mirror of
https://github.com/overleaf/overleaf.git
synced 2024-09-16 02:52:31 -04:00
a0e8958a9c
[server-pro] block access to metrics and debug endpoints GitOrigin-RevId: 6f0f09de8e13b4e478eb16eae707acf3b1cd8cbd
72 lines
2 KiB
Text
72 lines
2 KiB
Text
server {
|
|
listen 80;
|
|
server_name _; # Catch all, see http://nginx.org/en/docs/http/server_names.html
|
|
|
|
root /overleaf/services/web/public/;
|
|
|
|
# block external access to prometheus /metrics
|
|
location /metrics {
|
|
internal;
|
|
}
|
|
|
|
location / {
|
|
proxy_pass http://127.0.0.1:3000;
|
|
proxy_http_version 1.1;
|
|
proxy_set_header Upgrade $http_upgrade;
|
|
proxy_set_header Connection "upgrade";
|
|
proxy_set_header Host $host;
|
|
proxy_set_header X-Forwarded-Host $host;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
proxy_read_timeout 10m;
|
|
proxy_send_timeout 10m;
|
|
}
|
|
|
|
location /socket.io {
|
|
proxy_pass http://127.0.0.1:3026;
|
|
proxy_http_version 1.1;
|
|
proxy_set_header Upgrade $http_upgrade;
|
|
proxy_set_header Connection "upgrade";
|
|
proxy_set_header Host $host;
|
|
proxy_set_header X-Forwarded-Host $host;
|
|
proxy_set_header X-Forwarded-Proto $scheme;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
proxy_read_timeout 10m;
|
|
proxy_send_timeout 10m;
|
|
}
|
|
|
|
location /stylesheets {
|
|
expires 1y;
|
|
}
|
|
|
|
location /minjs {
|
|
expires 1y;
|
|
}
|
|
|
|
location /img {
|
|
expires 1y;
|
|
}
|
|
|
|
# handle output files for specific users
|
|
location ~ ^/project/([0-9a-f]+)/user/([0-9a-f]+)/build/([0-9a-f-]+)/output/output\.([a-z]+)$ {
|
|
proxy_pass http://127.0.0.1:8080; # clsi-nginx.conf
|
|
proxy_http_version 1.1;
|
|
}
|
|
# handle output files for anonymous users
|
|
location ~ ^/project/([0-9a-f]+)/build/([0-9a-f-]+)/output/output\.([a-z]+)$ {
|
|
proxy_pass http://127.0.0.1:8080; # clsi-nginx.conf
|
|
proxy_http_version 1.1;
|
|
}
|
|
# PDF range for specific users
|
|
location ~ ^/project/([0-9a-f]+)/user/([0-9a-f]+)/content/([0-9a-f-]+/[0-9a-f]+)$ {
|
|
proxy_pass http://127.0.0.1:8080; # clsi-nginx.conf
|
|
proxy_http_version 1.1;
|
|
}
|
|
# PDF range for anonymous users
|
|
location ~ ^/project/([0-9a-f]+)/content/([0-9a-f-]+/[0-9a-f]+)$ {
|
|
proxy_pass http://127.0.0.1:8080; # clsi-nginx.conf
|
|
proxy_http_version 1.1;
|
|
}
|
|
|
|
# Load any extra configuration for this vhost
|
|
include /etc/nginx/vhost-extras/sharelatex/*.conf;
|
|
}
|