Ricardo Carneiro
36163b606d
Some checks failed
BCards Multi-Tenant Deployment Pipeline / Run Tests (push) Successful in 5s
BCards Multi-Tenant Deployment Pipeline / PR Validation (push) Has been skipped
BCards Multi-Tenant Deployment Pipeline / Build and Push Image (push) Successful in 13m31s
BCards Multi-Tenant Deployment Pipeline / Deploy to Release Swarm (ARM) (push) Has been skipped
BCards Multi-Tenant Deployment Pipeline / Deploy bcards.site (push) Successful in 1m3s
BCards Multi-Tenant Deployment Pipeline / Deploy spicylinks.site (push) Successful in 1m3s
BCards Multi-Tenant Deployment Pipeline / Deploy luzlinks.site (push) Failing after 31s
BCards Multi-Tenant Deployment Pipeline / Cleanup Old Resources (push) Has been skipped
BCards Multi-Tenant Deployment Pipeline / Deployment Summary (push) Successful in 0s
117 lines
3.9 KiB
Plaintext
117 lines
3.9 KiB
Plaintext
# Multi-tenant Nginx config
|
|
# Deploy to: /etc/nginx/sites-available/tenants.conf
|
|
# Symlink: ln -s /etc/nginx/sites-available/tenants.conf /etc/nginx/sites-enabled/tenants.conf
|
|
#
|
|
# Requires: certbot certificates for each domain
|
|
# certbot --nginx -d bcards.site -d www.bcards.site
|
|
# certbot --nginx -d spicylinks.site -d www.spicylinks.site
|
|
# certbot --nginx -d luzlinks.site -d www.luzlinks.site
|
|
|
|
# ─── bcards.site → :8080 ───────────────────────────────────────────────────
|
|
|
|
upstream bcards {
|
|
server 127.0.0.1:8080;
|
|
keepalive 32;
|
|
}
|
|
|
|
server {
|
|
listen 80;
|
|
server_name bcards.site www.bcards.site;
|
|
return 301 https://$host$request_uri;
|
|
}
|
|
|
|
server {
|
|
listen 443 ssl http2;
|
|
server_name bcards.site www.bcards.site;
|
|
|
|
ssl_certificate /etc/letsencrypt/live/bcards.site/fullchain.pem;
|
|
ssl_certificate_key /etc/letsencrypt/live/bcards.site/privkey.pem;
|
|
include /etc/letsencrypt/options-ssl-nginx.conf;
|
|
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
|
|
|
|
client_max_body_size 10M;
|
|
|
|
location / {
|
|
proxy_pass http://bcards;
|
|
proxy_http_version 1.1;
|
|
proxy_set_header Host $host;
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
proxy_set_header X-Forwarded-Proto $scheme;
|
|
proxy_set_header Connection "";
|
|
proxy_read_timeout 120s;
|
|
}
|
|
}
|
|
|
|
# ─── spicylinks.site → :8082 ───────────────────────────────────────────────
|
|
|
|
upstream spicylinks {
|
|
server 127.0.0.1:8082;
|
|
keepalive 32;
|
|
}
|
|
|
|
server {
|
|
listen 80;
|
|
server_name spicylinks.site www.spicylinks.site;
|
|
return 301 https://$host$request_uri;
|
|
}
|
|
|
|
server {
|
|
listen 443 ssl http2;
|
|
server_name spicylinks.site www.spicylinks.site;
|
|
|
|
ssl_certificate /etc/letsencrypt/live/spicylinks.site/fullchain.pem;
|
|
ssl_certificate_key /etc/letsencrypt/live/spicylinks.site/privkey.pem;
|
|
include /etc/letsencrypt/options-ssl-nginx.conf;
|
|
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
|
|
|
|
client_max_body_size 10M;
|
|
|
|
location / {
|
|
proxy_pass http://spicylinks;
|
|
proxy_http_version 1.1;
|
|
proxy_set_header Host $host;
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
proxy_set_header X-Forwarded-Proto $scheme;
|
|
proxy_set_header Connection "";
|
|
proxy_read_timeout 120s;
|
|
}
|
|
}
|
|
|
|
# ─── luzlinks.site → :8083 ─────────────────────────────────────────────────
|
|
|
|
upstream luzlinks {
|
|
server 127.0.0.1:8083;
|
|
keepalive 32;
|
|
}
|
|
|
|
server {
|
|
listen 80;
|
|
server_name luzlinks.site www.luzlinks.site;
|
|
return 301 https://$host$request_uri;
|
|
}
|
|
|
|
server {
|
|
listen 443 ssl http2;
|
|
server_name luzlinks.site www.luzlinks.site;
|
|
|
|
ssl_certificate /etc/letsencrypt/live/luzlinks.site/fullchain.pem;
|
|
ssl_certificate_key /etc/letsencrypt/live/luzlinks.site/privkey.pem;
|
|
include /etc/letsencrypt/options-ssl-nginx.conf;
|
|
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
|
|
|
|
client_max_body_size 10M;
|
|
|
|
location / {
|
|
proxy_pass http://luzlinks;
|
|
proxy_http_version 1.1;
|
|
proxy_set_header Host $host;
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
proxy_set_header X-Forwarded-Proto $scheme;
|
|
proxy_set_header Connection "";
|
|
proxy_read_timeout 120s;
|
|
}
|
|
}
|