mirror of
https://github.com/RoboSats/robosats-deploy.git
synced 2025-08-15 14:27:21 +00:00
70 lines
2.2 KiB
Plaintext
70 lines
2.2 KiB
Plaintext
limit_req_zone $binary_remote_addr zone=fivepersec:10m rate=5r/s;
|
|
|
|
# first we declare our upstream server, which is our Gunicorn application
|
|
upstream robosats_gunicorn_rest {
|
|
# docker will automatically resolve this to the correct address
|
|
# because we use the same name as the service: "robosats"
|
|
server localhost:8000;
|
|
|
|
}
|
|
|
|
upstream robosats_daphne_websocket {
|
|
# docker will automatically resolve this to the correct address
|
|
# because we use the same name as the service: "robosats"
|
|
server localhost:9000;
|
|
}
|
|
|
|
# now we declare our main server
|
|
server {
|
|
|
|
listen 80;
|
|
server_name testnet.robosats.com;
|
|
large_client_header_buffers 4 64k;
|
|
|
|
location /static {
|
|
alias /usr/src/static;
|
|
}
|
|
|
|
location /.well-known {
|
|
alias /usr/src/.well-known;
|
|
}
|
|
|
|
location / {
|
|
# requests are passed to Gunicorn
|
|
proxy_pass http://robosats_gunicorn_rest;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
proxy_set_header Host $host;
|
|
proxy_redirect off;
|
|
# Replace with the onion hidden service of your coordinator
|
|
add_header Onion-Location http://robotestagw3dcxmd66r4rgksb4nmmr43fh77bzn2ia2eucduyeafnyd.onion$request_uri;
|
|
limit_req zone=fivepersec burst=10;
|
|
}
|
|
|
|
location /coordinator {
|
|
# Blocks admin access from the public onion address
|
|
if ($host ~* "robotestagw3dcxmd66r4rgksb4nmmr43fh77bzn2ia2eucduyeafnyd.onion") {
|
|
return 403; # Forbidden
|
|
}
|
|
|
|
proxy_pass http://robosats_gunicorn_rest;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
proxy_set_header Host $host;
|
|
proxy_redirect off;
|
|
# Replace with the onion hidden service of your coordinator
|
|
add_header Onion-Location https://robotestagw3dcxmd66r4rgksb4nmmr43fh77bzn2ia2eucduyeafnyd.onion$request_uri;
|
|
|
|
}
|
|
|
|
location /ws/ {
|
|
# websockets are passed to Daphne
|
|
proxy_pass http://robosats_daphne_websocket;
|
|
proxy_http_version 1.1;
|
|
proxy_set_header Upgrade $http_upgrade;
|
|
proxy_set_header Connection "Upgrade";
|
|
proxy_set_header Host $host;
|
|
}
|
|
|
|
location = /favicon.ico { access_log off; log_not_found off; }
|
|
|
|
}
|