builds

2019-07-09 12:40:18 +10:00
parent e224f57ea0
commit 1d6ab90fad
21 changed files with 192 additions and 25 deletions
@@ -0,0 +1,31 @@
+upstream mnml {
+    server 127.0.0.1:40000;
+}
+
+map $http_upgrade $connection_upgrade {
+    default upgrade;
+    '' close;
+}
+
+# DEV
+server {
+    root /var/lib/mnml/public/;
+    index index.html;
+
+    location / {
+        try_files $uri $uri/ =404;
+    }
+
+    location /api/ws {
+        proxy_pass http://mnml;
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection $connection_upgrade;
+        proxy_read_timeout 600s;
+    }
+
+    location /api/ {
+        proxy_pass http://mnml;
+        proxy_read_timeout 600s;
+    }
+}
@@ -0,0 +1,59 @@
+upstream mnml {
+    server 127.0.0.1:40000;
+}
+
+map $http_upgrade $connection_upgrade {
+    default upgrade;
+    '' close;
+}
+
+# PRODUCTION
+server {
+    root /var/lib/mnml/public/;
+    index index.html;
+
+    server_name mnml.gg; # managed by Certbot
+
+    if ($host = minimal.gg) {
+        return 301 https://mnml.gg$request_uri;
+    } # managed by Certbot
+
+    if ($host = cryps.gg) {
+        return 301 https://mnml.gg$request_uri;
+    } # managed by Certbot
+
+    location / {
+        try_files $uri $uri/ =404;
+    }
+
+    listen [::]:443 ssl ipv6only=on; # managed by Certbot
+    listen 443 ssl; # managed by Certbot
+    ssl_certificate /etc/letsencrypt/live/mnml.gg/fullchain.pem; # managed by Certbot
+    ssl_certificate_key /etc/letsencrypt/live/mnml.gg/privkey.pem; # managed by Certbot
+    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
+    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
+
+    location /ws {
+        proxy_pass http://mnml;
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection $connection_upgrade;
+        proxy_read_timeout 600s;
+    }
+}
+
+# http -> https
+server {
+    server_name mnml.gg;
+    return 301 https://$host$request_uri;
+}
+
+server {
+    server_name minimal.gg;
+    return 301 https://mnml.gg$request_uri;
+}
+
+server {
+    server_name cryps.gg;
+    return 301 https://mnml.gg$request_uri;
+}
@@ -0,0 +1,49 @@
+upstream mnml_dev {
+    server 0.0.0.0:41337;
+}
+
+map $http_upgrade $connection_upgrade {
+    default upgrade;
+    '' close;
+}
+
+# DEV
+server {
+    root /var/lib/mnml/public/;
+    index index.html;
+
+    server_name dev.mnml.gg; # managed by Certbot
+
+    location / {
+        try_files $uri $uri/ =404;
+    }
+
+    listen [::]:443;
+    ssl on;
+    listen 443 ssl; # managed by Certbot
+    ssl_certificate /etc/letsencrypt/live/dev.mnml.gg/fullchain.pem; # managed by Certbot
+    ssl_certificate_key /etc/letsencrypt/live/dev.mnml.gg/privkey.pem; # managed by Certbot
+    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
+    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
+
+    location /api/ws {
+        proxy_pass http://mnml_dev;
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection $connection_upgrade;
+        proxy_read_timeout 600s;
+    }
+
+    location /api/ {
+        proxy_pass http://mnml_dev;
+        proxy_read_timeout 600s;
+    }
+
+}
+
+# http -> https
+server {
+    server_name dev.mnml.gg;
+    return 301 https://$host$request_uri;
+}
+