1 # ============LICENSE_START========================================================================
2 # O-RAN-SC : tr-069-adapter
3 # =================================================================================================
4 # Copyright (C) 2020 CommScope Inc Intellectual Property.
5 # =================================================================================================
6 # This tr-069-adapter software file is distributed by CommScope Inc under the Apache License,
7 # Version 2.0 (the "License"); you may not use this file except in compliance with the License. You
8 # may obtain a copy of the License at
10 # http://www.apache.org/licenses/LICENSE-2.0
12 # This file is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND,
13 # either express or implied. See the License for the specific language governing permissions and
14 # limitations under the License.
15 # ===============LICENSE_END=======================================================================
16 worker_processes auto;
18 events { worker_connections 1024; }
23 ssl_password_file /etc/nginx/ssl/tr069adapterCertPassPhrase;
25 # This Section is TR069Adapter for SSL Termination
28 listen 1111 tr069adapterComm;
29 server_name netconfServerIP;
30 ssl_certificate /etc/nginx/ssl/tr069adapterSSLCert;
31 ssl_certificate_key /etc/nginx/ssl/tr069adapterSSLKey;
33 ssl_client_certificate /etc/nginx/ssl/tr069adapterSSLClientTrustCRT;
37 proxy_pass http://netconfServerIP:8089;
40 location /importFactory {
41 proxy_pass http://netconfServerIP:8089;
44 location /importConfig {
45 proxy_pass http://netconfServerIP:9000;
49 proxy_pass http://netconfServerIP:9000;
52 location /netConfServerManagerService/listServers {
53 proxy_pass http://netconfServerIP:8181;
56 location /CPEMgmt/acs {
57 proxy_pass http://netconfServerIP:9977;
59 proxy_set_header Host $host;
60 proxy_set_header X-Real-IP $remote_addr;
61 proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
62 proxy_set_header X-Forwarded-Host $server_name;
67 # This Section is for Fault VES Collector
71 resolver faultvesCollectorDNSServer;
72 server_name netconfServerIP;
75 proxy_pass https://faultvesCollectorHost:faultvesCollectorPort$request_uri;
76 proxy_ssl_certificate /etc/nginx/ssl/faultvesCollectorSSLCert;
77 proxy_ssl_certificate_key /etc/nginx/ssl/faultvesCollectorSSLKey;
78 proxy_ssl_password_file /etc/nginx/ssl/tr069adapterCertPassPhrase;
79 proxy_ssl_session_reuse on;
81 proxy_ssl_trusted_certificate /etc/nginx/ssl/faultvesCollectorTrustCRT;
83 proxy_ssl_verify_depth 2;
85 proxy_set_header Authorization "Basic faultvesCollectorBasicAuthUserPassEncrypt";
90 # This Section is for PNF Reg VES Collector
95 resolver pnfregvesCollectorDNSServer;
96 server_name netconfServerIP;
99 proxy_pass https://pnfregvesCollectorHost:pnfregvesCollectorPort$request_uri;
100 proxy_ssl_certificate /etc/nginx/ssl/pnfregvesCollectorSSLCert;
101 proxy_ssl_certificate_key /etc/nginx/ssl/pnfregvesCollectorSSLKey;
102 proxy_ssl_password_file /etc/nginx/ssl/tr069adapterCertPassPhrase;
103 proxy_ssl_session_reuse on;
105 proxy_ssl_trusted_certificate /etc/nginx/ssl/pnfregvesCollectorTrustCRT;
107 proxy_ssl_verify_depth 2;
109 proxy_set_header Authorization "Basic pnfregvesCollectorBasicAuthUserPassEncrypt";