From 39711cf6c2ec5a3b4480dcb4800cc3802bda5bf2 Mon Sep 17 00:00:00 2001 From: Lukasz Kasprzak Date: Fri, 20 Mar 2026 19:16:32 +0100 Subject: feat: first fully successful run e2e on straper --- .../nginx/etc-nginx/sites-available/etherpad | 63 ++++++++++++++++++++++ 1 file changed, 63 insertions(+) create mode 100644 straper/db/public/nginx/etc-nginx/sites-available/etherpad (limited to 'straper/db/public/nginx/etc-nginx/sites-available/etherpad') diff --git a/straper/db/public/nginx/etc-nginx/sites-available/etherpad b/straper/db/public/nginx/etc-nginx/sites-available/etherpad new file mode 100644 index 0000000..e7adb82 --- /dev/null +++ b/straper/db/public/nginx/etc-nginx/sites-available/etherpad @@ -0,0 +1,63 @@ +server { + listen 443 ssl; + http2 on; + server_name ether.labunix.xyz; + + ssl_certificate /etc/letsencrypt/live/labunix.xyz/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/labunix.xyz/privkey.pem; + + limit_req zone=etherpad_req burst=60 nodelay; + limit_conn etherpad_conn 20; + client_max_body_size 1m; +# Admin only (protect both /admin and /admin/) + location = /admin { + auth_basic "Etherpad Admin"; + auth_basic_user_file /etc/nginx/htpasswd-etherpad-admin; + + proxy_pass http://127.0.0.1:9001; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto https; + + proxy_http_version 1.1; + proxy_set_header Upgrade $http_upgrade; + proxy_set_header Connection "upgrade"; + proxy_read_timeout 120s; + proxy_send_timeout 120s; + proxy_buffering off; + } + + location ^~ /admin/ { + auth_basic "Etherpad Admin"; + auth_basic_user_file /etc/nginx/htpasswd-etherpad-admin; + + proxy_pass http://127.0.0.1:9001; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto https; + + proxy_http_version 1.1; + proxy_set_header Upgrade $http_upgrade; + proxy_set_header Connection "upgrade"; + proxy_read_timeout 120s; + proxy_send_timeout 120s; + proxy_buffering off; + } + location / { + proxy_pass http://127.0.0.1:9001; + + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto https; + + proxy_http_version 1.1; + proxy_set_header Upgrade $http_upgrade; + proxy_set_header Connection "upgrade"; + proxy_read_timeout 120s; + proxy_send_timeout 120s; + proxy_buffering off; + } +} -- cgit v1.3