fureunoir/schon
fureunoir/schon
1
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Features: 1) Replace variables with static values for domain, backend, and frontend paths in Nginx configuration; 2) Update root paths for consistency with static and Nuxt frontend integration;

Browse source 
Fixes: 1) Addressed trailing variable usage causing inconsistent behavior in certificate links and path resolution; 2) Corrected alias and root paths for robots.txt and media/static assets;

Extra: Streamlined Nginx configuration for better maintainability and clarity;
This commit is contained in:
Egor Pavlovich Gorbunov 2025-06-19 12:19:09 +03:00
parent 658e799076
commit 2a7ec836b0
1 changed files with 24 additions and 36 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

60
nginx
View file

@ -7,13 +7,10 @@ upstream prom_backend {
} }
server { server {
set $domain evibes.com;
set $backend_root evibes-backend-django;
set $frontend_root evibes-frontend-vue;
listen 443 ssl http2; listen 443 ssl http2;
server_name api.$domain b2b.$domain; server_name api.evibes.com b2b.evibes.com;
ssl_certificate /etc/letsencrypt/live/$domain/fullchain.pem; ssl_certificate /etc/letsencrypt/live/evibes.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/$domain/privkey.pem; ssl_certificate_key /etc/letsencrypt/live/evibes.com/privkey.pem;
include /etc/letsencrypt/options-ssl-nginx.conf; include /etc/letsencrypt/options-ssl-nginx.conf;
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
ssl_session_cache shared:SSL:10m; ssl_session_cache shared:SSL:10m;
@ -33,41 +30,38 @@ server {
location /favicon.ico { location /favicon.ico {
add_header Access-Control-Allow-Origin "*"; add_header Access-Control-Allow-Origin "*";
root /var/jenkins/workspace/$backend_root/static; root /var/jenkins/workspace/evibes/static;
} }
location = /robots.txt { location = /robots.txt {
add_header Access-Control-Allow-Origin "*"; add_header Access-Control-Allow-Origin "*";
alias /var/jenkins/workspace/$backend_root/static/robots_backend.txt; alias /var/jenkins/workspace/evibes/static/robots_backend.txt;
default_type text/plain; default_type text/plain;
} }
location /media/ { location /media/ {
add_header Access-Control-Allow-Origin "*"; add_header Access-Control-Allow-Origin "*";
root /var/jenkins/workspace/$backend_root; root /var/jenkins/workspace/evibes;
} }
location /static/ { location /static/ {
add_header Access-Control-Allow-Origin "*"; add_header Access-Control-Allow-Origin "*";
root /var/jenkins/workspace/$backend_root; root /var/jenkins/workspace/evibes;
} }
error_page 500 502 503 504 /maintenance.html; error_page 500 502 503 504 /maintenance.html;
location = /maintenance.html { location = /maintenance.html {
add_header Access-Control-Allow-Origin "*"; add_header Access-Control-Allow-Origin "*";
root /var/jenkins/workspace/$backend_root/static; root /var/jenkins/workspace/evibes/static;
internal; internal;
} }
} }
server { server {
set $domain evibes.com;
set $backend_root evibes-backend-django;
set $frontend_root evibes-frontend-vue;
listen 443 ssl http2; listen 443 ssl http2;
server_name $domain www.$domain; server_name evibes.com www.evibes.com;
ssl_certificate /etc/letsencrypt/live/$domain/fullchain.pem; ssl_certificate /etc/letsencrypt/live/evibes.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/$domain/privkey.pem; ssl_certificate_key /etc/letsencrypt/live/evibes.com/privkey.pem;
include /etc/letsencrypt/options-ssl-nginx.conf; include /etc/letsencrypt/options-ssl-nginx.conf;
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
ssl_session_cache shared:SSL:10m; ssl_session_cache shared:SSL:10m;
@ -77,7 +71,7 @@ server {
add_header Referrer-Policy no-referrer-when-downgrade always; add_header Referrer-Policy no-referrer-when-downgrade always;
location ~* \.(?:js|css|png|jpe?g|gif|svg|woff2?)$ { location ~* \.(?:js|css|png|jpe?g|gif|svg|woff2?)$ {
root /var/jenkins/workspace/$frontend_root/dist; root /var/jenkins/workspace/evibes-frontend-nuxt/dist;
try_files $uri =404; try_files $uri =404;
add_header Cache-Control "public, max-age=31536000, immutable"; add_header Cache-Control "public, max-age=31536000, immutable";
access_log off; access_log off;
@ -85,22 +79,22 @@ server {
location /favicon.ico { location /favicon.ico {
add_header Access-Control-Allow-Origin "*"; add_header Access-Control-Allow-Origin "*";
root /var/jenkins/workspace/$backend_root/static; root /var/jenkins/workspace/evibes/static;
} }
location / { location / {
root /var/jenkins/workspace/$frontend_root/dist; root /var/jenkins/workspace/evibes-frontend-nuxt/dist;
try_files $uri $uri/ /index.html @maintenance; try_files $uri $uri/ /index.html @maintenance;
} }
location = /index.html { location = /index.html {
root /var/jenkins/workspace/$frontend_root/dist; root /var/jenkins/workspace/evibes-frontend-nuxt/dist;
try_files $uri @maintenance; try_files $uri @maintenance;
} }
location = /robots.txt { location = /robots.txt {
add_header Access-Control-Allow-Origin "*"; add_header Access-Control-Allow-Origin "*";
alias /var/jenkins/workspace/$backend_root/static/robots_frontend.txt; alias /var/jenkins/workspace/evibes/static/robots_frontend.txt;
default_type text/plain; default_type text/plain;
} }
@ -120,19 +114,16 @@ server {
error_page 503 404 500 502 504 /maintenance.html; error_page 503 404 500 502 504 /maintenance.html;
location = /maintenance.html { location = /maintenance.html {
add_header Access-Control-Allow-Origin "*"; add_header Access-Control-Allow-Origin "*";
root /var/jenkins/workspace/$backend_root/static; root /var/jenkins/workspace/evibes/static;
internal; internal;
} }
} }
server { server {
set $domain evibes.com;
set $backend_root evibes-backend-django;
set $frontend_root evibes-frontend-vue;
listen 443 ssl http2; listen 443 ssl http2;
server_name prometheus.$domain; server_name prometheus.evibes.com;
ssl_certificate /etc/letsencrypt/live/$domain/fullchain.pem; ssl_certificate /etc/letsencrypt/live/evibes.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/$domain/privkey.pem; ssl_certificate_key /etc/letsencrypt/live/evibes.com/privkey.pem;
include /etc/letsencrypt/options-ssl-nginx.conf; include /etc/letsencrypt/options-ssl-nginx.conf;
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
ssl_session_cache shared:SSL:10m; ssl_session_cache shared:SSL:10m;
@ -152,28 +143,25 @@ server {
location = /robots.txt { location = /robots.txt {
add_header Access-Control-Allow-Origin "*"; add_header Access-Control-Allow-Origin "*";
alias /var/jenkins/workspace/$backend_root/static/robots_backend.txt; alias /var/jenkins/workspace/evibes/static/robots_backend.txt;
default_type text/plain; default_type text/plain;
} }
location /favicon.ico { location /favicon.ico {
add_header Access-Control-Allow-Origin "*"; add_header Access-Control-Allow-Origin "*";
root /var/jenkins/workspace/$backend_root/static; root /var/jenkins/workspace/evibes/static;
} }
error_page 500 502 503 504 /maintenance.html; error_page 500 502 503 504 /maintenance.html;
location = /maintenance.html { location = /maintenance.html {
add_header Access-Control-Allow-Origin "*"; add_header Access-Control-Allow-Origin "*";
root /var/jenkins/workspace/$backend_root/static; root /var/jenkins/workspace/evibes/static;
internal; internal;
} }
} }
server { server {
set $domain evibes.com;
set $backend_root evibes-backend-django;
set $frontend_root evibes-frontend-vue;
listen 80; listen 80;
server_name api.$domain b2b.$domain www.$domain $domain prometheus.$domain; server_name api.evibes.com b2b.evibes.com www.evibes.com evibes.com prometheus.evibes.com;
return 301 https://$host$request_uri; return 301 https://$host$request_uri;
} }