c2083df2 by DevOps

Add servers (80 and 443) for sso.test.vue.gov.py and standardize access_log property

1 parent 343929fe
......@@ -25,6 +25,11 @@
value: 'upgrade-insecure-requests' # Required
always: true # Boolean
log:
access:
- path: /var/log/nginx/access.log
format: main
upstreams:
- name: jbosseap
least_conn: true
......@@ -36,6 +41,11 @@
servers:
- address: texportafacil01.vue.gov.py
- name: sso
least_conn: true
servers:
- address: psso01.vue.gov.py
ssl:
certificate: /etc/letsencrypt/live/vueapp.test.vue.gov.py/fullchain.pem
certificate_key: /etc/letsencrypt/live/vueapp.test.vue.gov.py/privkey.pem
......@@ -49,11 +59,7 @@
servers:
#vueapp
- log:
access:
- path: /var/log/nginx/access.log
format: main
core:
- core:
listen:
- port: 80
server_name: vueapp.test.vue.gov.py
......@@ -62,6 +68,7 @@
return:
code: 301
url: https://$host$request_uri
- core:
client_max_body_size: 50m #Pueden subir max 7 archivos de 5mb c/u, verificar también en los JBoss EAP
client_body_buffer_size: 128k
......@@ -70,10 +77,6 @@
http2: true
ssl: true
server_name: vueapp.test.vue.gov.py
log:
access:
- path: /var/log/nginx/access.log
format: main
locations:
- location: /
proxy:
......@@ -107,10 +110,10 @@
listen:
- port: 80
server_name: datos.test.vue.gov.py
log:
access:
- path: /var/log/nginx/access.log
format: main
#log:
# access:
# - path: /var/log/nginx/access.log
# format: main
#Configure this to redirect to HTTPS, as of 26-oct-22, it should only be available for test
rewrite:
return:
......@@ -124,10 +127,10 @@
http2: true
ssl: true
server_name: datos.test.vue.gov.py
log:
access:
- path: /var/log/nginx/access.log
format: main
#log:
# access:
# - path: /var/log/nginx/access.log
# format: main
locations:
- location: /
proxy:
......@@ -153,11 +156,6 @@
- port: 80
server_name: exportafacil.test.vue.gov.py
log:
access:
- path: /var/log/nginx/access.log
format: main
#Configure this to redirect to HTTPS, as of 26-oct-22, it should only be available for test
rewrite:
return:
......@@ -173,11 +171,6 @@
ssl: true
server_name: exportafacil.test.vue.gov.py
log:
access:
- path: /var/log/nginx/access.log
format: main
locations:
- location: /
proxy:
......@@ -211,6 +204,43 @@
- field: X-Forwarded-Proto
value: $scheme
#sso
- core:
listen:
- port: 80
server_name: sso.test.vue.gov.py
#Configure this to redirect to HTTPS, as of 26-oct-22, it should only be available for test
rewrite:
return:
code: 301
url: https://$host$request_uri
- core:
client_max_body_size: 50m #Pueden subir max 7 archivos de 5mb c/u, verificar también en los JBoss EAP
client_body_buffer_size: 128k
listen:
- port: 443
http2: true
ssl: true
server_name: sso.test.vue.gov.py
locations:
- location: /
proxy:
pass: http://sso/
set_header:
#Equivalent to ProxyPreserveHost on from Apache HTTPd Server. It is necessary to work with RH SSO correctly
- field: Host
value: $host
- field: X-Forwarded-For
value: $proxy_add_x_forwarded_for
- field: X-Real-IP
value: $remote_addr
- field: X-Forwarded-Proto
value: $scheme
#This next three values were increased for an app
read_timeout: 1200s
connect_timeout: 1200s
send_timeout: 1200s
# custom_directives:
# - core:
......
Styling with Markdown is supported
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!