summaryrefslogtreecommitdiffstats
path: root/rulemgt-standalone/src/main/assembly/nginx.conf
blob: e4facf14680a256b12d4b709104762e63cbd34f9 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
#user  nobody;
worker_processes  1;

error_log  logs/error.log;
error_log  logs/error.log  notice;
error_log  logs/error.log  info;

pid        logs/nginx.pid;


events {
    worker_connections  1024;
}


http {
    include       mime.types;
    default_type  application/octet-stream;

    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';

    #access_log  logs/access.log  main;

    sendfile        on;

    keepalive_timeout  65;

    ssl_session_cache   shared:SSL:10m;
    ssl_session_timeout 10m;

    server {
        listen       9104 ssl;
        server_name  _;

        location / {
            root   /usr/local/openresty/nginx/html;

            proxy_set_header Host $host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_redirect off;

            if ($uri ~ "/api/holmes-rule-mgmt/(.*)") {
                proxy_pass https://$host:9101$request_uri;
                break;
            }

            if ($uri ~ "/api/holmes-engine-mgmt/(.*)") {
                proxy_pass https://$host:9102$request_uri;
                break;
            }
        }

        location ~*.(htm|html){
            add_header Cache-Control no-cache;
            root html;
        }

        ssl_certificate /etc/ssl/certs/holmes-frontend-selfsigned.crt;
        ssl_certificate_key /etc/ssl/private/holmes-frontend.key;
        ssl_dhparam /etc/ssl/certs/dhparam.pem;
    }
}