st2-dockerfiles/st2web/files/st2.conf-https.patch at 754423c19cc09d6be5aba4b824fb0c8c45056d0c · StackStorm/st2-dockerfiles · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
--- st2.conf	2023-09-18 15:03:31.000000000 +0100
+++ st2.https.conf	2023-09-18 15:12:35.000000000 +0100
@@ -7,7 +7,7 @@
 # see https://docs.stackstorm.com/install.html for details

 server {
-  listen *:80 default_server;
+  listen *:${ST2_PORT_HTTP} default_server;

   add_header Front-End-Https on;
   add_header X-Content-Type-Options nosniff;
@@ -20,12 +20,12 @@
   }
   index  index.html;

-  access_log /var/log/nginx/st2webui.access.log combined;
-  error_log /var/log/nginx/st2webui.error.log;
+  access_log /proc/self/fd/1 combined;
+  error_log stderr;
 }

 server {
-  listen       *:443 ssl;
+  listen       *:${ST2_PORT_HTTPS} ssl;
   server_tokens off;

   if ($request_method !~ ^(GET|HEAD|POST|PUT|DELETE|OPTIONS)$ ) {
@@ -42,8 +42,8 @@

   index  index.html;

-  access_log            /var/log/nginx/ssl-st2webui.access.log combined;
-  error_log             /var/log/nginx/ssl-st2webui.error.log;
+  access_log            /proc/self/fd/1 combined;
+  error_log             stderr;

   add_header              Front-End-Https on;
   add_header              X-Content-Type-Options nosniff;
@@ -61,10 +61,11 @@

     rewrite ^/api/(.*)  /$1 break;

-    proxy_pass            http://127.0.0.1:9101/;
+    proxy_pass            ${ST2_API_URL};
     proxy_read_timeout    90;
     proxy_connect_timeout 90;
     proxy_redirect        off;
+    proxy_ssl_trusted_certificate ${ST2_CA_CERT};

     proxy_set_header      Host $host;
     proxy_set_header      X-Real-IP $remote_addr;
@@ -99,12 +100,13 @@

     rewrite ^/stream/(.*)  /$1 break;

-    proxy_pass  http://127.0.0.1:9102/;
+    proxy_pass  ${ST2_STREAM_URL};
     proxy_set_header Host $host;
     proxy_set_header X-Real-IP $remote_addr;
     proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
     proxy_read_timeout 200;
     proxy_connect_timeout 200;
+    proxy_ssl_trusted_certificate ${ST2_CA_CERT};

     sendfile on;
     tcp_nopush on;
@@ -138,10 +140,11 @@

     rewrite ^/auth/(.*)  /$1 break;

-    proxy_pass            http://127.0.0.1:9100/;
+    proxy_pass            ${ST2_AUTH_URL};
     proxy_read_timeout    90;
     proxy_connect_timeout 90;
     proxy_redirect        off;
+    proxy_ssl_trusted_certificate ${ST2_CA_CERT};

     proxy_set_header      Host $host;
     proxy_set_header      X-Real-IP $remote_addr;