Select Git revision
-
Miguel Angelo Salerno authoredMiguel Angelo Salerno authored
caqvix-dev 2.00 KiB
upstream caqvix {
server localhost:5070 fail_timeout=0;
}
upstream api_server {
server localhost:3003 fail_timeout=0;
}
upstream autentica {
server localhost:5500 fail_timeout=0;
}
server {
listen 80;
server_name caqvixdev.c3sl.ufpr.br www.caqvixdev.c3sl.ufpr.br;
return 301 https://caqvixdev.c3sl.ufpr.br$request_uri;
}
server {
listen 443 ssl;
server_name caqvixdev.c3sl.ufpr.br www.caqvixdev.c3sl.ufpr.br;
ssl_certificate /etc/ssl/certs/c3sl.pem;
ssl_certificate_key /etc/ssl/private/c3sl.pem;
location /autentica {
if ($cookie_CAQVIX = "caqvixeducacao") {
rewrite ^/autentica$ https://caqvixdev.c3sl.ufpr.br/ redirect;
}
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection 'upgrade';
proxy_cache_bypass $http_upgrade;
proxy_set_header X-Real-IP $remote_addr;
proxy_pass http://autentica/;
}
location / {
if ($cookie_CAQVIX != "caqvixeducacao") {
rewrite ^/$ https://caqvixdev.c3sl.ufpr.br/autentica redirect;
return 401 "Access denied because token is expired or invalid";
}
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection 'upgrade';
proxy_cache_bypass $http_upgrade;
proxy_set_header X-Real-IP $remote_addr;
proxy_pass http://caqvix/;
}
location /api/ {
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection 'upgrade';
# proxy_set_header Host $host;
proxy_cache_bypass $http_upgrade;
proxy_set_header X-Real-IP $remote_addr;
proxy_pass http://api_server;
proxy_read_timeout 600s;
}
}