Работа над контейнером docker
Изменения в конфигах nginx Добавил привязку сервисов к 1 адресу
This commit is contained in:
@@ -8,7 +8,7 @@ server {
|
||||
listen 80;
|
||||
server_name _;
|
||||
|
||||
root /var/www/public;
|
||||
root /var/www/html/public;
|
||||
index index.php index.html;
|
||||
|
||||
# ========== ОСНОВНЫЕ НАСТРОЙКИ БЕЗОПАСНОСТИ ==========
|
||||
@@ -35,8 +35,8 @@ server {
|
||||
|
||||
location ~ \.php$ {
|
||||
# Дефолтные лимиты для всех PHP запросов
|
||||
limit_req zone=req_limit_per_ip burst=30 delay=15;
|
||||
limit_conn conn_limit_per_ip 30;
|
||||
limit_req zone=req_limit_per_ip burst=100 delay=15;
|
||||
limit_conn conn_limit_per_ip 60;
|
||||
|
||||
try_files $uri =404;
|
||||
|
||||
@@ -60,6 +60,43 @@ server {
|
||||
fastcgi_param PATH_INFO $fastcgi_path_info;
|
||||
}
|
||||
|
||||
# ========== REVERB (WEBSOCKET) ==========
|
||||
# Клиент бьёт в /app/{key} (WS), серверный broadcast — в /apps/{id}/... (REST).
|
||||
# Оба идут на тот же домен/порт, что и само приложение.
|
||||
|
||||
location /app/ {
|
||||
proxy_pass http://reverb:8080;
|
||||
proxy_http_version 1.1;
|
||||
proxy_set_header Host $http_host;
|
||||
proxy_set_header Scheme $scheme;
|
||||
proxy_set_header SERVER_PORT $server_port;
|
||||
proxy_set_header REMOTE_ADDR $remote_addr;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
proxy_set_header Upgrade $http_upgrade;
|
||||
proxy_set_header Connection $connection_upgrade;
|
||||
proxy_read_timeout 60s;
|
||||
}
|
||||
|
||||
location /apps/ {
|
||||
proxy_pass http://reverb:8080;
|
||||
proxy_http_version 1.1;
|
||||
proxy_set_header Host $http_host;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
}
|
||||
|
||||
# ========== Sentry ==========
|
||||
location /sentry/ {
|
||||
proxy_pass http://10.32.0.213:50/;
|
||||
proxy_set_header Host $host;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
}
|
||||
|
||||
# ========== ОСНОВНОЙ LOCATION ==========
|
||||
|
||||
location / {
|
||||
|
||||
Reference in New Issue
Block a user