summaryrefslogtreecommitdiff
path: root/etc/nginx/sites-enabled
diff options
context:
space:
mode:
authorFlorian Dold <florian.dold@gmail.com>2018-01-05 16:55:02 +0100
committerFlorian Dold <florian.dold@gmail.com>2018-01-05 16:55:02 +0100
commit16754a74b03935d4048516fd6a9b1f214137f96a (patch)
treec491190f649a021dd69b59231c61587f717d01e4 /etc/nginx/sites-enabled
parentf1e6b4f3fcc6e87d4dfae684f0ef3a1e4b3f2514 (diff)
downloaddeployment-16754a74b03935d4048516fd6a9b1f214137f96a.tar.gz
deployment-16754a74b03935d4048516fd6a9b1f214137f96a.tar.bz2
deployment-16754a74b03935d4048516fd6a9b1f214137f96a.zip
remove legacy /backend, add X-Forwarded headers
Diffstat (limited to 'etc/nginx/sites-enabled')
-rw-r--r--etc/nginx/sites-enabled/test.site45
1 files changed, 6 insertions, 39 deletions
diff --git a/etc/nginx/sites-enabled/test.site b/etc/nginx/sites-enabled/test.site
index c12c23a..28c9a5d 100644
--- a/etc/nginx/sites-enabled/test.site
+++ b/etc/nginx/sites-enabled/test.site
@@ -148,32 +148,6 @@ server {
include conf.d/test.redirects;
include conf.d/talerssl;
- location @blue {
- add_header X-Taler-Deployment-Color blue;
- uwsgi_pass unix:/home/test-blue/sockets/shop.uwsgi;
- include /etc/nginx/uwsgi_params;
- }
- location @green {
- add_header X-Taler-Deployment-Color green;
- uwsgi_pass unix:/home/test-green/sockets/shop.uwsgi;
- include /etc/nginx/uwsgi_params;
- }
-
- location @blue-backend {
- add_header X-Taler-Deployment-Color blue;
- rewrite /backend/(.*) /$1 break;
- proxy_pass http://unix:/home/test-blue/sockets/merchant.http;
- proxy_redirect off;
- proxy_set_header Host $host;
- }
- location @green-backend {
- add_header X-Taler-Deployment-Color green;
- rewrite /backend/(.*) /$1 break;
- proxy_pass http://unix:/home/test-green/sockets/merchant.http;
- proxy_redirect off;
- proxy_set_header Host $host;
- }
-
location / {
# Redirection technique explainted at
# https://www.nginx.com/resources/wiki/start/topics/depth/ifisevil/
@@ -186,19 +160,6 @@ server {
include /etc/nginx/uwsgi_params;
}
- location /backend {
- # Redirection technique explainted at
- # https://www.nginx.com/resources/wiki/start/topics/depth/ifisevil/
- error_page 418 = @blue-backend;
- error_page 419 = @green-backend;
- recursive_error_pages on;
- if ($http_x_taler_deployment_color ~ "blue") { return 418; }
- if ($http_x_taler_deployment_color ~ "green") { return 419; }
- rewrite /backend/(.*) /$1 break;
- proxy_pass http://unix:/home/test/sockets/merchant.http:/;
- proxy_redirect off;
- proxy_set_header Host $host;
- }
include conf.d/favicon_robots;
}
@@ -216,12 +177,16 @@ server {
proxy_pass http://unix:/home/test-blue/sockets/merchant.http;
proxy_redirect off;
proxy_set_header Host $host;
+ proxy_set_header X-Forwarded-Host $proxy_host;
+ proxy_set_header X-Forwarded-Proto "https";
}
location @green {
add_header X-Taler-Deployment-Color green;
proxy_pass http://unix:/home/test-green/sockets/merchant.http;
proxy_redirect off;
proxy_set_header Host $host;
+ proxy_set_header X-Forwarded-Host $proxy_host;
+ proxy_set_header X-Forwarded-Proto "https";
}
location / {
@@ -232,6 +197,8 @@ server {
recursive_error_pages on;
if ($http_x_taler_deployment_color ~ "blue") { return 418; }
if ($http_x_taler_deployment_color ~ "green") { return 419; }
+ proxy_set_header X-Forwarded-Host $proxy_host;
+ proxy_set_header X-Forwarded-Proto "https";
proxy_pass http://unix:/home/test/sockets/merchant.http:/;
proxy_redirect off;
proxy_set_header Host $host;