3pp-mirror/pomerium
1
0
Fork 0
mirror of https://github.com/pomerium/pomerium.git synced 2025-06-26 14:38:09 +02:00
Code Issues Projects Releases Packages Wiki Activity

examples: fix nginx example (#1478)

Browse source
This commit is contained in:
bobby 2020-10-01 16:05:12 -07:00 • committed by GitHub
parent 7029b108e7
commit ec91a98157
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
3 changed files with 27 additions and 26 deletions
Download patch file Download diff file Expand all files Collapse all files

2
examples/nginx/httpbin.conf
View file

@ -11,6 +11,6 @@ server {
location / { location / {
proxy_pass http://httpbin; proxy_pass http://httpbin;
include /etc/nginx/auth.conf; include /etc/nginx/auth.conf;
include /config/nginx/proxy.conf; include /etc/nginx/proxy.conf;
} }
} }

2
examples/nginx/pomerium.conf
View file

@ -7,7 +7,7 @@ server {
location / { location / {
proxy_pass http://pomerium; proxy_pass http://pomerium;
include /config/nginx/proxy.conf; include /etc/nginx/proxy.conf;
} }
} }

49
examples/nginx/proxy.conf
View file

@ -1,32 +1,33 @@
client_body_buffer_size 128k client_body_buffer_size 128k;
#Timeout if the real server is dead #Timeout if the real server is dead
proxy_next_upstream error timeout invalid_header http_500 http_502 http_503 proxy_next_upstream error timeout invalid_header http_500 http_502 http_503;
# Advanced Proxy Config # Advanced Proxy Config
send_timeout 5m send_timeout 5m;
proxy_read_timeout 360 proxy_read_timeout 360;
proxy_send_timeout 360 proxy_send_timeout 360;
proxy_connect_timeout 360 proxy_connect_timeout 360;
# Basic Proxy Config # Basic Proxy Config
proxy_set_header Host $host proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Forwarded-Host $http_host proxy_set_header X-Forwarded-Host $http_host;
proxy_set_header X-Forwarded-Uri $request_uri proxy_set_header X-Forwarded-Uri $request_uri;
proxy_set_header X-Forwarded-Ssl on proxy_set_header X-Forwarded-Ssl on;
proxy_http_version 1.1 proxy_redirect http:// $scheme://;
proxy_set_header Connection "" proxy_http_version 1.1;
proxy_cache_bypass $cookie_session proxy_set_header Connection "";
proxy_no_cache $cookie_session proxy_cache_bypass $cookie_session;
proxy_buffers 64 256k proxy_no_cache $cookie_session;
proxy_buffers 64 256k;
# If behind reverse proxy, forwards the correct IP # If behind reverse proxy, forwards the correct IP
set_real_ip_from 10.0.0.0/8 set_real_ip_from 10.0.0.0/8;
set_real_ip_from 172.0.0.0/8 set_real_ip_from 172.0.0.0/8;
set_real_ip_from 192.168.0.0/16 set_real_ip_from 192.168.0.0/16;
set_real_ip_from fc00::/7 set_real_ip_from fc00::/7;
real_ip_header X-Forwarded-For real_ip_header X-Forwarded-For;
real_ip_recursive on real_ip_recursive on;