 gig. We expect the app to block if needed #}
|
||||
client_max_body_size 50000M;
|
||||
|
||||
# Set headers
|
||||
proxy_set_header Host $http_host;
|
||||
|
|
@ -92,6 +92,11 @@ http {
|
|||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
|
||||
{# We do not buffer, otherwise we might end up string the full client_max_body size as a temp file. Let the upstream handle it #}
|
||||
proxy_buffering off;
|
||||
proxy_request_buffering off;
|
||||
client_body_buffer_size 1024k;
|
||||
|
||||
{# enable websockets: http://nginx.org/en/docs/http/websocket.html #}
|
||||
proxy_http_version 1.1;
|
||||
proxy_set_header Upgrade $http_upgrade;
|
||||
|
|
|
|||
|
|
@ -1,6 +1,7 @@
|
|||
[Unit]
|
||||
Description=Podman Compose based service
|
||||
After=network.target
|
||||
PartOf={{ mainunit }}
|
||||
|
||||
# Nginx is not started with podman compose
|
||||
# We start it on the host network, so we can access the ports exposed on localhost
|
||||
|
|
@ -19,4 +20,4 @@ Restart=always
|
|||
WorkingDirectory={{ homedir }}
|
||||
|
||||
[Install]
|
||||
WantedBy=default.target
|
||||
WantedBy={{ mainunit }}
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue