remove proxy for basic auth
This commit is contained in:
3
.gitignore
vendored
3
.gitignore
vendored
@@ -22,3 +22,6 @@ DS_STORE
|
|||||||
|
|
||||||
/config/proxy-https/cert.pem
|
/config/proxy-https/cert.pem
|
||||||
/config/proxy-https/key.pem
|
/config/proxy-https/key.pem
|
||||||
|
|
||||||
|
source.json
|
||||||
|
out.json
|
||||||
10
config/kalliope/security-dev.yml
Normal file
10
config/kalliope/security-dev.yml
Normal file
@@ -0,0 +1,10 @@
|
|||||||
|
application:
|
||||||
|
security:
|
||||||
|
enabled: true
|
||||||
|
source: /config/source.json
|
||||||
|
output: /config/out.json
|
||||||
|
allowedIpAddresses: []
|
||||||
|
#server:
|
||||||
|
#forward-headers-strategy: NATIVE
|
||||||
|
#tomcat:
|
||||||
|
# remote-ip-header: x-real-ip
|
||||||
@@ -1,88 +0,0 @@
|
|||||||
events {
|
|
||||||
|
|
||||||
}
|
|
||||||
|
|
||||||
http {
|
|
||||||
server {
|
|
||||||
listen 80 default_server;
|
|
||||||
listen [::]:80 default_server;
|
|
||||||
server_name dev.contacthub.lblod.info;
|
|
||||||
|
|
||||||
location /v3/api-docs {
|
|
||||||
auth_basic "Contact Hub realm";
|
|
||||||
auth_basic_user_file /etc/nginx/conf.d/nginx.htpasswd;
|
|
||||||
proxy_http_version 1.1;
|
|
||||||
proxy_set_header Upgrade $http_upgrade;
|
|
||||||
proxy_set_header Connection "upgrade";
|
|
||||||
proxy_set_header Host $host;
|
|
||||||
proxy_set_header X-Forwarded-For $remote_addr;
|
|
||||||
proxy_pass http://identifier;
|
|
||||||
client_max_body_size 3072m;
|
|
||||||
}
|
|
||||||
|
|
||||||
location /delta {
|
|
||||||
auth_basic "Contact Hub realm";
|
|
||||||
auth_basic_user_file /etc/nginx/conf.d/nginx.htpasswd;
|
|
||||||
proxy_http_version 1.1;
|
|
||||||
proxy_set_header Upgrade $http_upgrade;
|
|
||||||
proxy_set_header Connection "upgrade";
|
|
||||||
proxy_set_header Host $host;
|
|
||||||
proxy_set_header X-Forwarded-For $remote_addr;
|
|
||||||
proxy_pass http://identifier;
|
|
||||||
client_max_body_size 3072m;
|
|
||||||
}
|
|
||||||
|
|
||||||
location /bulk {
|
|
||||||
auth_basic "Contact Hub realm";
|
|
||||||
auth_basic_user_file /etc/nginx/conf.d/nginx.htpasswd;
|
|
||||||
proxy_http_version 1.1;
|
|
||||||
proxy_set_header Upgrade $http_upgrade;
|
|
||||||
proxy_set_header Connection "upgrade";
|
|
||||||
proxy_set_header Host $host;
|
|
||||||
proxy_set_header X-Forwarded-For $remote_addr;
|
|
||||||
proxy_pass http://identifier;
|
|
||||||
client_max_body_size 3072m;
|
|
||||||
}
|
|
||||||
|
|
||||||
location /changes {
|
|
||||||
auth_basic "Contact Hub realm";
|
|
||||||
auth_basic_user_file /etc/nginx/conf.d/nginx.htpasswd;
|
|
||||||
proxy_http_version 1.1;
|
|
||||||
proxy_set_header Upgrade $http_upgrade;
|
|
||||||
proxy_set_header Connection "upgrade";
|
|
||||||
proxy_set_header Host $host;
|
|
||||||
proxy_set_header X-Forwarded-For $remote_addr;
|
|
||||||
proxy_pass http://identifier;
|
|
||||||
client_max_body_size 3072m;
|
|
||||||
}
|
|
||||||
|
|
||||||
location /consolidated {
|
|
||||||
auth_basic "Contact Hub realm";
|
|
||||||
auth_basic_user_file /etc/nginx/conf.d/nginx.htpasswd;
|
|
||||||
proxy_http_version 1.1;
|
|
||||||
proxy_set_header Upgrade $http_upgrade;
|
|
||||||
proxy_set_header Connection "upgrade";
|
|
||||||
proxy_set_header Host $host;
|
|
||||||
proxy_set_header X-Forwarded-For $remote_addr;
|
|
||||||
proxy_pass http://identifier;
|
|
||||||
client_max_body_size 3072m;
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
location / {
|
|
||||||
proxy_http_version 1.1;
|
|
||||||
proxy_set_header Upgrade $http_upgrade;
|
|
||||||
proxy_set_header Connection "upgrade";
|
|
||||||
proxy_set_header Host $host;
|
|
||||||
proxy_set_header X-Forwarded-For $remote_addr;
|
|
||||||
proxy_pass http://identifier;
|
|
||||||
client_max_body_size 3072m;
|
|
||||||
}
|
|
||||||
|
|
||||||
location ~ /authorization/callback(.*) {
|
|
||||||
rewrite ^ /torii/redirect.html permanent;
|
|
||||||
}
|
|
||||||
|
|
||||||
}
|
|
||||||
|
|
||||||
}
|
|
||||||
@@ -18,7 +18,9 @@ services:
|
|||||||
cache:
|
cache:
|
||||||
restart: "no"
|
restart: "no"
|
||||||
kalliope-api:
|
kalliope-api:
|
||||||
restart: "no"
|
environment:
|
||||||
|
SPRING_SECURITY_CONFIG: "/config/security-dev.yml"
|
||||||
|
restart: "no"
|
||||||
deltanotifier:
|
deltanotifier:
|
||||||
restart: "no"
|
restart: "no"
|
||||||
mocklogin:
|
mocklogin:
|
||||||
@@ -29,10 +31,6 @@ services:
|
|||||||
restart: "no"
|
restart: "no"
|
||||||
login:
|
login:
|
||||||
restart: "no"
|
restart: "no"
|
||||||
web:
|
|
||||||
ports:
|
|
||||||
- "80:80"
|
|
||||||
restart: "no"
|
|
||||||
frontend:
|
frontend:
|
||||||
restart: "no"
|
restart: "no"
|
||||||
uri-info:
|
uri-info:
|
||||||
|
|||||||
@@ -17,6 +17,8 @@ services:
|
|||||||
- "logging=true"
|
- "logging=true"
|
||||||
restart: always
|
restart: always
|
||||||
logging: *default-logging
|
logging: *default-logging
|
||||||
|
ports:
|
||||||
|
- "80:80"
|
||||||
dispatcher:
|
dispatcher:
|
||||||
image: semtech/mu-dispatcher:latest
|
image: semtech/mu-dispatcher:latest
|
||||||
volumes:
|
volumes:
|
||||||
@@ -79,7 +81,7 @@ services:
|
|||||||
restart: always
|
restart: always
|
||||||
logging: *default-logging
|
logging: *default-logging
|
||||||
kalliope-api:
|
kalliope-api:
|
||||||
image: lblod/jsonld-delta-service:0.2.0
|
image: lblod/jsonld-delta-service:latest
|
||||||
volumes:
|
volumes:
|
||||||
- ./config/kalliope:/config
|
- ./config/kalliope:/config
|
||||||
- ./data/files:/share
|
- ./data/files:/share
|
||||||
@@ -138,17 +140,6 @@ services:
|
|||||||
- "logging=true"
|
- "logging=true"
|
||||||
restart: always
|
restart: always
|
||||||
logging: *default-logging
|
logging: *default-logging
|
||||||
web:
|
|
||||||
image: nginx:1.21.3
|
|
||||||
volumes:
|
|
||||||
- ./config/proxy:/etc/nginx/conf.d
|
|
||||||
- ./config/proxy/web.conf:/etc/nginx/nginx.conf:ro
|
|
||||||
links:
|
|
||||||
- identifier:identifier
|
|
||||||
labels:
|
|
||||||
- "logging=true"
|
|
||||||
restart: always
|
|
||||||
logging: *default-logging
|
|
||||||
frontend:
|
frontend:
|
||||||
image: lblod/frontend-contact-hub:1.1.0
|
image: lblod/frontend-contact-hub:1.1.0
|
||||||
volumes:
|
volumes:
|
||||||
|
|||||||
Reference in New Issue
Block a user