From b0950b8d7090f2e61771735f0de568bef234af2f Mon Sep 17 00:00:00 2001 From: faulty Date: Tue, 7 Feb 2023 13:40:20 +0100 Subject: [PATCH] proxy pt.2 --- custom/proxy/config/conf.d/proxy-kasm.conf | 41 ---------------------- docker-compose.utils.yml | 3 ++ 2 files changed, 3 insertions(+), 41 deletions(-) delete mode 100644 custom/proxy/config/conf.d/proxy-kasm.conf diff --git a/custom/proxy/config/conf.d/proxy-kasm.conf b/custom/proxy/config/conf.d/proxy-kasm.conf deleted file mode 100644 index 5e47aca..0000000 --- a/custom/proxy/config/conf.d/proxy-kasm.conf +++ /dev/null @@ -1,41 +0,0 @@ -server { - server_name kasm.neo.faulty.nl; - access_log /var/log/nginx/access.log vhost; - listen 443 ssl http2 ; - ssl_session_timeout 5m; - ssl_session_cache shared:SSL:50m; - ssl_session_tickets off; - ssl_certificate /etc/nginx/certs/kasm.neo.faulty.nl.crt; - ssl_certificate_key /etc/nginx/certs/kasm.neo.faulty.nl.key; - ssl_dhparam /etc/nginx/certs/kasm.neo.faulty.nl.dhparam.pem; - ssl_stapling on; - ssl_stapling_verify on; - ssl_trusted_certificate /etc/nginx/certs/kasm.neo.faulty.nl.chain.pem; - - location / { - # The following configurations must be configured when proxying to Kasm Workspaces - - # WebSocket Support - proxy_set_header Upgrade $http_upgrade; - proxy_set_header Connection "upgrade"; - - # Host and X headers - proxy_set_header Host $host; - proxy_set_header X-Real-IP $remote_addr; - proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; - proxy_set_header X-Forwarded-Proto $scheme; - - # Connectivity Options - proxy_http_version 1.1; - proxy_read_timeout 1800s; - proxy_send_timeout 1800s; - proxy_connect_timeout 1800s; - proxy_buffering off; - - # Allow large requests to support file uploads to sessions - client_max_body_size 10M; - - # Proxy to Kasm Workspaces running locally on 8443 using ssl - proxy_pass https://kasm:8443 ; - } -} \ No newline at end of file diff --git a/docker-compose.utils.yml b/docker-compose.utils.yml index f29de21..87382b5 100644 --- a/docker-compose.utils.yml +++ b/docker-compose.utils.yml @@ -167,7 +167,10 @@ services: environment: - KASM_PORT=8443 - TZ=Europe/London + - VIRTUAL_HOST=kasm.neo.faulty.nl - LETSENCRYPT_HOST=kasm.neo.faulty.nl + - VIRTUAL_PORT=8443 + - VIRTUAL_PROTO=https volumes: - /srv/kasm/data:/opt - /srv/kasm/other/profiles:/profiles #optional