diff --git a/.deploy-infra/deploy-dev.yaml b/.deploy-infra/deploy-dev.yaml index 12eaf87..79dfa67 100644 --- a/.deploy-infra/deploy-dev.yaml +++ b/.deploy-infra/deploy-dev.yaml @@ -9,6 +9,7 @@ services: - sprint-nginx - swarmpit-nginx - exchange-nginx + - b-jokes-nginx ports: - "80:80" - "443:443" @@ -141,5 +142,7 @@ networks: external: true sprint-nginx: external: true + b-jokes-nginx: + external: true swarmpit-nginx: external: true \ No newline at end of file diff --git a/.deploy-infra/deploy-prod.yaml b/.deploy-infra/deploy-prod.yaml index 8b794b9..40890db 100644 --- a/.deploy-infra/deploy-prod.yaml +++ b/.deploy-infra/deploy-prod.yaml @@ -9,6 +9,7 @@ services: - sprint-nginx - swarmpit-nginx - exchange-nginx + - b-jokes-nginx ports: - "80:80" - "443:443" @@ -141,5 +142,7 @@ networks: external: true sprint-nginx: external: true + b-jokes-nginx: + external: true swarmpit-nginx: external: true \ No newline at end of file diff --git a/nginx/nginx-dev/nginx-dev.conf b/nginx/nginx-dev/nginx-dev.conf index 191c243..9866dfe 100644 --- a/nginx/nginx-dev/nginx-dev.conf +++ b/nginx/nginx-dev/nginx-dev.conf @@ -155,4 +155,23 @@ http { } } + server { + listen 443 ssl http2; + listen [::]:443 ssl http2; + server_name b-jokes.develop.sprinthub.ru; + + ssl_certificate /etc/nginx/fullchain.pem; + ssl_certificate_key /etc/nginx/privkey.pem; + + add_header X-Frame-Options "SAMEORIGIN" always; + add_header X-XSS-Protection "1; mode=block" always; + add_header X-Content-Type-Options "nosniff" always; + add_header Referrer-Policy "no-refferer-when-downgrade" always; + add_header Content-Security-Policy "default-src * data: 'unsafe-eval' 'unsafe-inline'" always; + + location / { + proxy_pass http://b-jokes-nginx:1238/; + } + } + } \ No newline at end of file diff --git a/nginx/nginx-prod/nginx-prod.conf b/nginx/nginx-prod/nginx-prod.conf index c28fd8a..39f5dc4 100644 --- a/nginx/nginx-prod/nginx-prod.conf +++ b/nginx/nginx-prod/nginx-prod.conf @@ -183,4 +183,23 @@ http { } } + server { + listen 443 ssl http2; + listen [::]:443 ssl http2; + server_name b-jokes.sprinthub.ru; + + ssl_certificate /etc/nginx/fullchain.pem; + ssl_certificate_key /etc/nginx/privkey.pem; + + add_header X-Frame-Options "SAMEORIGIN" always; + add_header X-XSS-Protection "1; mode=block" always; + add_header X-Content-Type-Options "nosniff" always; + add_header Referrer-Policy "no-refferer-when-downgrade" always; + add_header Content-Security-Policy "default-src * data: 'unsafe-eval' 'unsafe-inline'" always; + + location / { + proxy_pass http://b-jokes-nginx:1238/; + } + } + } \ No newline at end of file