taler-deployment

commit 5adf92d389a4c8108dc2e36a35127512383916cf
parent 00f761e38dd7d45e742703a5dd9ef3fe8c350a54
Author: Marcello Stanisci <stanisci.m@gmail.com>
Date:   Fri,  8 Jun 2018 11:10:00 +0200

Backoffice block at Nginx.

Diffstat:
M
etc/nginx/sites-enabled/test.site
 | 
33
+++++++++++++++++++++++++++++++++

1 file changed, 33 insertions(+), 0 deletions(-)
diff --git a/etc/nginx/sites-enabled/test.site b/etc/nginx/sites-enabled/test.site
@@ -8,6 +8,7 @@ server {
               survey.test.taler.net
               auditor.test.taler.net
               exchange.test.taler.net;
+              backoffice.test.taler.net;
 
   # 301-based ridirects allows the user agent to *change* the
   # method used in the second request.  This breaks all the API
@@ -344,3 +345,35 @@ server {
 
   include conf.d/favicon_robots;
 }
+
+server {
+  server_name backoffice.test.taler.net;
+  listen 443 ssl;
+  listen [::]:443 ssl;
+  include conf.d/talerssl;
+
+  location @blue {
+    add_header X-Taler-Deployment-Color blue;
+    uwsgi_pass unix:/home/test-blue/sockets/backoffice.uwsgi;
+    include /etc/nginx/uwsgi_params;
+  }
+  location @green {
+    add_header X-Taler-Deployment-Color green;
+    uwsgi_pass unix:/home/test-green/sockets/backoffice.uwsgi;
+    include /etc/nginx/uwsgi_params;
+  }
+
+  location / {
+    # Redirection technique explainted at
+    # https://www.nginx.com/resources/wiki/start/topics/depth/ifisevil/
+    error_page 418 = @blue;
+    error_page 419 = @green;
+    recursive_error_pages on;
+    if ($http_x_taler_deployment_color ~ "blue") { return 418; }
+    if ($http_x_taler_deployment_color ~ "green") { return 419; }
+    uwsgi_pass unix:/home/test/sockets/backoffice.uwsgi;
+    include /etc/nginx/uwsgi_params;
+  }
+
+  include conf.d/favicon_robots;
+}