Skip to content
Snippets Groups Projects
Select Git revision
  • master default protected
1 result

caqvix-dev

Blame
  • caqvix-dev 2.00 KiB
    upstream caqvix {
            server localhost:5070 fail_timeout=0;
    }
    
    upstream api_server {
            server localhost:3003 fail_timeout=0;
    }
    
    upstream autentica {
            server localhost:5500 fail_timeout=0;
    }
    
    server {
            listen 80;
            server_name caqvixdev.c3sl.ufpr.br www.caqvixdev.c3sl.ufpr.br;
            return 301 https://caqvixdev.c3sl.ufpr.br$request_uri;
    }
    
    server {
            listen 443 ssl;
            server_name caqvixdev.c3sl.ufpr.br www.caqvixdev.c3sl.ufpr.br;
            ssl_certificate /etc/ssl/certs/c3sl.pem;
            ssl_certificate_key /etc/ssl/private/c3sl.pem;
    
     
            location /autentica {
                if ($cookie_CAQVIX = "caqvixeducacao") {
                    rewrite ^/autentica$ https://caqvixdev.c3sl.ufpr.br/ redirect;
                }
                    proxy_http_version 1.1;
                    proxy_set_header Upgrade $http_upgrade;
                    proxy_set_header Connection 'upgrade';
                    proxy_cache_bypass $http_upgrade;
                    proxy_set_header X-Real-IP $remote_addr;
                    proxy_pass http://autentica/;
            }
            location / {
                if ($cookie_CAQVIX != "caqvixeducacao") {
                    rewrite ^/$ https://caqvixdev.c3sl.ufpr.br/autentica redirect;
    		return 401 "Access denied because token is expired or invalid";
                }
                    proxy_http_version 1.1;
                    proxy_set_header Upgrade $http_upgrade;
                    proxy_set_header Connection 'upgrade';
                    proxy_cache_bypass $http_upgrade;
                    proxy_set_header X-Real-IP $remote_addr;
                    proxy_pass http://caqvix/;
            }
    
            location /api/ {
                    proxy_http_version 1.1;
                    proxy_set_header Upgrade $http_upgrade;
                    proxy_set_header Connection 'upgrade';
                    # proxy_set_header Host $host;
                    proxy_cache_bypass $http_upgrade;
                    proxy_set_header X-Real-IP $remote_addr;
                    proxy_pass http://api_server;
                    proxy_read_timeout 600s;
            }
    }