83770ffc00
- Add conf/nginx/site-enabled_aether_app_svelte_node.conf (SvelteKit node upstream)
- Clean up site-enabled_aether_flask_gunicorn.conf: remove dead comments, update
upstream to app-node:3000
- docker-compose.yml: ae_app scale now uses ${AE_APP_REPLICAS:-1} instead of hardcoded 1
168 lines
5.7 KiB
Plaintext
168 lines
5.7 KiB
Plaintext
server {
|
|
listen 80;
|
|
listen [::]:80;
|
|
|
|
# server_name
|
|
# ${NGINX_SERVER_NAMES}
|
|
# ;
|
|
server_name
|
|
${DOCKER_AE_APP_SERVER_NAME}
|
|
flask_gunicorn.localhost demo.localhost dev.localhost
|
|
|
|
bak-app.oneskyit.com
|
|
bak-connect.oneskyit.com *.bak-connect.oneskyit.com
|
|
bak-demo.oneskyit.com *.bak-demo.oneskyit.com
|
|
|
|
bak-businessgroup.oneskyit.com *.bak-businessgroup.oneskyit.com
|
|
bak-ishlt.oneskyit.com *.bak-ishlt.oneskyit.com
|
|
|
|
dev-app.oneskyit.com
|
|
dev-connect.oneskyit.com *.dev-connect.oneskyit.com
|
|
dev-demo.oneskyit.com *.dev-demo.oneskyit.com
|
|
|
|
dev-aacc.oneskyit.com *.dev-aacc.oneskyit.com
|
|
dev-aapor.oneskyit.com *.dev-aapor.oneskyit.com
|
|
dev-businessgroup.oneskyit.com *.dev-businessgroup.oneskyit.com
|
|
dev-chow.oneskyit.com *.dev-chow.oneskyit.com
|
|
dev-cmsc.oneskyit.com *.dev-cmsc.oneskyit.com
|
|
dev-idaa.oneskyit.com *.dev-idaa.oneskyit.com
|
|
dev-ishlt.oneskyit.com *.dev-ishlt.oneskyit.com
|
|
dev-lci.oneskyit.com *.dev-lci.oneskyit.com
|
|
dev-ncsd.oneskyit.com *.dev-ncsd.oneskyit.com
|
|
dev-npa.oneskyit.com *.dev-npa.oneskyit.com
|
|
dev-rli.oneskyit.com *.dev-rli.oneskyit.com
|
|
|
|
sr-app.oneskyit.com
|
|
sr-connect.oneskyit.com *.sr-connect.oneskyit.com
|
|
sr-demo.oneskyit.com *.sr-demo.oneskyit.com
|
|
|
|
sr-aacc.oneskyit.com *.sr-aacc.oneskyit.com
|
|
sr-aapor.oneskyit.com *.sr-aapor.oneskyit.com
|
|
sr-businessgroup.oneskyit.com *.sr-businessgroup.oneskyit.com
|
|
sr-cmsc.oneskyit.com *.sr-cmsc.oneskyit.com
|
|
sr-lci.oneskyit.com *.sr-lci.oneskyit.com
|
|
sr-ncsd.oneskyit.com *.sr-ncsd.oneskyit.com
|
|
|
|
test-app.oneskyit.com
|
|
# test-idaa.oneskyit.com *.test-idaa.oneskyit.com
|
|
# test-ishlt.oneskyit.com *.test-ishlt.oneskyit.com
|
|
;
|
|
|
|
access_log /logs/nginx/access_flask_gunicorn.log;
|
|
error_log /logs/nginx/error_flask_gunicorn.log;
|
|
|
|
client_max_body_size ${OSIT_WEB_MAX_BODY_SIZE}; # 5120M; #4096M or 4G; 5120M or 5G;
|
|
|
|
location / {
|
|
proxy_set_header Host $http_host;
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
proxy_set_header X-Forwarded-Proto $scheme;
|
|
|
|
proxy_redirect off;
|
|
proxy_buffering off;
|
|
|
|
# This is needed for long running Python code. Default is 60 seconds
|
|
# Increased from 1200 to 1500 on 2022-04-17
|
|
fastcgi_connect_timeout 1500s;
|
|
fastcgi_send_timeout 1500s;
|
|
fastcgi_read_timeout 1500s;
|
|
proxy_read_timeout 1500s;
|
|
|
|
proxy_pass http://flask_backend;
|
|
}
|
|
}
|
|
|
|
|
|
server {
|
|
listen 443 ssl;
|
|
listen [::]:443 ssl;
|
|
http2 on;
|
|
|
|
# The Docker nginx envsubst with templates does not work for multiple server names.
|
|
# server_name
|
|
# ${NGINX_SERVER_NAMES}
|
|
# ;
|
|
server_name
|
|
${DOCKER_AE_APP_SERVER_NAME}
|
|
flask_gunicorn.localhost demo.localhost dev.localhost
|
|
|
|
bak-app.oneskyit.com
|
|
bak-connect.oneskyit.com *.bak-connect.oneskyit.com
|
|
bak-demo.oneskyit.com *.bak-demo.oneskyit.com
|
|
|
|
bak-businessgroup.oneskyit.com *.bak-businessgroup.oneskyit.com
|
|
bak-ishlt.oneskyit.com *.bak-ishlt.oneskyit.com
|
|
|
|
dev-app.oneskyit.com
|
|
dev-connect.oneskyit.com *.dev-connect.oneskyit.com
|
|
dev-demo.oneskyit.com *.dev-demo.oneskyit.com
|
|
|
|
dev-aacc.oneskyit.com *.dev-aacc.oneskyit.com
|
|
dev-aapor.oneskyit.com *.dev-aapor.oneskyit.com
|
|
dev-businessgroup.oneskyit.com *.dev-businessgroup.oneskyit.com
|
|
dev-chow.oneskyit.com *.dev-chow.oneskyit.com
|
|
# dev-cmsc.oneskyit.com *.dev-cmsc.oneskyit.com
|
|
dev-idaa.oneskyit.com *.dev-idaa.oneskyit.com
|
|
dev-ishlt.oneskyit.com *.dev-ishlt.oneskyit.com
|
|
dev-lci.oneskyit.com *.dev-lci.oneskyit.com
|
|
# dev-ncsd.oneskyit.com *.dev-ncsd.oneskyit.com
|
|
dev-npa.oneskyit.com *.dev-npa.oneskyit.com
|
|
dev-rli.oneskyit.com *.dev-rli.oneskyit.com
|
|
|
|
sr-app.oneskyit.com
|
|
sr-connect.oneskyit.com *.sr-connect.oneskyit.com
|
|
sr-demo.oneskyit.com *.sr-demo.oneskyit.com
|
|
|
|
sr-aacc.oneskyit.com *.sr-aacc.oneskyit.com
|
|
sr-aapor.oneskyit.com *.sr-aapor.oneskyit.com
|
|
sr-businessgroup.oneskyit.com *.sr-businessgroup.oneskyit.com
|
|
# sr-cmsc.oneskyit.com *.sr-cmsc.oneskyit.com
|
|
sr-lci.oneskyit.com *.sr-lci.oneskyit.com
|
|
# sr-ncsd.oneskyit.com *.sr-ncsd.oneskyit.com
|
|
|
|
test-app.oneskyit.com
|
|
# test-idaa.oneskyit.com *.test-idaa.oneskyit.com
|
|
# test-ishlt.oneskyit.com *.test-ishlt.oneskyit.com
|
|
;
|
|
|
|
access_log /logs/nginx/access_flask_gunicorn.log;
|
|
error_log /logs/nginx/error_flask_gunicorn.log;
|
|
|
|
include /etc/nginx/options-ssl-nginx.conf;
|
|
|
|
ssl_certificate /etc/certs/fullchain_wild.pem;
|
|
ssl_certificate_key /etc/certs/privkey_wild.pem;
|
|
ssl_dhparam /etc/certs/ssl-dhparams.pem;
|
|
|
|
# include brotli.conf;
|
|
# include gzip.conf;
|
|
|
|
client_max_body_size ${OSIT_WEB_MAX_BODY_SIZE}; # 5120M; #4096M or 4G; 5120M or 5G;
|
|
|
|
location / {
|
|
proxy_set_header Host $http_host;
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
proxy_set_header X-Forwarded-Proto $scheme;
|
|
|
|
proxy_redirect off;
|
|
proxy_buffering off;
|
|
|
|
# This is needed for long running Python code. Default is 60 seconds
|
|
# Increased from 1200 to 1500 on 2022-04-17
|
|
fastcgi_connect_timeout 1500s;
|
|
fastcgi_send_timeout 1500s;
|
|
fastcgi_read_timeout 1500s;
|
|
proxy_read_timeout 1500s;
|
|
|
|
proxy_pass http://flask_backend;
|
|
}
|
|
}
|
|
|
|
|
|
upstream flask_backend {
|
|
ip_hash;
|
|
server app-node:3000 weight=20 max_fails=3 fail_timeout=30s;
|
|
}
|