Denozordec
e15768b25b
CI / changes (push) Successful in 15s
CI / commitlint (push) Has been skipped
CI / openapi (push) Has been skipped
CI / web (push) Successful in 1m0s
CI / go (push) Successful in 1m0s
CI / bird2 (push) Successful in 16s
CI / release (push) Successful in 3m39s
Added public HTTPS endpoints for firewall installation and enrollment scripts, allowing access without API keys. Updated the URL handling in the firewall code to ensure all suggested control plane URLs are served over HTTPS. Enhanced documentation to reflect the new public endpoints and their usage. Updated tests to verify the correct behavior of the new URL handling logic.
33 lines
1.1 KiB
Nginx Configuration File
33 lines
1.1 KiB
Nginx Configuration File
server {
|
|
listen 80;
|
|
server_name _;
|
|
root /usr/share/nginx/html;
|
|
gzip on;
|
|
gzip_types text/css application/javascript application/json image/svg+xml;
|
|
|
|
# Docker embedded DNS: без resolver nginx кэширует IP upstream при старте —
|
|
# после recreate evobgp-all остаётся 502 (connection refused на старый IP).
|
|
resolver 127.0.0.11 valid=10s ipv6=off;
|
|
set $evobgp_upstream evobgp-api;
|
|
|
|
location /v1/ {
|
|
# С переменной в proxy_pass нельзя полагаться на замену URI — передаём $request_uri целиком.
|
|
proxy_pass http://$evobgp_upstream:8080$request_uri;
|
|
proxy_http_version 1.1;
|
|
proxy_set_header Host $host;
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
proxy_set_header X-Forwarded-Proto $http_x_forwarded_proto;
|
|
}
|
|
|
|
location = /metrics {
|
|
proxy_pass http://$evobgp_upstream:8080/metrics;
|
|
proxy_http_version 1.1;
|
|
proxy_set_header Host $host;
|
|
}
|
|
|
|
location / {
|
|
try_files $uri $uri/ /index.html;
|
|
}
|
|
}
|