Compare commits
2 commits
920c9db231
...
e91e293dda
| Author | SHA1 | Date | |
|---|---|---|---|
| e91e293dda | |||
| 17b1c0f5ab |
3 changed files with 19 additions and 7 deletions
12
appinfo.yml
12
appinfo.yml
|
|
@ -1,9 +1,15 @@
|
||||||
mainunit: nginx.service
|
version: 3
|
||||||
mainunitfile: nginx.service.j2
|
mainunit: nginx
|
||||||
|
enableunits:
|
||||||
|
- nginx.service
|
||||||
templatefiles:
|
templatefiles:
|
||||||
- src: nginx.conf.j2
|
- src: nginx.conf.j2
|
||||||
dest: ~/nginx.conf
|
dest: ~/nginx.conf
|
||||||
backuptype: none
|
- src: nginx.service.j2
|
||||||
|
dest: ~/.config/systemd/user/nginx.service
|
||||||
|
plugins:
|
||||||
|
- type: builtin
|
||||||
|
name: backups_none
|
||||||
configdefinition:
|
configdefinition:
|
||||||
"$id": "nginx config"
|
"$id": "nginx config"
|
||||||
"$schema": "http://json-schema.org/draft-07/schema#"
|
"$schema": "http://json-schema.org/draft-07/schema#"
|
||||||
|
|
|
||||||
|
|
@ -83,8 +83,8 @@ http {
|
||||||
ssl_prefer_server_ciphers on;
|
ssl_prefer_server_ciphers on;
|
||||||
add_header Strict-Transport-Security max-age=15768000;
|
add_header Strict-Transport-Security max-age=15768000;
|
||||||
|
|
||||||
{# allow large file uploads, currently 500 meg. Should be increased if we really need big uploads #}
|
{# allow large file uploads, currently 50 gig. We expect the app to block if needed #}
|
||||||
client_max_body_size 500M;
|
client_max_body_size 50000M;
|
||||||
|
|
||||||
# Set headers
|
# Set headers
|
||||||
proxy_set_header Host $http_host;
|
proxy_set_header Host $http_host;
|
||||||
|
|
@ -92,6 +92,11 @@ http {
|
||||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||||
proxy_set_header X-Forwarded-Proto $scheme;
|
proxy_set_header X-Forwarded-Proto $scheme;
|
||||||
|
|
||||||
|
{# We do not buffer, otherwise we might end up string the full client_max_body size as a temp file. Let the upstream handle it #}
|
||||||
|
proxy_buffering off;
|
||||||
|
proxy_request_buffering off;
|
||||||
|
client_body_buffer_size 1024k;
|
||||||
|
|
||||||
{# enable websockets: http://nginx.org/en/docs/http/websocket.html #}
|
{# enable websockets: http://nginx.org/en/docs/http/websocket.html #}
|
||||||
proxy_http_version 1.1;
|
proxy_http_version 1.1;
|
||||||
proxy_set_header Upgrade $http_upgrade;
|
proxy_set_header Upgrade $http_upgrade;
|
||||||
|
|
|
||||||
|
|
@ -1,6 +1,7 @@
|
||||||
[Unit]
|
[Unit]
|
||||||
Description=Podman Compose based service
|
Description=Podman Compose based service
|
||||||
After=network.target
|
After=network.target
|
||||||
|
PartOf={{ mainunit }}
|
||||||
|
|
||||||
# Nginx is not started with podman compose
|
# Nginx is not started with podman compose
|
||||||
# We start it on the host network, so we can access the ports exposed on localhost
|
# We start it on the host network, so we can access the ports exposed on localhost
|
||||||
|
|
@ -19,4 +20,4 @@ Restart=always
|
||||||
WorkingDirectory={{ homedir }}
|
WorkingDirectory={{ homedir }}
|
||||||
|
|
||||||
[Install]
|
[Install]
|
||||||
WantedBy=default.target
|
WantedBy={{ mainunit }}
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue