From e3de14ad03527ba98f4f121f2ae6c97e0cce1dd1 Mon Sep 17 00:00:00 2001 From: Administrator Date: Wed, 19 Oct 2022 23:38:39 +0300 Subject: [PATCH] ingress --- nginx/nginx-dev/nginx-dev.conf | 62 ++++++++++++++++++++++++++++++++-- 1 file changed, 60 insertions(+), 2 deletions(-) diff --git a/nginx/nginx-dev/nginx-dev.conf b/nginx/nginx-dev/nginx-dev.conf index e252543..a15ca01 100644 --- a/nginx/nginx-dev/nginx-dev.conf +++ b/nginx/nginx-dev/nginx-dev.conf @@ -126,10 +126,11 @@ http { } } + server { listen 443 ssl http2; listen [::]:443 ssl http2; - server_name ~^(?\w+)\.develop\.sprinthub\.ru$; + server_name battleship.develop.sprinthub.ru; ssl_certificate /etc/nginx/fullchain.pem; ssl_certificate_key /etc/nginx/privkey.pem; @@ -141,7 +142,64 @@ http { add_header Content-Security-Policy "default-src * data: 'unsafe-eval' 'unsafe-inline'" always; location / { - proxy_pass http://$domain-nginx:1236/; + proxy_pass http://battleship-nginx:1236/; + } + } + + server { + listen 443 ssl http2; + listen [::]:443 ssl http2; + server_name dev.develop.sprinthub.ru; + + ssl_certificate /etc/nginx/fullchain.pem; + ssl_certificate_key /etc/nginx/privkey.pem; + + add_header X-Frame-Options "SAMEORIGIN" always; + add_header X-XSS-Protection "1; mode=block" always; + add_header X-Content-Type-Options "nosniff" always; + add_header Referrer-Policy "no-refferer-when-downgrade" always; + add_header Content-Security-Policy "default-src * data: 'unsafe-eval' 'unsafe-inline'" always; + + location / { + proxy_pass http://dev-nginx:1235/; + } + } + + server { + listen 443 ssl http2; + listen [::]:443 ssl http2; + server_name exchange.develop.sprinthub.ru; + + ssl_certificate /etc/nginx/fullchain.pem; + ssl_certificate_key /etc/nginx/privkey.pem; + + add_header X-Frame-Options "SAMEORIGIN" always; + add_header X-XSS-Protection "1; mode=block" always; + add_header X-Content-Type-Options "nosniff" always; + add_header Referrer-Policy "no-refferer-when-downgrade" always; + add_header Content-Security-Policy "default-src * data: 'unsafe-eval' 'unsafe-inline'" always; + + location / { + proxy_pass http://exchange-nginx:1238/; + } + } + + server { + listen 443 ssl http2; + listen [::]:443 ssl http2; + server_name b-jokes.develop.sprinthub.ru; + + ssl_certificate /etc/nginx/fullchain.pem; + ssl_certificate_key /etc/nginx/privkey.pem; + + add_header X-Frame-Options "SAMEORIGIN" always; + add_header X-XSS-Protection "1; mode=block" always; + add_header X-Content-Type-Options "nosniff" always; + add_header Referrer-Policy "no-refferer-when-downgrade" always; + add_header Content-Security-Policy "default-src * data: 'unsafe-eval' 'unsafe-inline'" always; + + location / { + proxy_pass http://b-jokes-nginx:1238/; } }