remove unused nginx.conf

This commit is contained in:
Johannes Reppin 2023-02-02 14:20:57 +01:00
parent 4fd172cb07
commit 9c7bc86f6e
1 changed files with 0 additions and 56 deletions

View File

@ -1,56 +0,0 @@
# top-level http config for websocket headers
# If Upgrade is defined, Connection = upgrade
# If Upgrade is empty, Connection = close
map $http_upgrade $connection_upgrade {
default upgrade;
'' close;
}
# HTTP server to redirect all 80 traffic to SSL/HTTPS
server {
listen 80;
server_name keycloak.fqdn.com;
# Tell all requests to port 80 to be 302 redirected to HTTPS
return 302 https://$host$request_uri;
}
# HTTPS server to handle JupyterHub
server {
listen 443 ssl;
server_name keycloak.fqdn.com;
ssl_certificate /etc/nginx/ssl/cert.pem;
ssl_certificate_key /etc/nginx/ssl/key.pem;
ssl_protocols TLSv1.2;
ssl_prefer_server_ciphers off;
#ssl_dhparam /etc/ssl/certs/dhparam.pem;
ssl_ciphers ECDH+AESGCM:ECDH+CHACHA20:ECDH+AES256:ECDH+AES128:!aNULL:!SHA1;
ssl_session_timeout 1d;
ssl_session_cache shared:SSL:50m;
ssl_stapling on;
ssl_stapling_verify on;
add_header Strict-Transport-Security max-age=15768000;
# set longer timeouts
proxy_read_timeout 300s;
proxy_connect_timeout 75s;
client_max_body_size 100m;
# Managing literal requests to the JupyterHub front end
location / {
proxy_pass http://keycloak:8080;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
# websocket headers
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $connection_upgrade;
}
}