root/srvrevproxy02_nginx
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add ki.egonetix.de config and fix n8n WebSocket support for flow.egonetix.de

Browse Source
This commit is contained in:
root
2025-12-13 17:27:36 +01:00
parent 366e6bf7bd
commit 62d24a96af
4 changed files with 105 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

52
sites-available/flow.conf Normal file
View File

@@ -0,0 +1,52 @@
add_header X-Robots-Tag "noindex, nofollow, nosnippet, noarchive";
proxy_cache_path /tmp/flow/ levels=1:2 keys_zone=my_cache_flow:10m max_size=10g
inactive=60m use_temp_path=off;
server{
listen 80;
server_name flow.egonetix.de;
return 301 https://$server_name$request_uri;
}
server {
listen 10.0.0.29:443 ssl http2;
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
add_header Content-Security-Policy "default-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https:; base-uri 'self';";
# SSL config
ssl on;
ssl_certificate /etc/letsencrypt/live/flow.egonetix.de/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/flow.egonetix.de/privkey.pem;
ssl_dhparam /etc/ssl/certs/dhparam.pem;
# Make site accessible from http://localhost/
server_name flow.egonetix.de;
access_log /var/log/nginx/flow-access_log;
error_log /var/log/nginx/flow-error_log;
set $upstream 10.0.0.48;
location / {
proxy_cache my_cache_flow;
proxy_cache_revalidate on;
proxy_cache_min_uses 3;
proxy_cache_use_stale error timeout updating http_500 http_502 http_503 http_504;
proxy_cache_lock on;
proxy_pass_header Authorization;
proxy_pass http://$upstream:8098;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_buffering off;
client_max_body_size 0;
proxy_read_timeout 36000s;
proxy_redirect off;
proxy_ssl_session_reuse off;
}
}

51
sites-available/ki.conf Normal file
View File

@@ -0,0 +1,51 @@
add_header X-Robots-Tag "noindex, nofollow, nosnippet, noarchive";
proxy_cache_path /tmp/ki/ levels=1:2 keys_zone=my_cache_ki:10m max_size=10g
inactive=60m use_temp_path=off;
server{
listen 80;
server_name ki.egonetix.de;
return 301 https://$server_name$request_uri;
}
server {
listen 10.0.0.29:443 ssl http2;
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
# SSL config
ssl on;
ssl_certificate /etc/letsencrypt/live/ki.egonetix.de/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/ki.egonetix.de/privkey.pem;
ssl_dhparam /etc/ssl/certs/dhparam.pem;
# Make site accessible from http://localhost/
server_name ki.egonetix.de;
access_log /var/log/nginx/ki-access_log;
error_log /var/log/nginx/ki-error_log;
set $upstream 10.0.0.48;
location / {
proxy_cache my_cache_ki;
proxy_cache_revalidate on;
proxy_cache_min_uses 3;
proxy_cache_use_stale error timeout updating http_500 http_502 http_503 http_504;
proxy_cache_lock on;
proxy_pass_header Authorization;
proxy_pass http://$upstream:3000;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_http_version 1.1;
proxy_set_header Connection "";
proxy_buffering off;
client_max_body_size 0;
proxy_read_timeout 36000s;
proxy_redirect off;
proxy_ssl_session_reuse off;
}
}

1
sites-enabled/flow.conf Symbolic link
View File

@@ -0,0 +1 @@
/etc/nginx/sites-available/flow.conf

1
sites-enabled/ki.conf Symbolic link
View File

@@ -0,0 +1 @@
/etc/nginx/sites-available/ki.conf