fix
This commit is contained in:
parent
78550c3e6c
commit
84c36855e3
@ -4,8 +4,6 @@ RUN apt-get install certbot --yes
|
|||||||
RUN apt-get install python3-certbot-nginx python3-pip --yes
|
RUN apt-get install python3-certbot-nginx python3-pip --yes
|
||||||
RUN pip3 install --break-system-packages requests minio
|
RUN pip3 install --break-system-packages requests minio
|
||||||
COPY ./config /etc/nginx
|
COPY ./config /etc/nginx
|
||||||
COPY ./fullchain.pem /etc/nginx/fullchain.pem
|
|
||||||
COPY ./privkey.pem /etc/nginx/privkey.pem
|
|
||||||
COPY prepare.py prepare.py
|
COPY prepare.py prepare.py
|
||||||
COPY run.sh run.sh
|
COPY run.sh run.sh
|
||||||
ENV PYTHONUNBUFFERED=1
|
ENV PYTHONUNBUFFERED=1
|
||||||
|
@ -116,28 +116,3 @@
|
|||||||
proxy_pass http://develop.sprinthub.ru:3000/api/live/ws;
|
proxy_pass http://develop.sprinthub.ru:3000/api/live/ws;
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
server {
|
|
||||||
listen 443 ssl http2;
|
|
||||||
listen [::]:443 ssl http2;
|
|
||||||
server_name ~^(?<domain>.*)\.develop\.sprinthub\.ru$;
|
|
||||||
|
|
||||||
resolver 127.0.0.11 ipv6=off;
|
|
||||||
|
|
||||||
ssl_certificate /etc/nginx/fullchain.pem;
|
|
||||||
ssl_certificate_key /etc/nginx/privkey.pem;
|
|
||||||
|
|
||||||
add_header X-Frame-Options "SAMEORIGIN" always;
|
|
||||||
add_header X-XSS-Protection "1; mode=block" always;
|
|
||||||
add_header X-Content-Type-Options "nosniff" always;
|
|
||||||
add_header Referrer-Policy "no-refferer-when-downgrade" always;
|
|
||||||
add_header Content-Security-Policy "default-src * data: 'unsafe-eval' 'unsafe-inline'" always;
|
|
||||||
proxy_set_header Host $host;
|
|
||||||
proxy_set_header X-Forwarded-For $remote_addr;
|
|
||||||
proxy_set_header X-Real-IP $remote_addr;
|
|
||||||
|
|
||||||
location / {
|
|
||||||
proxy_pass http://$domain-nginx:1238$request_uri;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
|
@ -4,8 +4,6 @@ RUN apt-get install certbot --yes
|
|||||||
RUN apt-get install python3-certbot-nginx python3-pip --yes
|
RUN apt-get install python3-certbot-nginx python3-pip --yes
|
||||||
RUN pip3 install --break-system-packages requests minio
|
RUN pip3 install --break-system-packages requests minio
|
||||||
COPY ./config /etc/nginx
|
COPY ./config /etc/nginx
|
||||||
COPY ./fullchain.pem /etc/nginx/fullchain.pem
|
|
||||||
COPY ./privkey.pem /etc/nginx/privkey.pem
|
|
||||||
COPY prepare.py prepare.py
|
COPY prepare.py prepare.py
|
||||||
COPY run.sh run.sh
|
COPY run.sh run.sh
|
||||||
ENV PYTHONUNBUFFERED=1
|
ENV PYTHONUNBUFFERED=1
|
||||||
|
@ -88,24 +88,3 @@
|
|||||||
proxy_pass http://dev.sprinthub.ru:3000/;
|
proxy_pass http://dev.sprinthub.ru:3000/;
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
server {
|
|
||||||
listen 443 ssl http2;
|
|
||||||
listen [::]:443 ssl http2;
|
|
||||||
server_name ~^(?<domain>.*)\.sprinthub\.ru$;
|
|
||||||
|
|
||||||
resolver 127.0.0.11 ipv6=off;
|
|
||||||
|
|
||||||
ssl_certificate /etc/nginx/fullchain.pem;
|
|
||||||
ssl_certificate_key /etc/nginx/privkey.pem;
|
|
||||||
|
|
||||||
add_header X-Frame-Options "SAMEORIGIN" always;
|
|
||||||
add_header X-XSS-Protection "1; mode=block" always;
|
|
||||||
add_header X-Content-Type-Options "nosniff" always;
|
|
||||||
add_header Referrer-Policy "no-refferer-when-downgrade" always;
|
|
||||||
add_header Content-Security-Policy "default-src * data: 'unsafe-eval' 'unsafe-inline'" always;
|
|
||||||
proxy_set_header X-Real-IP $remote_addr;
|
|
||||||
location / {
|
|
||||||
proxy_pass http://$domain-nginx:1238$request_uri;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
Loading…
Reference in New Issue
Block a user