mirror of
https://github.com/Infisical/infisical.git
synced 2026-01-08 23:18:05 -05:00
52f773c647
* chore: save poc * chore: save wip * fix: undo cors * fix: impl changes * fix: PR changes * fix: mocks * fix: connection tracking and auth changes * fix: PR changes * fix: revert license * feat: frontend change * fix: revert docker compose.dev * fix: duplicate publisher connection * fix: pr changes * chore: move event impl to `ee` * fix: lint errors * fix: check length of events * fix: static permissions matching * fix: secretPath * fix: remove source prefix in bus event name * fix: license check
87 lines
2.3 KiB
Plaintext
87 lines
2.3 KiB
Plaintext
upstream api {
|
|
server backend:4000;
|
|
}
|
|
|
|
server {
|
|
listen 80;
|
|
|
|
large_client_header_buffers 8 128k;
|
|
client_header_buffer_size 128k;
|
|
|
|
location ~ ^/(api|secret-scanning/webhooks) {
|
|
proxy_set_header X-Real-RIP $remote_addr;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
|
|
proxy_set_header Host $http_host;
|
|
proxy_set_header X-NginX-Proxy true;
|
|
|
|
proxy_pass http://api;
|
|
proxy_redirect off;
|
|
|
|
proxy_cookie_path / "/; SameSite=strict";
|
|
}
|
|
|
|
location /runtime-ui-env.js {
|
|
proxy_set_header X-Real-RIP $remote_addr;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
|
|
proxy_set_header Host $http_host;
|
|
proxy_set_header X-NginX-Proxy true;
|
|
|
|
proxy_pass http://api;
|
|
proxy_redirect off;
|
|
|
|
proxy_cookie_path / "/; HttpOnly; SameSite=strict";
|
|
}
|
|
|
|
location /api/v3/migrate {
|
|
client_max_body_size 25M;
|
|
|
|
proxy_set_header X-Real-RIP $remote_addr;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
|
|
proxy_set_header Host $http_host;
|
|
proxy_set_header X-NginX-Proxy true;
|
|
|
|
proxy_pass http://api;
|
|
proxy_redirect off;
|
|
|
|
proxy_cookie_path / "/; HttpOnly; SameSite=strict";
|
|
}
|
|
|
|
location /.well-known/est {
|
|
|
|
proxy_set_header X-Real-RIP $remote_addr;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
|
|
proxy_set_header Host $http_host;
|
|
proxy_set_header X-NginX-Proxy true;
|
|
|
|
proxy_set_header X-SSL-Client-Cert $ssl_client_escaped_cert;
|
|
# proxy_set_header X-SSL-Client-Cert $http_x_ssl_client_cert;
|
|
# proxy_pass_request_headers on;
|
|
|
|
proxy_pass http://api;
|
|
proxy_redirect off;
|
|
|
|
# proxy_cookie_path / "/; secure; HttpOnly; SameSite=strict";
|
|
proxy_cookie_path / "/; HttpOnly; SameSite=strict";
|
|
}
|
|
|
|
location / {
|
|
include /etc/nginx/mime.types;
|
|
|
|
proxy_set_header X-Real-RIP $remote_addr;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
|
|
proxy_set_header Host $http_host;
|
|
proxy_set_header X-NginX-Proxy true;
|
|
|
|
proxy_set_header Upgrade $http_upgrade;
|
|
proxy_set_header Connection "upgrade";
|
|
|
|
proxy_pass http://frontend:3000;
|
|
proxy_redirect off;
|
|
}
|
|
}
|