archive/nntpchan
Archived
1
0
Fork 0
Code

add example config for nginx+varnish

Browse Source
This commit is contained in:
Jeff Becker 2016-11-07 08:39:35 -05:00
parent 3fad9794da
commit 84092c979f
No known key found for this signature in database
GPG Key ID: AB950234D6EA286B
1 changed files with 86 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

86
contrib/configs/nginx/nntpchan.with-varnish Normal file
View File

@ -0,0 +1,86 @@
#
# server config with nginx in front of varnish for srndv2 as backend daemon
#
server {
listen 80;
listen [::]:80;
# srndv2 backend address
set $srnd "127.0.0.1:18000";
# varnish backend address
set $varnish "127.0.0.1:8000";
# nntpchan repo path
set $nntpchan "/opt/nntpchan"
set $allowed "yes";
# example blacklist rules, uncomment as needed
# allow only torbrowser
#if ( $http_user_agent != "Mozilla/5.0 (Windows NT 6.1; rv:45.0) Gecko/20100101 Firefox/45.0" ) {
# set $allowed "no";
#}
if ($allowed != "yes") {
return 403;
}
location /live {
# livechan websocket is passed into backend directly bypassing varnish
client_max_body_size 10M;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_pass http://$srnd/live;
}
location / {
# have varnish by default
proxy_pass http://$varnish/;
}
location ~ /post/(.+) {
# pass post right into backend bypassing varnish
client_max_body_size 80M;
proxy_pass http://$srnd/post/$1;
}
location /static/ {
# serve static files
alias $nntpchan/contrib/static/;
}
location ~ /img/(.+)\.(jpeg|jpg|png|webp|gif|mp3|ogg|opus|mp4|flac|txt|zip|rar|mp2|flv)$ {
# serve files
alias $nntpchan/webroot/img/$1.$2;
}
location ~ /img/(.+)\.(.+)$ {
# changes mime type for unknown files
types { }
default_type text/plain;
alias $nntpchan/webroot/img/$1.$2;
}
location ~ /thm/(.+)\.jpg$ {
# http subdomain rewrite for sfw
if ( $http_host ~ fbi ) {
rewrite ^/(.+).jpg /static/placeholder.jpg break;
}
if ( $http_host ~ sfw ) {
rewrite ^/(.+).jpg /static/placeholder.jpg break;
}
alias $nntpchan/webroot/thm/;
}
}