r3-config/api.conf

38 lines
1.5 KiB
Plaintext

server {
listen 80;
listen 443 ssl;
# Replace here with proper server FQDN
server_name api.gamewheel.local;
# Replace here with proper logs paths
access_log /var/log/nginx/api.gamewheel.local.access.log;
error_log /var/log/nginx/api.gamewheel.local.error.log;
# Replace here with proper certificates paths
ssl_certificate /etc/ssl/certs/ssl-cert-snakeoil.pem;
ssl_certificate_key /etc/ssl/private/ssl-cert-snakeoil.key;
ssl_session_timeout 5m;
ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers "HIGH:!aNULL:!MD5 or HIGH:!aNULL:!MD5:!3DES";
ssl_prefer_server_ciphers on;
# Replace here with proper allowed origins
# add_header Access-Control-Allow-Origin "http://app.gamewheel.local";
# add_header Access-Control-Allow-Credentials true;
add_header Access-Control-Allow-Methods 'HEAD, GET, POST, PUT, DELETE, OPTIONS';
add_header Access-Control-Allow-Headers 'origin, x-requested-with, content-type, accept, authorization, Access-Control-Request-Headers, Access-Control-Request-Method, x-gw-api-rt-key, x-gw-api-rt-token';
location / {
proxy_pass_request_headers on;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-NginX-Proxy true;
# Replace here with proper host/port
proxy_pass http://127.0.0.1:3104;
proxy_ssl_session_reuse off;
proxy_set_header Host $http_host;
proxy_redirect off;
}
}