Backoffice block at Nginx.

1 files changed, 33 insertions, 0 deletions

diff --git a/etc/nginx/sites-enabled/test.site b/etc/nginx/sites-enabled/test.site
index c9f7b6f..472deb4 100644
--- a/etc/nginx/sites-enabled/test.site
+++ b/etc/nginx/sites-enabled/test.site
@@ -8,6 +8,7 @@ server {
               survey.test.taler.net
               auditor.test.taler.net
               exchange.test.taler.net;
+              backoffice.test.taler.net;
 
   # 301-based ridirects allows the user agent to *change* the
   # method used in the second request.  This breaks all the API
@@ -344,3 +345,35 @@ server {
 
   include conf.d/favicon_robots;
 }
+
+server {
+  server_name backoffice.test.taler.net;
+  listen 443 ssl;
+  listen [::]:443 ssl;
+  include conf.d/talerssl;
+
+  location @blue {
+    add_header X-Taler-Deployment-Color blue;
+    uwsgi_pass unix:/home/test-blue/sockets/backoffice.uwsgi;
+    include /etc/nginx/uwsgi_params;
+  }
+  location @green {
+    add_header X-Taler-Deployment-Color green;
+    uwsgi_pass unix:/home/test-green/sockets/backoffice.uwsgi;
+    include /etc/nginx/uwsgi_params;
+  }
+
+  location / {
+    # Redirection technique explainted at
+    # https://www.nginx.com/resources/wiki/start/topics/depth/ifisevil/
+    error_page 418 = @blue;
+    error_page 419 = @green;
+    recursive_error_pages on;
+    if ($http_x_taler_deployment_color ~ "blue") { return 418; }
+    if ($http_x_taler_deployment_color ~ "green") { return 419; }
+    uwsgi_pass unix:/home/test/sockets/backoffice.uwsgi;
+    include /etc/nginx/uwsgi_params;
+  }
+
+  include conf.d/favicon_robots;
+}