# configuration file /etc/nginx/nginx.conf: load_module /usr/lib/nginx/modules/ngx_http_js_module.so; worker_processes auto; pid /var/run/nginx/nginx.pid; error_log stderr info; events { worker_connections 1024; } http { include /etc/nginx/conf.d/*.conf; include /etc/nginx/mime.types; js_import /usr/lib/nginx/modules/njs/httpmatches.js; default_type application/octet-stream; proxy_headers_hash_bucket_size 512; proxy_headers_hash_max_size 1024; server_names_hash_bucket_size 256; server_names_hash_max_size 1024; variables_hash_bucket_size 512; variables_hash_max_size 1024; sendfile on; tcp_nopush on; server { listen unix:/var/run/nginx/nginx-status.sock; access_log off; location /stub_status { stub_status; } } } # configuration file /etc/nginx/conf.d/config-version.conf: server { listen unix:/var/run/nginx/nginx-config-version.sock; access_log off; location /version { return 200 4; } } # configuration file /etc/nginx/conf.d/http.conf: upstream registry_registry_5000 { random two least_conn; zone registry_registry_5000 512k; server 10.244.0.9:5000; } upstream invalid-backend-ref { random two least_conn; zone invalid-backend-ref 512k; server unix:/var/lib/nginx/nginx-500-server.sock; } server { listen 80 default_server; default_type text/html; return 404; } server { listen 80; server_name registry.apps.cluster1.house; location / { proxy_set_header Host $gw_api_compliant_host; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection $connection_upgrade; proxy_pass http://registry_registry_5000$request_uri; } } server { listen 443 ssl default_server; ssl_reject_handshake on; } server { listen 443 ssl; ssl_certificate /etc/nginx/secrets/ssl_keypair_default-gateway_default-certificate.pem; ssl_certificate_key /etc/nginx/secrets/ssl_keypair_default-gateway_default-certificate.pem; if ($ssl_server_name != $host) { return 421; } server_name registry.apps.cluster1.house; location / { proxy_set_header Host $gw_api_compliant_host; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection $connection_upgrade; proxy_pass http://registry_registry_5000$request_uri; } } server { listen unix:/var/lib/nginx/nginx-502-server.sock; access_log off; return 502; } server { listen unix:/var/lib/nginx/nginx-500-server.sock; access_log off; return 500; } # Set $gw_api_compliant_host variable to the value of $http_host unless $http_host is empty, then set it to the value # of $host. We prefer $http_host because it contains the original value of the host header, which is required by the # Gateway API. However, in an HTTP/1.0 request, it's possible that $http_host can be empty. In this case, we will use # the value of $host. See http://nginx.org/en/docs/http/ngx_http_core_module.html#var_host. map $http_host $gw_api_compliant_host { '' $host; default $http_host; } # Set $connection_header variable to upgrade when the $http_upgrade header is set, otherwise, set it to close. This # allows support for websocket connections. See https://nginx.org/en/docs/http/websocket.html. map $http_upgrade $connection_upgrade { default upgrade; '' close; } # configuration file /etc/nginx/mime.types: types { text/html html htm shtml; text/css css; text/xml xml; image/gif gif; image/jpeg jpeg jpg; application/javascript js; application/atom+xml atom; application/rss+xml rss; text/mathml mml; text/plain txt; text/vnd.sun.j2me.app-descriptor jad; text/vnd.wap.wml wml; text/x-component htc; image/avif avif; image/png png; image/svg+xml svg svgz; image/tiff tif tiff; image/vnd.wap.wbmp wbmp; image/webp webp; image/x-icon ico; image/x-jng jng; image/x-ms-bmp bmp; font/woff woff; font/woff2 woff2; application/java-archive jar war ear; application/json json; application/mac-binhex40 hqx; application/msword doc; application/pdf pdf; application/postscript ps eps ai; application/rtf rtf; application/vnd.apple.mpegurl m3u8; application/vnd.google-earth.kml+xml kml; application/vnd.google-earth.kmz kmz; application/vnd.ms-excel xls; application/vnd.ms-fontobject eot; application/vnd.ms-powerpoint ppt; application/vnd.oasis.opendocument.graphics odg; application/vnd.oasis.opendocument.presentation odp; application/vnd.oasis.opendocument.spreadsheet ods; application/vnd.oasis.opendocument.text odt; application/vnd.openxmlformats-officedocument.presentationml.presentation pptx; application/vnd.openxmlformats-officedocument.spreadsheetml.sheet xlsx; application/vnd.openxmlformats-officedocument.wordprocessingml.document docx; application/vnd.wap.wmlc wmlc; application/wasm wasm; application/x-7z-compressed 7z; application/x-cocoa cco; application/x-java-archive-diff jardiff; application/x-java-jnlp-file jnlp; application/x-makeself run; application/x-perl pl pm; application/x-pilot prc pdb; application/x-rar-compressed rar; application/x-redhat-package-manager rpm; application/x-sea sea; application/x-shockwave-flash swf; application/x-stuffit sit; application/x-tcl tcl tk; application/x-x509-ca-cert der pem crt; application/x-xpinstall xpi; application/xhtml+xml xhtml; application/xspf+xml xspf; application/zip zip; application/octet-stream bin exe dll; application/octet-stream deb; application/octet-stream dmg; application/octet-stream iso img; application/octet-stream msi msp msm; audio/midi mid midi kar; audio/mpeg mp3; audio/ogg ogg; audio/x-m4a m4a; audio/x-realaudio ra; video/3gpp 3gpp 3gp; video/mp2t ts; video/mp4 mp4; video/mpeg mpeg mpg; video/quicktime mov; video/webm webm; video/x-flv flv; video/x-m4v m4v; video/x-mng mng; video/x-ms-asf asx asf; video/x-ms-wmv wmv; video/x-msvideo avi; }