1 # ============LICENSE_START===============================================
2 # Copyright (C) 2023 Nordix Foundation. All rights reserved.
3 # ========================================================================
4 # Licensed under the Apache License, Version 2.0 (the "License");
5 # you may not use this file except in compliance with the License.
6 # You may obtain a copy of the License at
8 # http://www.apache.org/licenses/LICENSE-2.0
10 # Unless required by applicable law or agreed to in writing, software
11 # distributed under the License is distributed on an "AS IS" BASIS,
12 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 # See the License for the specific language governing permissions and
14 # limitations under the License.
15 # ============LICENSE_END=================================================
18 worker_processes auto;
20 include /etc/nginx/modules-enabled/*.conf;
21 load_module /usr/lib/nginx/modules/ndk_http_module.so;
22 load_module /usr/lib/nginx/modules/ngx_http_lua_module.so;
27 worker_connections 768;
40 types_hash_max_size 2048;
42 include /etc/nginx/mime.types;
43 default_type application/octet-stream;
47 server { # simple reverse-proxy
48 set_by_lua $allow_http 'return os.getenv("ALLOW_HTTP")';
51 server_name localhost;
52 if ($allow_http != true) {
56 # serve dynamic requests
58 proxy_set_header Host $host;
59 proxy_set_header X-Real-IP $remote_addr;
60 proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
61 proxy_pass http://localhost:2222;
65 server { # simple reverse-proxy
68 server_name localhost;
69 ssl_certificate /usr/src/app/cert/cert.crt;
70 ssl_certificate_key /usr/src/app/cert/key.crt;
71 ssl_password_file /usr/src/app/cert/pass;
73 # serve dynamic requests
75 proxy_set_header Host $host;
76 proxy_set_header X-Real-IP $remote_addr;
77 proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
78 proxy_pass http://localhost:2222;
85 ssl_protocols TLSv1 TLSv1.1 TLSv1.2; # Dropping SSLv3, ref: POODLE
86 ssl_prefer_server_ciphers on;
92 access_log /var/log/nginx/access.log;
93 error_log /var/log/nginx/error.log;