Created
February 7, 2019 15:05
-
-
Save rvalyi/10f0770a49b626f40a2c1910374dc70d to your computer and use it in GitHub Desktop.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # If we receive X-Forwarded-Proto, pass it through; otherwise, pass along the | |
| # scheme used to connect to this server | |
| map $http_x_forwarded_proto $proxy_x_forwarded_proto { | |
| default $http_x_forwarded_proto; | |
| '' $scheme; | |
| } | |
| # If we receive X-Forwarded-Port, pass it through; otherwise, pass along the | |
| # server port the client connected to | |
| map $http_x_forwarded_port $proxy_x_forwarded_port { | |
| default $http_x_forwarded_port; | |
| '' $server_port; | |
| } | |
| # If we receive Upgrade, set Connection to "upgrade"; otherwise, delete any | |
| # Connection header that may have been passed to this server | |
| map $http_upgrade $proxy_connection { | |
| default upgrade; | |
| '' close; | |
| } | |
| # Set appropriate X-Forwarded-Ssl header | |
| map $scheme $proxy_x_forwarded_ssl { | |
| default off; | |
| https on; | |
| } | |
| gzip_types text/plain text/css application/javascript application/json application/x-javascript text/xml application/xml application/xml+rss te$ | |
| t/javascript; | |
| log_format vhost '$host $remote_addr - $remote_user [$time_local] ' | |
| '"$request" $status $body_bytes_sent ' | |
| '"$http_referer" "$http_user_agent"'; | |
| access_log off; | |
| # HTTP 1.1 support | |
| proxy_http_version 1.1; | |
| proxy_buffering off; | |
| proxy_set_header Host $http_host; | |
| proxy_set_header Upgrade $http_upgrade; | |
| proxy_set_header Connection $proxy_connection; | |
| proxy_set_header X-Real-IP $remote_addr; | |
| proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; | |
| proxy_set_header X-Forwarded-Proto $proxy_x_forwarded_proto; | |
| proxy_set_header X-Forwarded-Ssl $proxy_x_forwarded_ssl; | |
| proxy_set_header X-Forwarded-Port $proxy_x_forwarded_port; | |
| # Mitigate httpoxy attack (see README for details) | |
| proxy_set_header Proxy ""; | |
| server { | |
| server_name _; # This is just an invalid value which will never trigger on a real hostname. | |
| listen 80; | |
| access_log /var/log/nginx/access.log vhost; | |
| return 503; | |
| } | |
| # odoo.dy | |
| upstream odoo.dy { | |
| ## Can be connect with "dy" network | |
| # root_odoo-docky_odoo_run_1 | |
| server 127.0.0.1:8069; | |
| } | |
| upstream odoo.dy_odoo_polling { | |
| ## Can be connect with "dy" network | |
| # root_odoo-docky_odoo_run_1 | |
| server 127.0.0.1:8072; | |
| } | |
| server { | |
| server_name ~^.*$; | |
| listen 80 ; | |
| access_log /var/log/nginx/access.log vhost; | |
| location / { | |
| proxy_pass http://odoo.dy; | |
| # 4 hours timeout | |
| proxy_read_timeout 14400; | |
| } | |
| location /longpolling/im/poll { proxy_pass http://odoo.dy_odoo_polling; } | |
| location /longpolling/poll { proxy_pass http://odoo.dy_odoo_polling; } | |
| } |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment