3pp-mirror/pomerium
1
0
Fork 0
mirror of https://github.com/pomerium/pomerium.git synced 2025-04-29 18:36:30 +02:00
Code Issues Projects Releases Packages Wiki Activity

examples: fix nginx example (#1478)

Browse source
This commit is contained in:
bobby 2020-10-01 16:05:12 -07:00 • committed by GitHub
parent 7029b108e7
commit ec91a98157
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
3 changed files with 27 additions and 26 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
examples/nginx/httpbin.conf
View file

@ -11,6 +11,6 @@ server {
location / {
proxy_pass http://httpbin;
include /etc/nginx/auth.conf;
include /config/nginx/proxy.conf;
include /etc/nginx/proxy.conf;
}
}

2
examples/nginx/pomerium.conf
View file

@ -7,7 +7,7 @@ server {
location / {
proxy_pass http://pomerium;
include /config/nginx/proxy.conf;
include /etc/nginx/proxy.conf;
}
}

49
examples/nginx/proxy.conf
View file

@ -1,32 +1,33 @@
client_body_buffer_size 128k
client_body_buffer_size 128k;
#Timeout if the real server is dead
proxy_next_upstream error timeout invalid_header http_500 http_502 http_503
proxy_next_upstream error timeout invalid_header http_500 http_502 http_503;
# Advanced Proxy Config
send_timeout 5m
proxy_read_timeout 360
proxy_send_timeout 360
proxy_connect_timeout 360
send_timeout 5m;
proxy_read_timeout 360;
proxy_send_timeout 360;
proxy_connect_timeout 360;
# Basic Proxy Config
proxy_set_header Host $host
proxy_set_header X-Real-IP $remote_addr
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for
proxy_set_header X-Forwarded-Proto $scheme
proxy_set_header X-Forwarded-Host $http_host
proxy_set_header X-Forwarded-Uri $request_uri
proxy_set_header X-Forwarded-Ssl on
proxy_http_version 1.1
proxy_set_header Connection ""
proxy_cache_bypass $cookie_session
proxy_no_cache $cookie_session
proxy_buffers 64 256k
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Forwarded-Host $http_host;
proxy_set_header X-Forwarded-Uri $request_uri;
proxy_set_header X-Forwarded-Ssl on;
proxy_redirect http:// $scheme://;
proxy_http_version 1.1;
proxy_set_header Connection "";
proxy_cache_bypass $cookie_session;
proxy_no_cache $cookie_session;
proxy_buffers 64 256k;
# If behind reverse proxy, forwards the correct IP
set_real_ip_from 10.0.0.0/8
set_real_ip_from 172.0.0.0/8
set_real_ip_from 192.168.0.0/16
set_real_ip_from fc00::/7
real_ip_header X-Forwarded-For
real_ip_recursive on
set_real_ip_from 10.0.0.0/8;
set_real_ip_from 172.0.0.0/8;
set_real_ip_from 192.168.0.0/16;
set_real_ip_from fc00::/7;
real_ip_header X-Forwarded-For;
real_ip_recursive on;