server { listen {{ http_port }}; client_max_body_size {{ nginx_client_max_body_size | default('100M') }}; {% if egi_image is defined and egi_image %} # No servername into the EGI images {% elif hostname is defined %} servername _; {% else %} server_name {{ item.servername }} {% if smartgears_nginx_serveraliases is defined %}{% for vh in smartgears_nginx_serveraliases %} {{ vh }}{% endfor %}{% endif %}; {% endif %} {% if letsencrypt_acme_install %} include /etc/nginx/snippets/letsencrypt-proxy.conf; {% endif %} access_log /var/log/nginx/{{ item.servername }}_access.log; error_log /var/log/nginx/{{ item.servername }}_error.log; root /usr/share/nginx/html/; {% if haproxy_ips is defined %} # We are behind haproxy {% for ip in haproxy_ips %} set_real_ip_from {{ ip }}; {% endfor %} real_ip_header X-Forwarded-For; {% endif %} # redirect server error pages to the static page /50x.html # error_page 500 502 503 504 /50x.html; location = /50x.html { root /usr/share/nginx/html; } location = /favicon.ico { log_not_found off; access_log off; } location = /robots.txt { allow all; log_not_found off; access_log off; } # don't send the nginx version number in error pages and Server header server_tokens off; # Proxy stuff include /etc/nginx/snippets/nginx-proxy-params.conf; {% if nginx_websockets_support %} proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection $connection_upgrade; {% endif %} {% if r_connector_install is defined and r_connector_install %} location /auth-sign-in { rewrite ^/auth-sign-in http://{{ item.servername }}/r-connector/gcube/service/disconnect; } {% endif %} location /whn-manager { proxy_pass http://127.0.0.1:{{ item.http_port }}/whn-manager; } {% if not http_redirect_to_https %} {% for instance in tomcat_m_instances %} {% for context in instance.app_contexts %} {% if context != "whn-manager" %} {% if context != '' %} location /{{ context }} { {% if smartgears_nginx_cors_enabled %} include /etc/nginx/snippets/nginx-cors.conf; {% if nginx_cors_extended_rules %} proxy_pass http://127.0.0.1:{{ item.http_port }}; {% else %} proxy_pass http://127.0.0.1:{{ item.http_port }}/{{ context }}; {% endif %} {% else %} proxy_pass http://127.0.0.1:{{ item.http_port }}/{{ context }}; {% endif %} } {% endif %} {% endif %} {% endfor %} {% endfor %} {% if smart_executor_install is defined and smart_executor_install %} location {{ smart_executor_context }} { proxy_pass http://127.0.0.1:{{ smartgears_http_port }}{{ smart_executor_context }}; } {% endif %} {% if data_transfer_service_install %} location /data-transfer-service { proxy_pass http://127.0.0.1:{{ smartgears_http_port }}/data-transfer-service; } {% endif %} {% if rstudio_install_server is defined and rstudio_install_server %} location / { {% if smartgears_nginx_cors_enabled %} include /etc/nginx/snippets/nginx-cors.conf; {% endif %} proxy_pass http://127.0.0.1:8787/; } {% endif %} {% if smartgears_nginx_expose_tomcat_logs %} location /gcube-logs/ { alias {{ smartgears_instance_path }}/logs/; autoindex on; autoindex_localtime on; } {% endif %} {% else %} location / { return 301 https://{{ item.servername }}$request_uri; } {% endif %} } {% if letsencrypt_acme_install %} server { listen {{ https_port }} ssl; client_max_body_size {{ nginx_client_max_body_size | default('100M') }}; {% if egi_image is defined and egi_image %} # No servername into the EGI images {% else %} server_name {{ item.servername }} {% if smartgears_nginx_serveraliases is defined %}{% for vh in smartgears_nginx_serveraliases %} {{ vh }}{% endfor %}{% endif %}; {% endif %} access_log /var/log/nginx/{{ item.servername }}_access_ssl.log; error_log /var/log/nginx/{{ item.servername }}_error_ssl.log; # This is the default for nginx on Ubuntu 14.04 root /usr/share/nginx/html/; {% if haproxy_ips is defined %} # We are behind haproxy {% for ip in haproxy_ips %} set_real_ip_from {{ ip }}; {% endfor %} real_ip_header X-Forwarded-For; {% endif %} include /etc/nginx/snippets/nginx-server-ssl.conf; # redirect server error pages to the static page /50x.html # error_page 500 502 503 504 /50x.html; location = /50x.html { root /usr/share/nginx/html; } location = /favicon.ico { log_not_found off; access_log off; } location = /robots.txt { allow all; log_not_found off; access_log off; } # don't send the nginx version number in error pages and Server header server_tokens off; # Proxy stuff include /etc/nginx/snippets/nginx-proxy-params.conf; {% if nginx_websockets_support %} proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection $connection_upgrade; {% endif %} {% if r_connector_install is defined and r_connector_install %} location /auth-sign-in { rewrite ^/auth-sign-in http://{{ item.servername }}/r-connector/gcube/service/disconnect; } {% endif %} location /whn-manager { proxy_pass http://127.0.0.1:{{ item.http_port }}/whn-manager; } {% for instance in tomcat_m_instances %} {% for context in instance.app_contexts %} {% if context != "whn-manager" %} {% if context != '' %} location /{{ context }} { {% if smartgears_nginx_cors_enabled %} include /etc/nginx/snippets/nginx-cors.conf; {% if nginx_cors_extended_rules %} proxy_pass http://127.0.0.1:{{ item.http_port }}; {% else %} proxy_pass http://127.0.0.1:{{ item.http_port }}/{{ context }}; {% endif %} {% else %} proxy_pass http://127.0.0.1:{{ item.http_port }}/{{ context }}; {% endif %} } {% endif %} {% endif %} {% endfor %} {% endfor %} {% if smart_executor_install is defined and smart_executor_install %} location {{ smart_executor_context }} { proxy_pass http://127.0.0.1:{{ smartgears_http_port }}{{ smart_executor_context }}; } {% endif %} {% if data_transfer_service_install %} location /data-transfer-service { proxy_pass http://127.0.0.1:{{ smartgears_http_port }}/data-transfer-service; } {% endif %} {% if rstudio_install_server is defined and rstudio_install_server %} location / { {% if smartgears_nginx_cors_enabled %} include /etc/nginx/snippets/nginx-cors.conf; {% endif %} proxy_pass http://127.0.0.1:8787/; } {% endif %} {% if smartgears_nginx_expose_tomcat_logs %} location /gcube-logs/ { alias {{ smartgears_instance_path }}/logs/; autoindex on; autoindex_localtime on; } {% endif %} } {% endif %}