docker-compose environment for the entire v.st system
https://v.st/
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
79 lines
2.0 KiB
79 lines
2.0 KiB
limit_req_zone $binary_remote_addr zone=loginlimit:10m rate=1r/s;
|
|
|
|
server {
|
|
server_name ${BOOKWYRM_HOSTNAME} ${BOOKWYRM_HOSTNAME}.${DOMAIN_NAME};
|
|
|
|
sendfile on;
|
|
tcp_nopush on;
|
|
tcp_nodelay on;
|
|
keepalive_timeout 65;
|
|
types_hash_max_size 2048;
|
|
#include /etc/nginx/mime.types;
|
|
#default_type application/octet-stream;
|
|
|
|
gzip on;
|
|
gzip_disable "msie6";
|
|
|
|
proxy_read_timeout 1800s;
|
|
chunked_transfer_encoding on;
|
|
|
|
client_body_buffer_size 10M;
|
|
client_max_body_size 10M;
|
|
|
|
set $skip_cache 0;
|
|
if ($request_method = POST) {
|
|
set $skip_cache 1;
|
|
}
|
|
|
|
if ($http_cookie ~* "session") {
|
|
set $skip_cache 1;
|
|
}
|
|
|
|
|
|
location ~ ^/(login[^-/]|password-reset|resend-link|2fa-check) {
|
|
limit_req zone=loginlimit;
|
|
|
|
proxy_pass http://bookwyrm-web:8000;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
proxy_set_header Host $host;
|
|
proxy_redirect off;
|
|
}
|
|
|
|
location ~ ^/(api|oidc|preferences) {
|
|
proxy_pass http://bookwyrm-web:8000;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
proxy_set_header Host $host;
|
|
proxy_redirect off;
|
|
access_log off;
|
|
}
|
|
|
|
location / {
|
|
proxy_cache mycache;
|
|
add_header X-Cache-Status $upstream_cache_status;
|
|
proxy_ignore_headers Cache-Control Set-Cookie;
|
|
#proxy_ignore_headers Cache-Control;
|
|
|
|
# logged in sessions and other reasons to bypass the cache
|
|
proxy_no_cache $skip_cache;
|
|
proxy_cache_bypass $skip_cache;
|
|
|
|
proxy_cache_valid any 1m;
|
|
|
|
proxy_pass http://bookwyrm-web:8000;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
proxy_set_header Host $host;
|
|
proxy_redirect off;
|
|
}
|
|
|
|
location /images/ {
|
|
alias /bookwyrm/app/images/;
|
|
access_log off;
|
|
}
|
|
|
|
location /static/ {
|
|
alias /bookwyrm/app/static/;
|
|
access_log off;
|
|
}
|
|
|
|
include /etc/nginx/includes/ssl.conf;
|
|
}
|
|
|