playbooks.d/webserver-nginx/share/sites.d/revproxy/k3s


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30

server {
        listen 80 default_server;
        listen [::]:80 default_server;

        include /etc/nginx/snippets.d/certbot.conf;

        location / {
                return 301 https://$host$request_uri;
        }
}

server {
        listen 443 ssl http2 default_server;
        listen [::]:443 ssl http2 default_server;

        ssl_certificate /etc/letsencrypt/live/$ssl_server_name/fullchain.pem;
        ssl_certificate_key /etc/letsencrypt/live/$ssl_server_name/privkey.pem;

        include /etc/nginx/snippets.d/certbot.conf;

        location / {
                proxy_http_version 1.1;
                proxy_set_header Connection      $http_connection;
                proxy_set_header Host            $host;
                proxy_set_header Upgrade         $http_upgrade;
                proxy_set_header X-Forwarded-For $remote_addr;

                proxy_pass http://10.57.20.8:8080;
        }
}