79 lines
2.3 KiB
Nginx Configuration File
79 lines
2.3 KiB
Nginx Configuration File
# Nginx конфигурация для Gitea с зеркалами
|
||
|
||
events {
|
||
worker_connections 1024;
|
||
}
|
||
|
||
http {
|
||
upstream gitea {
|
||
server gitea:3000;
|
||
}
|
||
|
||
# Перенаправление HTTP → HTTPS
|
||
server {
|
||
listen 80;
|
||
server_name git.umbrix.net git-mirror1.umbrix.net git-mirror2.umbrix.net;
|
||
return 301 https://$host$request_uri;
|
||
}
|
||
|
||
# Основной домен
|
||
server {
|
||
listen 443 ssl http2;
|
||
server_name git.umbrix.net;
|
||
|
||
ssl_certificate /etc/nginx/ssl/fullchain.pem;
|
||
ssl_certificate_key /etc/nginx/ssl/privkey.pem;
|
||
ssl_protocols TLSv1.2 TLSv1.3;
|
||
|
||
client_max_body_size 512M;
|
||
|
||
location / {
|
||
proxy_pass http://gitea;
|
||
proxy_set_header Host $host;
|
||
proxy_set_header X-Real-IP $remote_addr;
|
||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||
proxy_set_header X-Forwarded-Proto $scheme;
|
||
}
|
||
}
|
||
|
||
# Зеркало 1
|
||
server {
|
||
listen 443 ssl http2;
|
||
server_name git-mirror1.umbrix.net;
|
||
|
||
ssl_certificate /etc/nginx/ssl/mirror1-fullchain.pem;
|
||
ssl_certificate_key /etc/nginx/ssl/mirror1-privkey.pem;
|
||
ssl_protocols TLSv1.2 TLSv1.3;
|
||
|
||
client_max_body_size 512M;
|
||
|
||
location / {
|
||
proxy_pass http://gitea;
|
||
proxy_set_header Host git.umbrix.net; # Важно! Gitea думает что основной домен
|
||
proxy_set_header X-Real-IP $remote_addr;
|
||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||
proxy_set_header X-Forwarded-Proto $scheme;
|
||
}
|
||
}
|
||
|
||
# Зеркало 2 (аналогично)
|
||
server {
|
||
listen 443 ssl http2;
|
||
server_name git-mirror2.umbrix.net;
|
||
|
||
ssl_certificate /etc/nginx/ssl/mirror2-fullchain.pem;
|
||
ssl_certificate_key /etc/nginx/ssl/mirror2-privkey.pem;
|
||
ssl_protocols TLSv1.2 TLSv1.3;
|
||
|
||
client_max_body_size 512M;
|
||
|
||
location / {
|
||
proxy_pass http://gitea;
|
||
proxy_set_header Host git.umbrix.net;
|
||
proxy_set_header X-Real-IP $remote_addr;
|
||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||
proxy_set_header X-Forwarded-Proto $scheme;
|
||
}
|
||
}
|
||
}
|