From d832b811606821735bf4f960f3ef118e3d529fa4 Mon Sep 17 00:00:00 2001 From: francesco Date: Thu, 19 Sep 2024 08:47:48 +0200 Subject: [PATCH] fix: remove nginx folder from Docker-compose --- Docker-compose/nginx/403.html | 30 ------ Docker-compose/nginx/404.html | 38 ------- Docker-compose/nginx/50x.html | 19 ---- Docker-compose/nginx/certs/proxy_local.key | 40 ------- Docker-compose/nginx/certs/proxy_local.pem | 25 ----- Docker-compose/nginx/nginx.conf_uwsgi_pass | 116 --------------------- 6 files changed, 268 deletions(-) delete mode 100644 Docker-compose/nginx/403.html delete mode 100644 Docker-compose/nginx/404.html delete mode 100644 Docker-compose/nginx/50x.html delete mode 100644 Docker-compose/nginx/certs/proxy_local.key delete mode 100644 Docker-compose/nginx/certs/proxy_local.pem delete mode 100644 Docker-compose/nginx/nginx.conf_uwsgi_pass diff --git a/Docker-compose/nginx/403.html b/Docker-compose/nginx/403.html deleted file mode 100644 index fb9d5042..00000000 --- a/Docker-compose/nginx/403.html +++ /dev/null @@ -1,30 +0,0 @@ - - - -Forbidden - - - -

403

-

Forbidden

-

You don't have permission to access.

-
-

Faithfully yours, nginx.

- - diff --git a/Docker-compose/nginx/404.html b/Docker-compose/nginx/404.html deleted file mode 100644 index d1497709..00000000 --- a/Docker-compose/nginx/404.html +++ /dev/null @@ -1,38 +0,0 @@ - - - -Page not found - - - -

404

-

Page not found

-

Sorry, the page you are looking doesn't exist,
-or other error occured.

-

If you are the system administrator of this resource then you should check -the error log for details.

-

Pagina non trovata

-

La pagina che stava cercando non esiste su questo server,
-oppure e' occorso un'altro tipo di errore.

-

Se sei l'amministratore di questa risorsa magari puoi -trovare dettagli interessanti nei log.

-
-

Faithfully yours, nginx.

- - diff --git a/Docker-compose/nginx/50x.html b/Docker-compose/nginx/50x.html deleted file mode 100644 index a57c2f93..00000000 --- a/Docker-compose/nginx/50x.html +++ /dev/null @@ -1,19 +0,0 @@ - - - -Error - - - -

An error occurred.

-

Sorry, the page you are looking for is currently unavailable.
-Please try again later.

-

If you are the system administrator of this resource then you should check -the error log for details.

-

Faithfully yours, nginx.

- - diff --git a/Docker-compose/nginx/certs/proxy_local.key b/Docker-compose/nginx/certs/proxy_local.key deleted file mode 100644 index 23d4877e..00000000 --- a/Docker-compose/nginx/certs/proxy_local.key +++ /dev/null @@ -1,40 +0,0 @@ ------BEGIN PRIVATE KEY----- -MIIG/gIBADANBgkqhkiG9w0BAQEFAASCBugwggbkAgEAAoIBgQDfp/056ZMdAd1Q -BDNhxsLUK3Vn+z7PdZ5HTUtF7mOupXC5mN39IKNGHhT53ACHI5yAgm4KJEqNk9yR -OrFP7Hr9unZfEM4qrdHy8N0cAAZUPBfdS+uogcQKgX6b5u4pVircQVOneVpLO24C -zMIqF/0GXKjV+LE2jJwJssoWUjRW2Z1S4VoRf40n9bSdDSP7SmMvA1VTZE2JTthU -fEe2e+yKVreNRoQp4Xls8kbBm1SPuSSd9i/cehFD08e7lsYxfZXKQJ2/hPBATmsU -0GvA5KgkmrsD1Ihnq0tD8y9Ej6aDlpLtSYoxKNFbB/geUbfBY8sXruSxi+Hvu+hh -qRpWuqZUmiiJISeBhgJVUScraEn2r5nyFBGUbQADifZ+UR/QNUN7Q54/Yb2mgCGo -00CXNVs+HHqhjvmAtW2TCuBEblmZs45XwL49Iggf5xanLvnE+8flQvy8kUMq9SaC -y2yCBkwC3TbUbGC5LurnZnwl352uDTzTC2GYHTnD3JZsZuONqiUCAwEAAQKCAYAp -OL4cYWeC7igLKmsJ92dLUaM3AgCmnggJHj7kabanpshq/LjVgaF2N+8nyhuyzKZ4 -rRF4/w1aoMkDX2z0zSIyB57vkJpfFWBfxXMLSRnhhp3jZK3PhfNK+GkMdPiqV75Y -kBXKBTzWJuL00yZqObeh54wau9Z1tl7ADtreWFJbO4qajvxZw0eR+OBMHfLmyuQS -8ytTzmXYC9clYy6YfKixKqB0Am4zheIqaVEPOADS6I3OK2TQ3xK1jKAAfB6VWo7b -3qHdszrj+aHJyUwiI+1DHS8XYmvShUN8cEW1faHW9oqAMvWNW3EAyB6T2AvB6O2I -ZG7uRvyCMKKPgMUpvjMCH4ufnTYOVwHd5MP0Kj8yx1D+trbt4o3WRSBvMIsDxhux -oEMo90jyTuxHpmnQwwfggk0maWGSQyaxvynk9c6ZAGZtDOgzGLKukQJpWbmTkr/s -DSdunfViT8doWjCJsleKjUrX1Sgzpy3Am9gjkcIU2WmBye4Bohr9yp09xKryrZUC -gcEA8AnpCQaNVeM+L4RMq1Fz2y1cfcEB23RfHqNaWsjCTaFk2zEswZATTbyDAYxZ -7IDjlqW270YCF5yQ310AP8zCyGZcULa3FRndsAUhEfnOKfZHytxB8F0hPcy9+2Wb -y/8l1hL/ri5Yqtm9B7aUZTYGwmWhq3gtNrIoRj1GFanCF2KC4J7XM+5EkCBShBbG -9PRnsqNsU6v0UYOf1wM9eiB7u+gwJiQXYb/gSOQJiHEI60NBprq/7HOJvRNcRISa -I13zAoHBAO6HNKGzVlJ9iMMRSgN+1BZXN6RqOZ2Mm96y/pBlOS9xc1vXAjCb2amo -+mapGjlqTVrNjcBzuJxaVFkhw4XvSvzgyXY4bcM7HhPk4HXqxw7xkvaVmexNKyib -6QyTAYpocPFMPU3Q83pDuTOhnIzxehdAd1PW1eBTPGEsY3qVor7uUKHk/HZ6yf+6 -ia1L5EiCOcx9HSmlJ4IJaCYvSz4CD1S8lCAoHRJa5hXnH6dU5s95PxLk8zvMr8DP -/L/NliElhwKBwQDmStvEyQB4UlirBeb4xmC8+zwteirp/S/1GQvq5YllKV613Ovv -mOasQhv+NEVh3hZ7xelIjoYbWR607Wj7zNtjoLEYzvO/zt0drw4XTO862wnt2nt4 -vCDURcZPlyBuCxCl3fxnhBeVcukkqUqd/8NkZlVBST83pp11JfxDdGa+QMkH79zP -+dzV2ezQxXmEMaf7f0bCz8rLGdkUVAt7TAbqNM1dCmtUYN4xkHaE7M19yT0HVUwk -8oRHXne7VOz82XkCgcEA3n/Ws6ODOU2KXlPpU5tiITjYWZERD4rS9wjG91DE6CGO -9zN4AnnOrzlF4q+JG9eyMqqduND5ezeziLU7GtudeogAxTtcAApMQ0hzrOsFJkZn -zYa9XzSYtrfAy47xl/dWq29vm//2rq0vvB7b1omGVtw2s0kqlqduIkLyxK2Cc1IA -exQMAEUH2nlZ5gJt/skjO0HWCzvYv68grMXfDQeE34lNLzXb8HxENlgzKbbD2vMB -yBEzZyvHIjehUBVpHqBPAoHAKOFB7fE1xx7qMnUepPE9p3r2YpK9LDcYpH6tsTY2 -hq4QAWbabRINdAAtIc+sMsus8kM9EEBReCmeKnbY9nA5e3rEJX7xfoxMkPihUmvZ -aCMHPz7Kzya8licYLmoGdrip5kbZanCIcnfgkUbYhyoiVswJDldlfo/bfoK/g0SA -1rRs8/ALwgBmHzQJWK+lzLWWEEr0JGoufvv5/h7YDqUkY2GTpcznbtWbf+EQzydw -twoBbKbPgrk81FRvWlbED4KS ------END PRIVATE KEY----- diff --git a/Docker-compose/nginx/certs/proxy_local.pem b/Docker-compose/nginx/certs/proxy_local.pem deleted file mode 100644 index c20dd44c..00000000 --- a/Docker-compose/nginx/certs/proxy_local.pem +++ /dev/null @@ -1,25 +0,0 @@ ------BEGIN CERTIFICATE----- -MIIEOzCCAqOgAwIBAgIUY9ahQ83SrrLiwxjxyYqPra4jVywwDQYJKoZIhvcNAQEL -BQAwLTELMAkGA1UEBhMCSVQxHjAcBgNVBAMMFWxvY2FsaG9zdC5sb2NhbGRvbWFp -bjAeFw0yMjA2MjcxNzUyNTJaFw0zMjA2MjQxNzUyNTJaMC0xCzAJBgNVBAYTAklU -MR4wHAYDVQQDDBVsb2NhbGhvc3QubG9jYWxkb21haW4wggGiMA0GCSqGSIb3DQEB -AQUAA4IBjwAwggGKAoIBgQDfp/056ZMdAd1QBDNhxsLUK3Vn+z7PdZ5HTUtF7mOu -pXC5mN39IKNGHhT53ACHI5yAgm4KJEqNk9yROrFP7Hr9unZfEM4qrdHy8N0cAAZU -PBfdS+uogcQKgX6b5u4pVircQVOneVpLO24CzMIqF/0GXKjV+LE2jJwJssoWUjRW -2Z1S4VoRf40n9bSdDSP7SmMvA1VTZE2JTthUfEe2e+yKVreNRoQp4Xls8kbBm1SP -uSSd9i/cehFD08e7lsYxfZXKQJ2/hPBATmsU0GvA5KgkmrsD1Ihnq0tD8y9Ej6aD -lpLtSYoxKNFbB/geUbfBY8sXruSxi+Hvu+hhqRpWuqZUmiiJISeBhgJVUScraEn2 -r5nyFBGUbQADifZ+UR/QNUN7Q54/Yb2mgCGo00CXNVs+HHqhjvmAtW2TCuBEblmZ -s45XwL49Iggf5xanLvnE+8flQvy8kUMq9SaCy2yCBkwC3TbUbGC5LurnZnwl352u -DTzTC2GYHTnD3JZsZuONqiUCAwEAAaNTMFEwHQYDVR0OBBYEFGwfzOMAaAlxntMM -nQXR06l5NshKMB8GA1UdIwQYMBaAFGwfzOMAaAlxntMMnQXR06l5NshKMA8GA1Ud -EwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggGBABhp78swT2TQn6QtzKIVBjfb -Ycflq5WdPcL1w075y4PGHoEVN62NJfb5pyCMkPQS6vlJCBmpyn1/kwvVFGC4gWJ2 -z0NGf7KT9gVo2E9t1kRH0DeILW88pfWNFKFkn3Ln1dGg76MWZNWZlxEJ2zshQ2fk -+AwvUS+Y8cmGoG+0Z/xvz92PsJNWgbZuuZfsIhUTrByE6CTcDkXYyDkVs2mSsRIp -VnBtom7IZJFByKziCg47JCfgzBLAhZTYL678AYevGwuOtUA8P04heKWbHtWUIVQ0 -JpCJwZ6dt24jcdQ1SqSYxNSpAWqFSt/CTqMe2jA8GLrkwoOs/kKyqhs8rp88NBGz -cHO58zqLlOIsT022JT6ckAaLpB9IEf6UpVYW+xSzBpGvKuyTcQc9Qq5AZkHy7Wep -B4psJF3J6ZxW83cJXuYJNiylgN1pXc3mHl0C59tnK/ogrGwgOirmXRgv6cNGjriV -i4MQ779cskAULJA/fWjBaupd8PdRQskwdPDK7AJKTg== ------END CERTIFICATE----- diff --git a/Docker-compose/nginx/nginx.conf_uwsgi_pass b/Docker-compose/nginx/nginx.conf_uwsgi_pass deleted file mode 100644 index c6ce1297..00000000 --- a/Docker-compose/nginx/nginx.conf_uwsgi_pass +++ /dev/null @@ -1,116 +0,0 @@ -user nginx; -worker_processes auto; -pid /run/nginx.pid; - -events { - worker_connections 1024; -} - -http { - include mime.types; - default_type application/octet-stream; - - sendfile on; - keepalive_timeout 240s; - send_timeout 240s; - client_max_body_size 3300m; - - log_format main '$http_x_forwarded_for - $remote_user [$time_local] ' - '"$request" $status $body_bytes_sent "$http_referer" ' - '"$http_user_agent"' ; - -# the upstream component nginx needs to connect to -upstream satosa-saml2 { - server satosa-saml2spid:10000; -} - -# configuration of the server -server { - listen 80; - server_name proxy.local; - access_log /var/log/nginx/access.log; - error_log /var/log/nginx/error.log error; - return 301 https://$host$request_uri; -} - -server { - server_name proxy.local; - listen 443 ssl; - - ssl_certificate /etc/nginx/certs/proxy_local.pem; - ssl_certificate_key /etc/nginx/certs/proxy_local.key; - - access_log /var/log/nginx/access.log; - error_log /var/log/nginx/error.log error; - - # max upload size - client_max_body_size 10m; - - # very long url for delega ticket - large_client_header_buffers 4 16k; - - ssl_prefer_server_ciphers on; - ssl_ciphers ECDHE-RSA-AES256-GCM-SHA512:DHE-RSA-AES256-GCM-SHA512:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384;ssl_ecdh_curve secp384r1; # Requires nginx >= 1.1.0 - ssl_session_timeout 10m; - ssl_session_cache shared:SSL:10m; - ssl_session_tickets off; # Requires nginx >= 1.5.9 - ssl_stapling on; # Requires nginx >= 1.3.7 - ssl_stapling_verify on; # Requires nginx => 1.3.7 - - # Enable HTTP Strict Transport Security with a 2 year duration - add_header Strict-Transport-Security "max-age=63072000; "; - - # deny iFrame - add_header X-Frame-Options "DENY"; - - add_header X-Content-Type-Options nosniff; - add_header X-XSS-Protection "1; mode=block"; - add_header X-Robots-Tag none; - - location /static { - alias /var/www/html; - autoindex off; - } - - location /bootstrap-italia/dist { - alias /satosa_proxy/static/bootstrap-italia; - autoindex off; - } - - location / { - include /etc/nginx/uwsgi_params; - - - uwsgi_pass satosa-saml2; - uwsgi_param Host $host; - uwsgi_param X-Real-IP $remote_addr; - uwsgi_param X-Forwarded-For $proxy_add_x_forwarded_for; - uwsgi_param X-Forwarded-Proto $http_x_forwarded_proto; - uwsgi_param HTTP_X_FORWARDED_PROTOCOL https; - - uwsgi_connect_timeout 75s; - uwsgi_read_timeout 40; - uwsgi_buffer_size 128k; - uwsgi_buffers 4 256k; - uwsgi_busy_buffers_size 256k; - uwsgi_param SERVER_ADDR $server_addr; - - } - - error_page 500 502 503 504 /50x.html; - location = /50x.html { - root /usr/share/nginx/html; - } - - error_page 404 /404.html; - location = /404.html { - root /usr/share/nginx/html; - } - - error_page 403 /403.html; - location = /403.html { - root /usr/share/nginx/html; - } - -} -}