| e5b523e | | | 1 | { |
| e5b523e | | | 2 | on_demand_tls { |
| e5b523e | | | 3 | ask http://grove-api:4000/api/pages/ask |
| e5b523e | | | 4 | } |
| e5b523e | | | 5 | } |
| e5b523e | | | 6 | |
| 9ba5911 | | | 7 | thegild.app { |
| 9ba5911 | | | 8 | root * /opt/gild/web |
| 9ba5911 | | | 9 | file_server |
| 9ba5911 | | | 10 | |
| 9ba5911 | | | 11 | header { |
| 9ba5911 | | | 12 | X-Content-Type-Options nosniff |
| 9ba5911 | | | 13 | X-Frame-Options DENY |
| 9ba5911 | | | 14 | } |
| 9ba5911 | | | 15 | } |
| 9ba5911 | | | 16 | |
| e3e17c8 | | | 17 | staging.thegild.app { |
| e3e17c8 | | | 18 | root * /opt/gild-staging/web |
| e3e17c8 | | | 19 | file_server |
| e3e17c8 | | | 20 | |
| e3e17c8 | | | 21 | header { |
| e3e17c8 | | | 22 | X-Content-Type-Options nosniff |
| e3e17c8 | | | 23 | X-Frame-Options DENY |
| e3e17c8 | | | 24 | X-Robots-Tag "noindex, nofollow" |
| e3e17c8 | | | 25 | } |
| e3e17c8 | | | 26 | } |
| e3e17c8 | | | 27 | |
| bdb18c9 | | | 28 | collab.{$DOMAIN} { |
| 0b4b582 | | | 29 | handle /socket.io/* { |
| 0b4b582 | | | 30 | reverse_proxy grove-web:3334 |
| 0b4b582 | | | 31 | } |
| 0b4b582 | | | 32 | |
| 0b4b582 | | | 33 | handle /api/auth/* { |
| 0b4b582 | | | 34 | reverse_proxy hub-api:4000 |
| 0b4b582 | | | 35 | } |
| 0b4b582 | | | 36 | |
| 0b4b582 | | | 37 | handle /api/repos { |
| 0b4b582 | | | 38 | reverse_proxy grove-api:4000 |
| 0b4b582 | | | 39 | } |
| 0b4b582 | | | 40 | |
| 0b4b582 | | | 41 | handle /api/repos/* { |
| 0b4b582 | | | 42 | reverse_proxy grove-api:4000 |
| 0b4b582 | | | 43 | } |
| 0b4b582 | | | 44 | |
| 0b4b582 | | | 45 | handle { |
| 0b4b582 | | | 46 | reverse_proxy grove-web:3000 |
| 0b4b582 | | | 47 | } |
| bdb18c9 | | | 48 | |
| bdb18c9 | | | 49 | header { |
| bdb18c9 | | | 50 | X-Content-Type-Options nosniff |
| bdb18c9 | | | 51 | X-Frame-Options DENY |
| bdb18c9 | | | 52 | } |
| bdb18c9 | | | 53 | } |
| bdb18c9 | | | 54 | |
| da0f651 | | | 55 | canopy.{$DOMAIN} { |
| da0f651 | | | 56 | handle /api/auth/* { |
| da0f651 | | | 57 | reverse_proxy hub-api:4000 |
| da0f651 | | | 58 | } |
| da0f651 | | | 59 | |
| 1da9874 | | | 60 | handle /api/canopy/* { |
| 1da9874 | | | 61 | reverse_proxy grove-api:4000 |
| 1da9874 | | | 62 | } |
| 1da9874 | | | 63 | |
| da0f651 | | | 64 | handle /api/repos { |
| da0f651 | | | 65 | reverse_proxy grove-api:4000 |
| da0f651 | | | 66 | } |
| da0f651 | | | 67 | |
| da0f651 | | | 68 | handle /api/repos/* { |
| da0f651 | | | 69 | reverse_proxy grove-api:4000 |
| da0f651 | | | 70 | } |
| da0f651 | | | 71 | |
| da0f651 | | | 72 | handle { |
| da0f651 | | | 73 | reverse_proxy grove-web:3000 |
| da0f651 | | | 74 | } |
| da0f651 | | | 75 | |
| da0f651 | | | 76 | header { |
| da0f651 | | | 77 | X-Content-Type-Options nosniff |
| da0f651 | | | 78 | X-Frame-Options DENY |
| da0f651 | | | 79 | } |
| da0f651 | | | 80 | } |
| da0f651 | | | 81 | |
| fe2e544 | | | 82 | ring.{$DOMAIN} { |
| fe2e544 | | | 83 | handle /api/auth/* { |
| fe2e544 | | | 84 | reverse_proxy hub-api:4000 |
| fe2e544 | | | 85 | } |
| fe2e544 | | | 86 | |
| fe2e544 | | | 87 | handle /api/ring/* { |
| fe2e544 | | | 88 | reverse_proxy grove-api:4000 |
| fe2e544 | | | 89 | } |
| fe2e544 | | | 90 | |
| fe2e544 | | | 91 | handle /api/repos { |
| fe2e544 | | | 92 | reverse_proxy grove-api:4000 |
| fe2e544 | | | 93 | } |
| fe2e544 | | | 94 | |
| fe2e544 | | | 95 | handle /api/repos/* { |
| fe2e544 | | | 96 | reverse_proxy grove-api:4000 |
| fe2e544 | | | 97 | } |
| fe2e544 | | | 98 | |
| fe2e544 | | | 99 | handle { |
| fe2e544 | | | 100 | reverse_proxy grove-web:3000 |
| fe2e544 | | | 101 | } |
| fe2e544 | | | 102 | |
| fe2e544 | | | 103 | header { |
| fe2e544 | | | 104 | X-Content-Type-Options nosniff |
| fe2e544 | | | 105 | X-Frame-Options DENY |
| fe2e544 | | | 106 | } |
| fe2e544 | | | 107 | } |
| fe2e544 | | | 108 | |
| 4bb999b | | | 109 | isl.{$DOMAIN} { |
| 4bb999b | | | 110 | handle /ws { |
| abf167c | | | 111 | reverse_proxy 172.18.0.1:3011 { |
| abf167c | | | 112 | header_down -X-Frame-Options |
| abf167c | | | 113 | } |
| 4bb999b | | | 114 | } |
| 4bb999b | | | 115 | |
| 4bb999b | | | 116 | handle { |
| abf167c | | | 117 | reverse_proxy 172.18.0.1:3011 { |
| abf167c | | | 118 | header_down -X-Frame-Options |
| abf167c | | | 119 | } |
| 4bb999b | | | 120 | } |
| 4bb999b | | | 121 | |
| 4bb999b | | | 122 | header { |
| 4bb999b | | | 123 | X-Content-Type-Options nosniff |
| 7e5aa77 | | | 124 | Content-Security-Policy "frame-ancestors https://grove.host https://*.grove.host http://grove.test:*" |
| 4bb999b | | | 125 | } |
| 4bb999b | | | 126 | } |
| 4bb999b | | | 127 | |
| 135dfe5 | | | 128 | {$DOMAIN} { |
| 5f0fbcf | | | 129 | handle /v2/* { |
| 5f0fbcf | | | 130 | reverse_proxy registry:5000 |
| 5f0fbcf | | | 131 | } |
| 5f0fbcf | | | 132 | |
| 8d0dc12 | | | 133 | handle /api/canopy/* { |
| 8d0dc12 | | | 134 | reverse_proxy grove-api:4000 |
| 8d0dc12 | | | 135 | } |
| 8d0dc12 | | | 136 | |
| f0bb192 | | | 137 | handle /api/auth/* { |
| 135dfe5 | | | 138 | reverse_proxy hub-api:4000 |
| 135dfe5 | | | 139 | } |
| 135dfe5 | | | 140 | |
| 4dfd09b | | | 141 | handle /api/instances { |
| 4dfd09b | | | 142 | reverse_proxy hub-api:4000 |
| 4dfd09b | | | 143 | } |
| 4dfd09b | | | 144 | |
| f0bb192 | | | 145 | handle /api/instances/* { |
| f0bb192 | | | 146 | reverse_proxy hub-api:4000 |
| f0bb192 | | | 147 | } |
| f0bb192 | | | 148 | |
| 79efd41 | | | 149 | handle /api/orgs { |
| 79efd41 | | | 150 | reverse_proxy hub-api:4000 |
| 79efd41 | | | 151 | } |
| 79efd41 | | | 152 | |
| 79efd41 | | | 153 | handle /api/orgs/* { |
| 79efd41 | | | 154 | reverse_proxy hub-api:4000 |
| 79efd41 | | | 155 | } |
| 79efd41 | | | 156 | |
| ffa10b4 | | | 157 | handle /api/repos { |
| ffa10b4 | | | 158 | reverse_proxy grove-api:4000 |
| ffa10b4 | | | 159 | } |
| ffa10b4 | | | 160 | |
| f0bb192 | | | 161 | handle /api/repos/* { |
| f0bb192 | | | 162 | reverse_proxy grove-api:4000 |
| f0bb192 | | | 163 | } |
| f0bb192 | | | 164 | |
| 85f7497 | | | 165 | handle /api/pages/* { |
| 85f7497 | | | 166 | reverse_proxy grove-api:4000 |
| 85f7497 | | | 167 | } |
| 85f7497 | | | 168 | |
| 4ae9b20 | | | 169 | handle /downloads/* { |
| 4ae9b20 | | | 170 | root * /srv |
| 4ae9b20 | | | 171 | file_server |
| 4ae9b20 | | | 172 | } |
| 4ae9b20 | | | 173 | |
| 135dfe5 | | | 174 | handle /health { |
| 135dfe5 | | | 175 | reverse_proxy hub-api:4000 |
| 135dfe5 | | | 176 | } |
| 135dfe5 | | | 177 | |
| 135dfe5 | | | 178 | handle { |
| 4a006da | | | 179 | reverse_proxy grove-web:3000 |
| 135dfe5 | | | 180 | } |
| 135dfe5 | | | 181 | |
| 135dfe5 | | | 182 | header { |
| 135dfe5 | | | 183 | X-Content-Type-Options nosniff |
| 135dfe5 | | | 184 | X-Frame-Options DENY |
| 135dfe5 | | | 185 | } |
| 135dfe5 | | | 186 | } |
| e5b523e | | | 187 | |
| ff50d03 | | | 188 | # Grove Pages — path-based default hosting at pages.grove.host/{owner}/{repo} |
| ff50d03 | | | 189 | pages.{$DOMAIN} { |
| ff50d03 | | | 190 | root * /srv/pages/sites/_pages |
| ff50d03 | | | 191 | file_server browse |
| ff50d03 | | | 192 | |
| ff50d03 | | | 193 | header { |
| ff50d03 | | | 194 | X-Content-Type-Options nosniff |
| ff50d03 | | | 195 | X-Frame-Options SAMEORIGIN |
| ff50d03 | | | 196 | } |
| ff50d03 | | | 197 | } |
| ff50d03 | | | 198 | |
| ff50d03 | | | 199 | # Grove Pages — custom domains |
| e5b523e | | | 200 | :443 { |
| e5b523e | | | 201 | tls { |
| e5b523e | | | 202 | on_demand |
| e5b523e | | | 203 | } |
| e5b523e | | | 204 | |
| e5b523e | | | 205 | root * /srv/pages/sites/{host} |
| 1688ad1 | | | 206 | file_server browse |
| e5b523e | | | 207 | |
| e5b523e | | | 208 | header { |
| e5b523e | | | 209 | X-Content-Type-Options nosniff |
| e5b523e | | | 210 | X-Frame-Options SAMEORIGIN |
| e5b523e | | | 211 | } |
| e5b523e | | | 212 | } |