cosmincatalin · October 27, 2022 10:59
diff --git a/nginx.conf b/nginx.conf
 user nginx;
 worker_processes auto;
 error_log /var/log/nginx/error.log;
 pid /var/run/nginx.pid;

 events {
    worker_connections 1024;
 }

 http {
    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';

    access_log  /var/log/nginx/access.log  main;

    sendfile            on;
    tcp_nopush          on;
    tcp_nodelay         on;
    keepalive_timeout   65;
    types_hash_max_size 2048;

    include             /etc/nginx/mime.types;
    default_type        application/octet-stream;

    server {
        # This server should only run on HTTPS
        listen 443 default ssl;
    
        # Replace shiny.example.com with your domain name
        # You need to have mapped the domain with your DNS
        # provider by using either an A record
        server_name shiny.example.com;

        ssl_certificate /etc/nginx/certificates/cert.bundle;
        ssl_certificate_key /etc/nginx/certificates/cert.key;
    
        add_header Strict-Transport-Security max-age=2592000;

        location / {
            # This is where the second reverse proxy lives
            proxy_pass http://127.0.0.1:4180;

            proxy_set_header Host $host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Scheme $scheme;
            proxy_pass_header Upgrade;
            proxy_pass_header Connection;
            proxy_connect_timeout 1;
            proxy_send_timeout 30;
            proxy_read_timeout 30;

            # Enabled websockets            
            proxy_http_version 1.1;
            proxy_set_header Upgrade $http_upgrade;
            proxy_set_header Connection "upgrade";

            # The line below resets the header. It would otherwise
            # make oauth2_proxy unhappy for some reason
            proxy_set_header Sec-Websocket-Extensions "";

        }
    }

    index   index.html index.htm;

 }
diff --git a/nginx.sh b/nginx.sh
 mkdir -p /etc/nginx/certificates
 cat /home/ec2-user/nginx.conf > /etc/nginx/nginx.conf
 cp /home/ec2-user/cert.* /etc/nginx/certificates
 # If the server is initially stopped, it will look like a failure.
 # You can ignore that as long as the server actually start after that
 service nginx restart
diff --git a/oauth2_proxy.cfg b/oauth2_proxy.cfg
 upstreams = [
    # This where the Shiny server lives
    "http://127.0.0.1:3838/",
 ]

 request_logging = false

 email_domains = [
    # All users under this domain will be granted access
    # Replace this
    "example.com"
 ]

 # Replace this
 client_id = "1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1.apps.googleusercontent.com"
 # Replace this
 client_secret = "0d0d0d0d0d0d0d0d0d0d0d0d0d0d0d"

 # Randomly generate a seed for the cookie secret
 # Replace this
 cookie_secret = "m7m7m7m7m7m7m7m7m7m7m77m"
diff --git a/oauth2_proxy.sh b/oauth2_proxy.sh
 yum -y install go
 GOPATH="/home/ec2-user/.go" go get github.com/cosmincatalin/oauth2_proxy # A custom build 2 forks far from the source
 cp oauth2_proxy.cfg /home/ec2-user/.go/bin
 /home/ec2-user/.go/bin/oauth2_proxy -config /home/ec2-user/.go/bin/oauth2_proxy.cfg
diff --git a/Shiny server with OAuth2.md b/Shiny server with OAuth2.md
diff --git a/shiny.sh b/shiny.sh
 yum -y install R
 su - -c "R -e \"install.packages('shiny', repos='https://cran.rstudio.com/')\""
 wget https://download3.rstudio.org/centos5.9/x86_64/shiny-server-1.5.4.869-rh5-x86_64.rpm
 yum -y install --nogpgcheck shiny-server-1.5.4.869-rh5-x86_64.rpm
	user nginx;
	worker_processes auto;
	error_log /var/log/nginx/error.log;
	pid /var/run/nginx.pid;

	events {
	worker_connections 1024;
	}

	http {
	log_format main '$remote_addr - $remote_user [$time_local] "$request" '
	'$status $body_bytes_sent "$http_referer" '
	'"$http_user_agent" "$http_x_forwarded_for"';

	access_log /var/log/nginx/access.log main;

	sendfile on;
	tcp_nopush on;
	tcp_nodelay on;
	keepalive_timeout 65;
	types_hash_max_size 2048;

	include /etc/nginx/mime.types;
	default_type application/octet-stream;

	server {
	# This server should only run on HTTPS
	listen 443 default ssl;

	# Replace shiny.example.com with your domain name
	# You need to have mapped the domain with your DNS
	# provider by using either an A record
	server_name shiny.example.com;

	ssl_certificate /etc/nginx/certificates/cert.bundle;
	ssl_certificate_key /etc/nginx/certificates/cert.key;

	add_header Strict-Transport-Security max-age=2592000;

	location / {
	# This is where the second reverse proxy lives
	proxy_pass http://127.0.0.1:4180;

	proxy_set_header Host $host;
	proxy_set_header X-Real-IP $remote_addr;
	proxy_set_header X-Scheme $scheme;
	proxy_pass_header Upgrade;
	proxy_pass_header Connection;
	proxy_connect_timeout 1;
	proxy_send_timeout 30;
	proxy_read_timeout 30;

	# Enabled websockets
	proxy_http_version 1.1;
	proxy_set_header Upgrade $http_upgrade;
	proxy_set_header Connection "upgrade";

	# The line below resets the header. It would otherwise
	# make oauth2_proxy unhappy for some reason
	proxy_set_header Sec-Websocket-Extensions "";

	}
	}

	index index.html index.htm;

	}
	mkdir -p /etc/nginx/certificates
	cat /home/ec2-user/nginx.conf > /etc/nginx/nginx.conf
	cp /home/ec2-user/cert.* /etc/nginx/certificates
	# If the server is initially stopped, it will look like a failure.
	# You can ignore that as long as the server actually start after that
	service nginx restart
	upstreams = [
	# This where the Shiny server lives
	"http://127.0.0.1:3838/",
	]

	request_logging = false

	email_domains = [
	# All users under this domain will be granted access
	# Replace this
	"example.com"
	]

	# Replace this
	client_id = "1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1a1.apps.googleusercontent.com"
	# Replace this
	client_secret = "0d0d0d0d0d0d0d0d0d0d0d0d0d0d0d"

	# Randomly generate a seed for the cookie secret
	# Replace this
	cookie_secret = "m7m7m7m7m7m7m7m7m7m7m77m"
	yum -y install go
	GOPATH="/home/ec2-user/.go" go get github.com/cosmincatalin/oauth2_proxy # A custom build 2 forks far from the source
	cp oauth2_proxy.cfg /home/ec2-user/.go/bin
	/home/ec2-user/.go/bin/oauth2_proxy -config /home/ec2-user/.go/bin/oauth2_proxy.cfg
	yum -y install R
	su - -c "R -e \"install.packages('shiny', repos='https://cran.rstudio.com/')\""
	wget https://download3.rstudio.org/centos5.9/x86_64/shiny-server-1.5.4.869-rh5-x86_64.rpm
	yum -y install --nogpgcheck shiny-server-1.5.4.869-rh5-x86_64.rpm