-
Notifications
You must be signed in to change notification settings - Fork 113
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
[docs-only] add back config examples for sciencemesh and cernbox (#4640)
- Loading branch information
Showing
11 changed files
with
3,570 additions
and
0 deletions.
There are no files selected for viewing
Large diffs are not rendered by default.
Oops, something went wrong.
Large diffs are not rendered by default.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,96 @@ | ||
types { | ||
text/html html htm shtml; | ||
text/css css; | ||
text/xml xml; | ||
image/gif gif; | ||
image/jpeg jpeg jpg; | ||
application/javascript js mjs; | ||
application/atom+xml atom; | ||
application/rss+xml rss; | ||
|
||
text/mathml mml; | ||
text/plain txt; | ||
text/vnd.sun.j2me.app-descriptor jad; | ||
text/vnd.wap.wml wml; | ||
text/x-component htc; | ||
|
||
image/png png; | ||
image/svg+xml svg svgz; | ||
image/tiff tif tiff; | ||
image/vnd.wap.wbmp wbmp; | ||
image/webp webp; | ||
image/x-icon ico; | ||
image/x-jng jng; | ||
image/x-ms-bmp bmp; | ||
|
||
font/woff woff; | ||
font/woff2 woff2; | ||
|
||
application/java-archive jar war ear; | ||
application/json json; | ||
application/mac-binhex40 hqx; | ||
application/msword doc; | ||
application/pdf pdf; | ||
application/postscript ps eps ai; | ||
application/rtf rtf; | ||
application/vnd.apple.mpegurl m3u8; | ||
application/vnd.google-earth.kml+xml kml; | ||
application/vnd.google-earth.kmz kmz; | ||
application/vnd.ms-excel xls; | ||
application/vnd.ms-fontobject eot; | ||
application/vnd.ms-powerpoint ppt; | ||
application/vnd.oasis.opendocument.graphics odg; | ||
application/vnd.oasis.opendocument.presentation odp; | ||
application/vnd.oasis.opendocument.spreadsheet ods; | ||
application/vnd.oasis.opendocument.text odt; | ||
application/vnd.openxmlformats-officedocument.presentationml.presentation | ||
pptx; | ||
application/vnd.openxmlformats-officedocument.spreadsheetml.sheet | ||
xlsx; | ||
application/vnd.openxmlformats-officedocument.wordprocessingml.document | ||
docx; | ||
application/vnd.wap.wmlc wmlc; | ||
application/x-7z-compressed 7z; | ||
application/x-cocoa cco; | ||
application/x-java-archive-diff jardiff; | ||
application/x-java-jnlp-file jnlp; | ||
application/x-makeself run; | ||
application/x-perl pl pm; | ||
application/x-pilot prc pdb; | ||
application/x-rar-compressed rar; | ||
application/x-redhat-package-manager rpm; | ||
application/x-sea sea; | ||
application/x-shockwave-flash swf; | ||
application/x-stuffit sit; | ||
application/x-tcl tcl tk; | ||
application/x-x509-ca-cert der pem crt; | ||
application/x-xpinstall xpi; | ||
application/xhtml+xml xhtml; | ||
application/xspf+xml xspf; | ||
application/zip zip; | ||
|
||
application/octet-stream bin exe dll; | ||
application/octet-stream deb; | ||
application/octet-stream dmg; | ||
application/octet-stream iso img; | ||
application/octet-stream msi msp msm; | ||
|
||
audio/midi mid midi kar; | ||
audio/mpeg mp3; | ||
audio/ogg ogg; | ||
audio/x-m4a m4a; | ||
audio/x-realaudio ra; | ||
|
||
video/3gpp 3gpp 3gp; | ||
video/mp2t ts; | ||
video/mp4 mp4; | ||
video/mpeg mpeg mpg; | ||
video/quicktime mov; | ||
video/webm webm; | ||
video/x-flv flv; | ||
video/x-m4v m4v; | ||
video/x-mng mng; | ||
video/x-ms-asf asx asf; | ||
video/x-ms-wmv wmv; | ||
video/x-msvideo avi; | ||
} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,167 @@ | ||
|
||
user nginx; | ||
worker_processes auto; | ||
|
||
pid /var/run/nginx.pid; | ||
|
||
# Load dynamic modules. See /usr/share/nginx/README.dynamic. | ||
include /usr/share/nginx/modules/*.conf; | ||
|
||
events { | ||
worker_connections 1024; | ||
} | ||
|
||
http { | ||
include /etc/nginx/mime.types; | ||
default_type application/octet-stream; | ||
|
||
log_format main '$remote_addr - $remote_user [$time_local] "$request" ' | ||
'$status $body_bytes_sent "$http_referer" ' | ||
'"$http_user_agent" "$http_x_forwarded_for"'; | ||
|
||
map $status $loggable { | ||
~^[23] 0; | ||
default 1; | ||
} | ||
|
||
access_log /var/log/nginx/access.log combined if=$loggable; | ||
|
||
sendfile on; | ||
tcp_nopush on; | ||
tcp_nodelay on; | ||
keepalive_timeout 65; | ||
types_hash_max_size 2048; | ||
client_max_body_size 8G; | ||
#gzip on; | ||
|
||
# avoid nginx buffering all the payload, only available in > 1.7 | ||
proxy_buffering off; | ||
proxy_request_buffering off; | ||
|
||
include /etc/nginx/conf.d/*.conf; | ||
|
||
upstream revad { | ||
server your.revad.org:443; | ||
} | ||
|
||
server { | ||
listen 80; | ||
server_name localhost; | ||
return 301 https://$host$request_uri; | ||
} | ||
|
||
# https://ssl-config.mozilla.org/#server=nginx&version=1.20.1&config=intermediate&openssl=1.0.2k&guideline=5.6 | ||
server { | ||
listen 443 ssl http2; | ||
server_name localhost; | ||
|
||
ssl_certificate your.cert.pem; | ||
ssl_certificate_key your.key.pem; | ||
|
||
ssl_session_timeout 5m; | ||
|
||
ssl_protocols TLSv1.2; | ||
ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384; | ||
ssl_prefer_server_ciphers off; | ||
|
||
proxy_connect_timeout 1200; | ||
proxy_send_timeout 1200; | ||
proxy_read_timeout 1200; | ||
send_timeout 1200; | ||
proxy_buffering off; | ||
proxy_request_buffering off; | ||
|
||
location ^~ /data { | ||
proxy_pass https://revad; | ||
proxy_set_header Host $host; | ||
} | ||
|
||
location ~ /s/[^/]*/download { | ||
proxy_pass https://revad; | ||
proxy_set_header Host $host; | ||
} | ||
|
||
location ^~ /ocs/ { | ||
proxy_pass https://revad; | ||
proxy_set_header Host $host; | ||
} | ||
|
||
location ^~ /dav/ { | ||
proxy_pass https://revad; | ||
proxy_set_header Host $host; | ||
} | ||
|
||
location ^~ /webdav/ { | ||
proxy_pass https://revad; | ||
proxy_set_header Host $host; | ||
} | ||
|
||
location ^~ /remote.php/ { | ||
proxy_pass https://revad; | ||
proxy_set_header Host $host; | ||
} | ||
|
||
location ^~ /preferences { | ||
proxy_pass https://revad; | ||
proxy_set_header Host $host; | ||
} | ||
|
||
location ^~ /otg { | ||
return 204; | ||
} | ||
|
||
location ^~ /app/ { | ||
proxy_pass https://revad; | ||
proxy_set_header Host $host; | ||
} | ||
|
||
location ^~ /ocm/ { | ||
proxy_pass https://revad; | ||
proxy_set_header Host $host; | ||
} | ||
|
||
location ~ ^/sciencemesh/ { | ||
proxy_pass https://revad; | ||
proxy_set_header Host $host; | ||
} | ||
|
||
location ^~ /ocm-provider { | ||
proxy_pass https://revad; | ||
proxy_set_header Host $host; | ||
} | ||
|
||
location ^~ /status.php { | ||
proxy_pass https://revad; | ||
proxy_set_header Host $host; | ||
} | ||
|
||
location ~ ^/(js|css|icons|fonts|assets)/ { | ||
root /var/www/web; | ||
add_header Cache-Control "public, max-age=31536000, immutable"; | ||
etag off; | ||
gzip_static on; | ||
} | ||
|
||
location ^~ /cernbox { | ||
root /var/www; | ||
add_header Cache-Control "no-cache"; | ||
add_header Access-Control-Allow-Origin "https://idp.docker:8443" always; | ||
etag off; | ||
gzip_static on; | ||
} | ||
|
||
location / { | ||
root /var/www/web; | ||
add_header Cache-Control "no-cache"; | ||
add_header Access-Control-Allow-Origin "https://idp.docker:8443" always; | ||
etag off; | ||
gzip_static on; | ||
try_files $uri /index.html; | ||
} | ||
|
||
# location / { | ||
# proxy_pass https://revad/ui; | ||
# proxy_set_header Host $host; | ||
# } | ||
} | ||
} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,80 @@ | ||
[ | ||
{ | ||
"id": { | ||
"opaque_id": "4c510ada-c86b-4815-8820-42cdf82c3d51", | ||
"idp": "cernbox", | ||
"type": 1 | ||
}, | ||
"username": "einstein", | ||
"secret": "relativity", | ||
"mail": "einstein@cern.ch", | ||
"display_name": "Albert Einstein", | ||
"groups": ["sailing-lovers", "violin-haters", "physics-lovers"], | ||
"opaque": { | ||
"map": { | ||
"gid": { | ||
"_comment": "decodes to 987", | ||
"decoder":"plain", | ||
"value":"OTg3" | ||
}, | ||
"uid":{ | ||
"_comment": "decodes to 123", | ||
"decoder":"plain", | ||
"value":"MTIz" | ||
} | ||
} | ||
} | ||
}, | ||
{ | ||
"id": { | ||
"opaque_id": "f7fbf8c8-139b-4376-b307-cf0a8c2d0d9c", | ||
"idp": "cernbox", | ||
"type": 1 | ||
}, | ||
"username": "marie", | ||
"secret": "radioactivity", | ||
"mail": "marie@cern.ch", | ||
"display_name": "Marie Curie", | ||
"groups": ["radium-lovers", "polonium-lovers", "physics-lovers"], | ||
"opaque": { | ||
"map": { | ||
"gid": { | ||
"_comment": "decodes to 987", | ||
"decoder":"plain", | ||
"value":"OTg3" | ||
}, | ||
"uid":{ | ||
"_comment": "decodes to 456", | ||
"decoder":"plain", | ||
"value":"NDU2" | ||
} | ||
} | ||
} | ||
}, | ||
{ | ||
"id": { | ||
"opaque_id": "932b4540-8d16-481e-8ef4-588e4b6b151c", | ||
"idp": "cernbox", | ||
"type": 1 | ||
}, | ||
"username": "richard", | ||
"secret": "superfluidity", | ||
"mail": "richard@cern.ch", | ||
"display_name": "Richard Feynman", | ||
"groups": ["quantum-lovers", "philosophy-haters", "physics-lovers"], | ||
"opaque": { | ||
"map": { | ||
"gid": { | ||
"_comment": "decodes to 135", | ||
"decoder":"plain", | ||
"value":"MTM1" | ||
}, | ||
"uid":{ | ||
"_comment": "decodes to 246", | ||
"decoder":"plain", | ||
"value":"MjQ2" | ||
} | ||
} | ||
} | ||
} | ||
] |
Oops, something went wrong.