admin-git/DealDocumentScreening
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Update front.conf

Browse source
This commit is contained in:
febux 2026-08-22 00:15:24 +03:00
parent c4bbcbe784
commit 24686f4965
1 changed files with 14 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

22
deploy/vps/front.conf
View file

@ -3,29 +3,35 @@
# - «Контракт-чек» (DealDocumentScreening) edge container -> 127.0.0.1:8081 # - «Контракт-чек» (DealDocumentScreening) edge container -> 127.0.0.1:8081
# - homelab-stack nginx container -> 127.0.0.1:8088 # - homelab-stack nginx container -> 127.0.0.1:8088
# #
# TLS: cert obtained on the host (webroot/webroot-nginx), paths below.
# Renewal: host certbot reuses /.well-known/acme-challenge/ on :80.
#
# Install: # Install:
# sudo cp front.conf /etc/nginx/sites-available/apps # sudo cp front.conf /etc/nginx/sites-available/apps
# sudo ln -s /etc/nginx/sites-available/apps /etc/nginx/sites-enabled/ # sudo ln -s /etc/nginx/sites-available/apps /etc/nginx/sites-enabled/apps
# sudo rm -f /etc/nginx/sites-enabled/default # sudo rm -f /etc/nginx/sites-enabled/default /etc/nginx/sites-enabled/legaldoc.tw1.su
# sudo nginx -t && sudo systemctl reload nginx # sudo nginx -t && sudo systemctl reload nginx
#
# TLS later: `sudo certbot --nginx -d your.domain` rewrites the 80-block and
# adds the 443 server automatically (install python3-certbot-nginx first).
map $http_upgrade $connection_upgrade { map $http_upgrade $connection_upgrade {
default upgrade; default upgrade;
'' close; '' close;
} }
# Backends (containers must publish on 127.0.0.1, see deploy/vps/README or override) # Backends (containers publish on 127.0.0.1, see docker-compose.override.example.yml)
upstream contract_check_edge { server 127.0.0.1:8081; } upstream contract_check_edge { server 127.0.0.1:8081; }
upstream homelab_nginx { server 127.0.0.1:8088; } upstream homelab_nginx { server 127.0.0.1:8088; }
server { server {
listen 80 default_server; listen 80 default_server;
listen [::]:80 default_server; listen [::]:80 default_server;
listen 443 ssl default_server;
listen [::]:443 ssl default_server;
server_name legaldoc.tw1.su;
# Let's Encrypt renewal (host certbot, webroot mode) — keep even after TLS is on ssl_certificate /etc/letsencrypt/live/legaldoc.tw1.su/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/legaldoc.tw1.su/privkey.pem;
# Let's Encrypt renewal (host certbot, webroot mode)
location /.well-known/acme-challenge/ { location /.well-known/acme-challenge/ {
root /var/www/html; root /var/www/html;
} }
@ -55,7 +61,7 @@ server {
} }
# ── everything else: homelab-stack (landing page, /homepage/, /dozzle/, ...) # ── everything else: homelab-stack (landing page, /homepage/, /dozzle/, ...)
location /dashboard { location / {
proxy_pass http://homelab_nginx; proxy_pass http://homelab_nginx;
proxy_http_version 1.1; proxy_http_version 1.1;
proxy_set_header Host $host; proxy_set_header Host $host;