| e5b523e | | | 1 | { |
| e5b523e | | | 2 | on_demand_tls { |
| e5b523e | | | 3 | ask http://grove-api:4000/api/pages/ask |
| e5b523e | | | 4 | } |
| e5b523e | | | 5 | } |
| e5b523e | | | 6 | |
| 9ba5911 | | | 7 | thegild.app { |
| 9ba5911 | | | 8 | root * /opt/gild/web |
| 9ba5911 | | | 9 | file_server |
| 9ba5911 | | | 10 | |
| 9ba5911 | | | 11 | header { |
| 9ba5911 | | | 12 | X-Content-Type-Options nosniff |
| 9ba5911 | | | 13 | X-Frame-Options DENY |
| 9ba5911 | | | 14 | } |
| 9ba5911 | | | 15 | } |
| 9ba5911 | | | 16 | |
| bdb18c9 | | | 17 | collab.{$DOMAIN} { |
| 0b4b582 | | | 18 | handle /socket.io/* { |
| 0b4b582 | | | 19 | reverse_proxy grove-web:3334 |
| 0b4b582 | | | 20 | } |
| 0b4b582 | | | 21 | |
| 0b4b582 | | | 22 | handle /api/auth/* { |
| 0b4b582 | | | 23 | reverse_proxy hub-api:4000 |
| 0b4b582 | | | 24 | } |
| 0b4b582 | | | 25 | |
| 0b4b582 | | | 26 | handle /api/repos { |
| 0b4b582 | | | 27 | reverse_proxy grove-api:4000 |
| 0b4b582 | | | 28 | } |
| 0b4b582 | | | 29 | |
| 0b4b582 | | | 30 | handle /api/repos/* { |
| 0b4b582 | | | 31 | reverse_proxy grove-api:4000 |
| 0b4b582 | | | 32 | } |
| 0b4b582 | | | 33 | |
| 0b4b582 | | | 34 | handle { |
| 0b4b582 | | | 35 | reverse_proxy grove-web:3000 |
| 0b4b582 | | | 36 | } |
| bdb18c9 | | | 37 | |
| bdb18c9 | | | 38 | header { |
| bdb18c9 | | | 39 | X-Content-Type-Options nosniff |
| bdb18c9 | | | 40 | X-Frame-Options DENY |
| bdb18c9 | | | 41 | } |
| bdb18c9 | | | 42 | } |
| bdb18c9 | | | 43 | |
| da0f651 | | | 44 | canopy.{$DOMAIN} { |
| da0f651 | | | 45 | handle /api/auth/* { |
| da0f651 | | | 46 | reverse_proxy hub-api:4000 |
| da0f651 | | | 47 | } |
| da0f651 | | | 48 | |
| 1da9874 | | | 49 | handle /api/canopy/* { |
| 1da9874 | | | 50 | reverse_proxy grove-api:4000 |
| 1da9874 | | | 51 | } |
| 1da9874 | | | 52 | |
| da0f651 | | | 53 | handle /api/repos { |
| da0f651 | | | 54 | reverse_proxy grove-api:4000 |
| da0f651 | | | 55 | } |
| da0f651 | | | 56 | |
| da0f651 | | | 57 | handle /api/repos/* { |
| da0f651 | | | 58 | reverse_proxy grove-api:4000 |
| da0f651 | | | 59 | } |
| da0f651 | | | 60 | |
| da0f651 | | | 61 | handle { |
| da0f651 | | | 62 | reverse_proxy grove-web:3000 |
| da0f651 | | | 63 | } |
| da0f651 | | | 64 | |
| da0f651 | | | 65 | header { |
| da0f651 | | | 66 | X-Content-Type-Options nosniff |
| da0f651 | | | 67 | X-Frame-Options DENY |
| da0f651 | | | 68 | } |
| da0f651 | | | 69 | } |
| da0f651 | | | 70 | |
| fe2e544 | | | 71 | ring.{$DOMAIN} { |
| fe2e544 | | | 72 | handle /api/auth/* { |
| fe2e544 | | | 73 | reverse_proxy hub-api:4000 |
| fe2e544 | | | 74 | } |
| fe2e544 | | | 75 | |
| fe2e544 | | | 76 | handle /api/ring/* { |
| fe2e544 | | | 77 | reverse_proxy grove-api:4000 |
| fe2e544 | | | 78 | } |
| fe2e544 | | | 79 | |
| fe2e544 | | | 80 | handle /api/repos { |
| fe2e544 | | | 81 | reverse_proxy grove-api:4000 |
| fe2e544 | | | 82 | } |
| fe2e544 | | | 83 | |
| fe2e544 | | | 84 | handle /api/repos/* { |
| fe2e544 | | | 85 | reverse_proxy grove-api:4000 |
| fe2e544 | | | 86 | } |
| fe2e544 | | | 87 | |
| fe2e544 | | | 88 | handle { |
| fe2e544 | | | 89 | reverse_proxy grove-web:3000 |
| fe2e544 | | | 90 | } |
| fe2e544 | | | 91 | |
| fe2e544 | | | 92 | header { |
| fe2e544 | | | 93 | X-Content-Type-Options nosniff |
| fe2e544 | | | 94 | X-Frame-Options DENY |
| fe2e544 | | | 95 | } |
| fe2e544 | | | 96 | } |
| fe2e544 | | | 97 | |
| 4bb999b | | | 98 | isl.{$DOMAIN} { |
| 4bb999b | | | 99 | handle /ws { |
| abf167c | | | 100 | reverse_proxy 172.18.0.1:3011 { |
| abf167c | | | 101 | header_down -X-Frame-Options |
| abf167c | | | 102 | } |
| 4bb999b | | | 103 | } |
| 4bb999b | | | 104 | |
| 4bb999b | | | 105 | handle { |
| abf167c | | | 106 | reverse_proxy 172.18.0.1:3011 { |
| abf167c | | | 107 | header_down -X-Frame-Options |
| abf167c | | | 108 | } |
| 4bb999b | | | 109 | } |
| 4bb999b | | | 110 | |
| 4bb999b | | | 111 | header { |
| 4bb999b | | | 112 | X-Content-Type-Options nosniff |
| 7e5aa77 | | | 113 | Content-Security-Policy "frame-ancestors https://grove.host https://*.grove.host http://grove.test:*" |
| 4bb999b | | | 114 | } |
| 4bb999b | | | 115 | } |
| 4bb999b | | | 116 | |
| 135dfe5 | | | 117 | {$DOMAIN} { |
| 5f0fbcf | | | 118 | handle /v2/* { |
| 5f0fbcf | | | 119 | reverse_proxy registry:5000 |
| 5f0fbcf | | | 120 | } |
| 5f0fbcf | | | 121 | |
| 8d0dc12 | | | 122 | handle /api/canopy/* { |
| 8d0dc12 | | | 123 | reverse_proxy grove-api:4000 |
| 8d0dc12 | | | 124 | } |
| 8d0dc12 | | | 125 | |
| f0bb192 | | | 126 | handle /api/auth/* { |
| 135dfe5 | | | 127 | reverse_proxy hub-api:4000 |
| 135dfe5 | | | 128 | } |
| 135dfe5 | | | 129 | |
| 4dfd09b | | | 130 | handle /api/instances { |
| 4dfd09b | | | 131 | reverse_proxy hub-api:4000 |
| 4dfd09b | | | 132 | } |
| 4dfd09b | | | 133 | |
| f0bb192 | | | 134 | handle /api/instances/* { |
| f0bb192 | | | 135 | reverse_proxy hub-api:4000 |
| f0bb192 | | | 136 | } |
| f0bb192 | | | 137 | |
| 79efd41 | | | 138 | handle /api/orgs { |
| 79efd41 | | | 139 | reverse_proxy hub-api:4000 |
| 79efd41 | | | 140 | } |
| 79efd41 | | | 141 | |
| 79efd41 | | | 142 | handle /api/orgs/* { |
| 79efd41 | | | 143 | reverse_proxy hub-api:4000 |
| 79efd41 | | | 144 | } |
| 79efd41 | | | 145 | |
| ffa10b4 | | | 146 | handle /api/repos { |
| ffa10b4 | | | 147 | reverse_proxy grove-api:4000 |
| ffa10b4 | | | 148 | } |
| ffa10b4 | | | 149 | |
| f0bb192 | | | 150 | handle /api/repos/* { |
| f0bb192 | | | 151 | reverse_proxy grove-api:4000 |
| f0bb192 | | | 152 | } |
| f0bb192 | | | 153 | |
| 85f7497 | | | 154 | handle /api/pages/* { |
| 85f7497 | | | 155 | reverse_proxy grove-api:4000 |
| 85f7497 | | | 156 | } |
| 85f7497 | | | 157 | |
| 4ae9b20 | | | 158 | handle /downloads/* { |
| 4ae9b20 | | | 159 | root * /srv |
| 4ae9b20 | | | 160 | file_server |
| 4ae9b20 | | | 161 | } |
| 4ae9b20 | | | 162 | |
| 135dfe5 | | | 163 | handle /health { |
| 135dfe5 | | | 164 | reverse_proxy hub-api:4000 |
| 135dfe5 | | | 165 | } |
| 135dfe5 | | | 166 | |
| 135dfe5 | | | 167 | handle { |
| 4a006da | | | 168 | reverse_proxy grove-web:3000 |
| 135dfe5 | | | 169 | } |
| 135dfe5 | | | 170 | |
| 135dfe5 | | | 171 | header { |
| 135dfe5 | | | 172 | X-Content-Type-Options nosniff |
| 135dfe5 | | | 173 | X-Frame-Options DENY |
| 135dfe5 | | | 174 | } |
| 135dfe5 | | | 175 | } |
| e5b523e | | | 176 | |
| ff50d03 | | | 177 | # Grove Pages — path-based default hosting at pages.grove.host/{owner}/{repo} |
| ff50d03 | | | 178 | pages.{$DOMAIN} { |
| ff50d03 | | | 179 | root * /srv/pages/sites/_pages |
| ff50d03 | | | 180 | file_server browse |
| ff50d03 | | | 181 | |
| ff50d03 | | | 182 | header { |
| ff50d03 | | | 183 | X-Content-Type-Options nosniff |
| ff50d03 | | | 184 | X-Frame-Options SAMEORIGIN |
| ff50d03 | | | 185 | } |
| ff50d03 | | | 186 | } |
| ff50d03 | | | 187 | |
| ff50d03 | | | 188 | # Grove Pages — custom domains |
| e5b523e | | | 189 | :443 { |
| e5b523e | | | 190 | tls { |
| e5b523e | | | 191 | on_demand |
| e5b523e | | | 192 | } |
| e5b523e | | | 193 | |
| e5b523e | | | 194 | root * /srv/pages/sites/{host} |
| 1688ad1 | | | 195 | file_server browse |
| e5b523e | | | 196 | |
| e5b523e | | | 197 | header { |
| e5b523e | | | 198 | X-Content-Type-Options nosniff |
| e5b523e | | | 199 | X-Frame-Options SAMEORIGIN |
| e5b523e | | | 200 | } |
| e5b523e | | | 201 | } |