fureunoir/schon
fureunoir/schon
1
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Features: 1) None;

Browse source 
Fixes: 1) None;

Extra: 1) Reformatted `nginx.conf` for improved readability by aligning indentation and spacing across all directives and blocks;
This commit is contained in:
Egor Pavlovich Gorbunov 2025-11-10 13:07:24 +03:00
parent 10434d8e2b
commit 9f867f775f
1 changed files with 107 additions and 96 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

203
nginx.conf
View file

@ -11,157 +11,168 @@ upstream storefront_frontend {
} }
server { server {
listen 443 ssl http2; listen 443 ssl http2;
server_name api.evibes.com; server_name api.evibes.com;
ssl_certificate /etc/letsencrypt/live/evibes.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/evibes.com/privkey.pem; ssl_certificate /etc/letsencrypt/live/evibes.com/fullchain.pem;
include /etc/letsencrypt/options-ssl-nginx.conf; ssl_certificate_key /etc/letsencrypt/live/evibes.com/privkey.pem;
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; include /etc/letsencrypt/options-ssl-nginx.conf;
ssl_session_cache shared:SSL:10m; ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always; ssl_session_cache shared:SSL:10m;
add_header X-Frame-Options SAMEORIGIN always;
add_header X-Content-Type-Options nosniff always; add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
add_header Referrer-Policy no-referrer-when-downgrade always; add_header X-Frame-Options SAMEORIGIN always;
client_max_body_size 100M; add_header X-Content-Type-Options nosniff always;
add_header Referrer-Policy no-referrer-when-downgrade always;
client_max_body_size 100M;
location / { location / {
proxy_pass http://django_backend; proxy_pass http://django_backend;
proxy_set_header Host $host; proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme; proxy_set_header X-Forwarded-Proto $scheme;
proxy_http_version 1.1; proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade; proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade"; proxy_set_header Connection "upgrade";
proxy_read_timeout 300; proxy_read_timeout 300;
proxy_send_timeout 300; proxy_send_timeout 300;
} }
location /favicon.ico { location /favicon.ico {
add_header Access-Control-Allow-Origin "*"; add_header Access-Control-Allow-Origin "*";
root /var/jenkins/workspace/evibes/static; root /var/jenkins/workspace/evibes/static;
} }
location = /robots.txt { location = /robots.txt {
add_header Access-Control-Allow-Origin "*"; add_header Access-Control-Allow-Origin "*";
alias /var/jenkins/workspace/evibes/static/robots_backend.txt; alias /var/jenkins/workspace/evibes/static/robots_backend.txt;
default_type text/plain; default_type text/plain;
} }
location /static/ { location /static/ {
add_header Access-Control-Allow-Origin "*"; add_header Access-Control-Allow-Origin "*";
root /var/jenkins/workspace/evibes; root /var/jenkins/workspace/evibes;
} }
location /media/ { location /media/ {
add_header Access-Control-Allow-Origin "*"; add_header Access-Control-Allow-Origin "*";
root /var/jenkins/workspace/evibes; root /var/jenkins/workspace/evibes;
} }
error_page 500 502 503 504 /maintenance.html; error_page 500 502 503 504 /maintenance.html;
location = /maintenance.html { location = /maintenance.html {
add_header Access-Control-Allow-Origin "*"; add_header Access-Control-Allow-Origin "*";
root /var/jenkins/workspace/evibes/static; root /var/jenkins/workspace/evibes/static;
internal; internal;
} }
} }
server { server {
listen 443 ssl http2; listen 443 ssl http2;
server_name evibes.com www.evibes.com; server_name evibes.com www.evibes.com;
ssl_certificate /etc/letsencrypt/live/evibes.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/evibes.com/privkey.pem; ssl_certificate /etc/letsencrypt/live/evibes.com/fullchain.pem;
include /etc/letsencrypt/options-ssl-nginx.conf; ssl_certificate_key /etc/letsencrypt/live/evibes.com/privkey.pem;
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; include /etc/letsencrypt/options-ssl-nginx.conf;
ssl_session_cache shared:SSL:10m; ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always; ssl_session_cache shared:SSL:10m;
add_header X-Frame-Options SAMEORIGIN always;
add_header X-Content-Type-Options nosniff always; add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
add_header Referrer-Policy no-referrer-when-downgrade always; add_header X-Frame-Options SAMEORIGIN always;
add_header X-Content-Type-Options nosniff always;
add_header Referrer-Policy no-referrer-when-downgrade always;
location /favicon.ico { location /favicon.ico {
add_header Access-Control-Allow-Origin "*"; add_header Access-Control-Allow-Origin "*";
root /var/jenkins/workspace/evibes/static; root /var/jenkins/workspace/evibes/static;
} }
location = /robots.txt { location = /robots.txt {
add_header Access-Control-Allow-Origin "*"; add_header Access-Control-Allow-Origin "*";
alias /var/jenkins/workspace/evibes/static/robots_frontend.txt; alias /var/jenkins/workspace/evibes/static/robots_frontend.txt;
default_type text/plain; default_type text/plain;
} }
location ~ ^/sitemap(?:-(?P<section>[a-z]+)(?:-(?P<page>\d+))?)?\.xml$ { location ~ ^/sitemap(?:-(?P<section>[a-z]+)(?:-(?P<page>\d+))?)?\.xml$ {
proxy_pass http://django_backend$request_uri; proxy_pass http://django_backend$request_uri;
proxy_set_header Host $host; proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme; proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header Accept "application/xml"; proxy_set_header Accept "application/xml";
} }
location / { location / {
proxy_pass http://storefront_frontend; proxy_pass http://storefront_frontend;
proxy_set_header Host $host; proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme; proxy_set_header X-Forwarded-Proto $scheme;
} }
location @maintenance { location @maintenance {
return 503; return 503;
} }
error_page 503 404 500 502 504 /maintenance.html; error_page 503 404 500 502 504 /maintenance.html;
location = /maintenance.html { location = /maintenance.html {
add_header Access-Control-Allow-Origin "*"; add_header Access-Control-Allow-Origin "*";
root /var/jenkins/workspace/evibes/static; root /var/jenkins/workspace/evibes/static;
internal; internal;
} }
} }
server { server {
listen 443 ssl http2; listen 443 ssl http2;
server_name prometheus.evibes.com; server_name prometheus.evibes.com;
ssl_certificate /etc/letsencrypt/live/evibes.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/evibes.com/privkey.pem; ssl_certificate /etc/letsencrypt/live/evibes.com/fullchain.pem;
include /etc/letsencrypt/options-ssl-nginx.conf; ssl_certificate_key /etc/letsencrypt/live/evibes.com/privkey.pem;
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; include /etc/letsencrypt/options-ssl-nginx.conf;
ssl_session_cache shared:SSL:10m; ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always; ssl_session_cache shared:SSL:10m;
add_header X-Frame-Options SAMEORIGIN always;
add_header X-Content-Type-Options nosniff always; add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
add_header Referrer-Policy no-referrer-when-downgrade always; add_header X-Frame-Options SAMEORIGIN always;
client_max_body_size 100M; add_header X-Content-Type-Options nosniff always;
add_header Referrer-Policy no-referrer-when-downgrade always;
client_max_body_size 100M;
location / { location / {
proxy_pass http://prom_backend; proxy_pass http://prom_backend;
proxy_set_header Host $host; proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme; proxy_set_header X-Forwarded-Proto $scheme;
} }
location = /robots.txt { location = /robots.txt {
add_header Access-Control-Allow-Origin "*"; add_header Access-Control-Allow-Origin "*";
alias /var/jenkins/workspace/evibes/static/robots_backend.txt; alias /var/jenkins/workspace/evibes/static/robots_backend.txt;
default_type text/plain; default_type text/plain;
} }
location /favicon.ico { location /favicon.ico {
add_header Access-Control-Allow-Origin "*"; add_header Access-Control-Allow-Origin "*";
root /var/jenkins/workspace/evibes/static; root /var/jenkins/workspace/evibes/static;
} }
error_page 500 502 503 504 /maintenance.html; error_page 500 502 503 504 /maintenance.html;
location = /maintenance.html { location = /maintenance.html {
add_header Access-Control-Allow-Origin "*"; add_header Access-Control-Allow-Origin "*";
root /var/jenkins/workspace/evibes/static; root /var/jenkins/workspace/evibes/static;
internal; internal;
} }
} }
server { server {
listen 80; listen 80;
server_name api.evibes.com www.evibes.com evibes.com prometheus.evibes.com; server_name api.evibes.com www.evibes.com evibes.com prometheus.evibes.com;
return 301 https://$host$request_uri; return 301 https://$host$request_uri;
} }