From b2cce745319457e4d20686bef7e828c3113238e0 Mon Sep 17 00:00:00 2001 From: Alexandre <44178713+alexbelgium@users.noreply.github.com> Date: Wed, 6 Mar 2024 10:25:10 +0100 Subject: [PATCH] Update ingress.conf --- codex/rootfs/etc/nginx/servers/ingress.conf | 50 ++++++++++----------- 1 file changed, 24 insertions(+), 26 deletions(-) diff --git a/codex/rootfs/etc/nginx/servers/ingress.conf b/codex/rootfs/etc/nginx/servers/ingress.conf index 7ce5e3aed..b9b8a3f21 100644 --- a/codex/rootfs/etc/nginx/servers/ingress.conf +++ b/codex/rootfs/etc/nginx/servers/ingress.conf @@ -5,33 +5,31 @@ server { include /etc/nginx/includes/proxy_params.conf; client_max_body_size 0; + charset utf-8; + add_header X-Frame-Options SAMEORIGIN; + access_log /dev/stdout; + error_log /dev/stderr; + # proxies + proxy_buffering off; + proxy_buffers 8 64k; + proxy_set_header Host $http_host; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Host $server_name; + proxy_set_header X-Forwarded-Port $server_port; + proxy_set_header X-Forwarded-Proto $scheme; + # proxy_set_header X-Forwarded-Ssl on; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Scheme $scheme; + # WS + proxy_http_version 1.1; + proxy_set_header Upgrade $http_upgrade; + proxy_set_header Connection "Upgrade"; + gzip_comp_level 6; + gzip_proxied any; + gzip_types text/plain text/css text/js text/xml text/javascript + application/javascript application/json application/xml image/svg+xml; location / { - # Allow frames - ## proxy_hide_header "Content-Security-Policy"; - add_header X-Frame-Options SAMEORIGIN; # Required for ingress frame - add_header Access-Control-Allow-Origin *; - proxy_set_header Accept-Encoding ""; - - proxy_connect_timeout 30m; - proxy_send_timeout 30m; - proxy_read_timeout 30m; - proxy_set_header Host $http_host; - proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; - proxy_set_header X-Forwarded-Host $server_name; - proxy_set_header X-Forwarded-Port $server_port; - proxy_set_header X-Forwarded-Proto $scheme; - # proxy_set_header X-Forwarded-Ssl on; - proxy_set_header X-Real-IP $remote_addr; - proxy_set_header X-Scheme $scheme; - # WS - proxy_http_version 1.1; - proxy_set_header Upgrade $http_upgrade; - proxy_set_header Connection "Upgrade"; - gzip_comp_level 6; - gzip_proxied any; - gzip_types text/plain text/css text/js text/xml text/javascript - application/javascript application/json application/xml image/svg+xml; - proxy_pass %%protocol%%://backend%%subpath%%; + proxy_pass %%protocol%%://backend; } }