Gregory Marco
76cc63e7eb
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
52 lines
1.7 KiB
Plaintext
52 lines
1.7 KiB
Plaintext
server {
|
|
listen 80;
|
|
|
|
#access_log /var/log/nginx/host.access.log main;
|
|
|
|
client_max_body_size 100G;
|
|
|
|
satisfy any;
|
|
|
|
# send all requests to the `/validate` endpoint for authorization
|
|
auth_request /validate;
|
|
|
|
auth_basic "goatbin";
|
|
auth_basic_user_file /etc/nginx/htpasswd;
|
|
|
|
location = /validate {
|
|
# forward the /validate request to Vouch Proxy
|
|
proxy_pass http://@VOUCH_INTERNAL@/validate;
|
|
# be sure to pass the original host header
|
|
proxy_set_header Host $http_host;
|
|
|
|
# Vouch Proxy only acts on the request headers
|
|
proxy_pass_request_body off;
|
|
proxy_set_header Content-Length "";
|
|
|
|
# optionally add X-Vouch-User as returned by Vouch Proxy along with the request
|
|
auth_request_set $auth_resp_x_vouch_user $upstream_http_x_vouch_user;
|
|
|
|
# these return values are used by the @error401 call
|
|
auth_request_set $auth_resp_jwt $upstream_http_x_vouch_jwt;
|
|
auth_request_set $auth_resp_err $upstream_http_x_vouch_err;
|
|
auth_request_set $auth_resp_failcount $upstream_http_x_vouch_failcount;
|
|
}
|
|
|
|
# if validate returns `401 not authorized` then forward the request to the error401block
|
|
error_page 401 = @error401;
|
|
|
|
location @error401 {
|
|
# redirect to Vouch Proxy for login
|
|
return 302 https://@VOUCH_EXTERNAL@/login?url=https://$http_host$request_uri&vouch-failcount=$auth_resp_failcount&X-Vouch-Token=$auth_resp_jwt&error=$auth_resp_err;
|
|
}
|
|
|
|
location / {
|
|
autoindex on;
|
|
root /usr/share/nginx/html;
|
|
index index.html index.htm;
|
|
dav_access user:rw group:rw all:r;
|
|
dav_methods PUT DELETE MKCOL COPY MOVE;
|
|
dav_ext_methods PROPFIND OPTIONS LOCK UNLOCK;
|
|
}
|
|
}
|