briven-nginx.conf.tpl95 lines · main

1	upstream kong_upstream {
2	server kong:8000;
3	keepalive 2;
4	}
5
6	server {
7	listen 443 ssl;
8	listen [::]:443 ssl;
9	http2 on;
10
11	server_name ${PROXY_DOMAIN};
12	server_tokens off;
13
14	proxy_http_version 1.1;
15
16	proxy_set_header Host $host;
17	proxy_set_header X-Real-IP $remote_addr;
18	proxy_set_header X-Forwarded-For $remote_addr;
19	proxy_set_header X-Forwarded-Proto $scheme;
20	proxy_set_header X-Forwarded-Host $http_host;
21	proxy_set_header X-Forwarded-Port $server_port;
22
23	ssl_certificate /etc/letsencrypt/live/${PROXY_DOMAIN}/fullchain.pem;
24	ssl_certificate_key /etc/letsencrypt/live/${PROXY_DOMAIN}/privkey.pem;
25	ssl_trusted_certificate /etc/letsencrypt/live/${PROXY_DOMAIN}/chain.pem;
26
27	ssl_dhparam /etc/letsencrypt/dhparams/dhparam.pem;
28
29	ssl_session_cache shared:SSL:10m;
30	ssl_session_timeout 10m;
31
32	# Prevent 502 errors from large Briven auth cookies
33	large_client_header_buffers 4 16k;
34	proxy_buffer_size 128k;
35	proxy_buffers 4 256k;
36	proxy_busy_buffers_size 256k;
37
38	location / {
39	auth_basic "briven";
40	auth_basic_user_file /etc/nginx/user_conf.d/dashboard-passwd;
41
42	proxy_pass http://studio:3000;
43	}
44
45	location /auth {
46	proxy_pass http://kong_upstream;
47	}
48
49	location /rest {
50	proxy_pass http://kong_upstream;
51	}
52
53	location /graphql {
54	proxy_pass http://kong_upstream;
55	}
56
57	location /realtime/v1/ {
58	proxy_pass http://kong_upstream;
59
60	proxy_set_header Host $host;
61	proxy_set_header X-Real-IP $remote_addr;
62	proxy_set_header X-Forwarded-For $remote_addr;
63	proxy_set_header X-Forwarded-Proto $scheme;
64	proxy_set_header X-Forwarded-Host $http_host;
65	proxy_set_header X-Forwarded-Port $server_port;
66
67	proxy_set_header Upgrade $http_upgrade;
68	proxy_set_header Connection "upgrade";
69
70	proxy_read_timeout 3600s;
71	}
72
73	location /storage/v1/ {
74	proxy_pass http://kong_upstream;
75
76	proxy_buffering off;
77	proxy_request_buffering off;
78
79	chunked_transfer_encoding off;
80
81	client_max_body_size 0;
82	}
83
84	location /functions {
85	proxy_pass http://kong_upstream;
86	}
87
88	location /mcp {
89	proxy_pass http://kong_upstream;
90	}
91
92	location /sso {
93	proxy_pass http://kong_upstream;
94	}
95	}