OpenPunk/openpunk-ansible
1
0
Fork 0
mirror of https://github.com/CPunch/openpunk-ansible.git synced 2024-11-22 07:20:05 +00:00
Code Issues Packages Projects Releases Wiki Activity

nginx: fix gitea proxy headers

Browse Source
This commit is contained in:
CPunch 2024-02-27 18:11:03 -06:00
parent 262e350f7b
commit 540f63cd85
1 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
roles/nginx/tasks/main.yml
View File

@ -38,12 +38,18 @@
ssl_ciphers HIGH:!aNULL:!MD5; ssl_ciphers HIGH:!aNULL:!MD5;
- listen: "443 ssl http2" - listen: "443 ssl http2"
server_name: "git.{{ domain }}" server_name: "git.{{ domain }}"
client_max_body_size: "100M" client_max_body_size: "512M"
extra_parameters: | extra_parameters: |
listen [::]:443 ssl http2; listen [::]:443 ssl http2;
location / { location / {
add_header Permissions-Policy interest-cohort=(); add_header Permissions-Policy interest-cohort=();
proxy_pass http://localhost:{{ giteaPort }}; proxy_pass http://localhost:{{ giteaPort }};
proxy_set_header Connection $http_connection;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
} }
ssl_certificate /etc/letsencrypt/live/{{ domain }}/fullchain.pem; ssl_certificate /etc/letsencrypt/live/{{ domain }}/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/{{ domain }}/privkey.pem; ssl_certificate_key /etc/letsencrypt/live/{{ domain }}/privkey.pem;