| e5b523e | | | 1 | { |
| e5b523e | | | 2 | on_demand_tls { |
| e5b523e | | | 3 | ask http://grove-api:4000/api/pages/ask |
| e5b523e | | | 4 | } |
| e5b523e | | | 5 | } |
| e5b523e | | | 6 | |
| 9ba5911 | | | 7 | thegild.app { |
| cb3a292 | | | 8 | tls /certs/thegild.app.crt /certs/thegild.app.key |
| cb3a292 | | | 9 | |
| f840c8f | | | 10 | reverse_proxy gild-web:3000 |
| 9ba5911 | | | 11 | |
| 9ba5911 | | | 12 | header { |
| 9ba5911 | | | 13 | X-Content-Type-Options nosniff |
| 9ba5911 | | | 14 | X-Frame-Options DENY |
| 9ba5911 | | | 15 | } |
| 9ba5911 | | | 16 | } |
| 9ba5911 | | | 17 | |
| e3e17c8 | | | 18 | staging.thegild.app { |
| cb3a292 | | | 19 | tls /certs/thegild.app.crt /certs/thegild.app.key |
| cb3a292 | | | 20 | |
| f840c8f | | | 21 | reverse_proxy gild-web-staging:3000 |
| e3e17c8 | | | 22 | |
| e3e17c8 | | | 23 | header { |
| e3e17c8 | | | 24 | X-Content-Type-Options nosniff |
| e3e17c8 | | | 25 | X-Frame-Options DENY |
| e3e17c8 | | | 26 | X-Robots-Tag "noindex, nofollow" |
| e3e17c8 | | | 27 | } |
| e3e17c8 | | | 28 | } |
| e3e17c8 | | | 29 | |
| bdb18c9 | | | 30 | collab.{$DOMAIN} { |
| 0b4b582 | | | 31 | handle /socket.io/* { |
| 0b4b582 | | | 32 | reverse_proxy grove-web:3334 |
| 0b4b582 | | | 33 | } |
| 0b4b582 | | | 34 | |
| 0b4b582 | | | 35 | handle /api/auth/* { |
| 0b4b582 | | | 36 | reverse_proxy hub-api:4000 |
| 0b4b582 | | | 37 | } |
| 0b4b582 | | | 38 | |
| 0b4b582 | | | 39 | handle /api/repos { |
| 0b4b582 | | | 40 | reverse_proxy grove-api:4000 |
| 0b4b582 | | | 41 | } |
| 0b4b582 | | | 42 | |
| 0b4b582 | | | 43 | handle /api/repos/* { |
| 0b4b582 | | | 44 | reverse_proxy grove-api:4000 |
| 0b4b582 | | | 45 | } |
| 0b4b582 | | | 46 | |
| 0b4b582 | | | 47 | handle { |
| 0b4b582 | | | 48 | reverse_proxy grove-web:3000 |
| 0b4b582 | | | 49 | } |
| bdb18c9 | | | 50 | |
| bdb18c9 | | | 51 | header { |
| bdb18c9 | | | 52 | X-Content-Type-Options nosniff |
| bdb18c9 | | | 53 | X-Frame-Options DENY |
| bdb18c9 | | | 54 | } |
| bdb18c9 | | | 55 | } |
| bdb18c9 | | | 56 | |
| da0f651 | | | 57 | canopy.{$DOMAIN} { |
| da0f651 | | | 58 | handle /api/auth/* { |
| da0f651 | | | 59 | reverse_proxy hub-api:4000 |
| da0f651 | | | 60 | } |
| da0f651 | | | 61 | |
| 1da9874 | | | 62 | handle /api/canopy/* { |
| 1da9874 | | | 63 | reverse_proxy grove-api:4000 |
| 1da9874 | | | 64 | } |
| 1da9874 | | | 65 | |
| da0f651 | | | 66 | handle /api/repos { |
| da0f651 | | | 67 | reverse_proxy grove-api:4000 |
| da0f651 | | | 68 | } |
| da0f651 | | | 69 | |
| da0f651 | | | 70 | handle /api/repos/* { |
| da0f651 | | | 71 | reverse_proxy grove-api:4000 |
| da0f651 | | | 72 | } |
| da0f651 | | | 73 | |
| da0f651 | | | 74 | handle { |
| da0f651 | | | 75 | reverse_proxy grove-web:3000 |
| da0f651 | | | 76 | } |
| da0f651 | | | 77 | |
| da0f651 | | | 78 | header { |
| da0f651 | | | 79 | X-Content-Type-Options nosniff |
| da0f651 | | | 80 | X-Frame-Options DENY |
| da0f651 | | | 81 | } |
| da0f651 | | | 82 | } |
| da0f651 | | | 83 | |
| fe2e544 | | | 84 | ring.{$DOMAIN} { |
| fe2e544 | | | 85 | handle /api/auth/* { |
| fe2e544 | | | 86 | reverse_proxy hub-api:4000 |
| fe2e544 | | | 87 | } |
| fe2e544 | | | 88 | |
| fe2e544 | | | 89 | handle /api/ring/* { |
| fe2e544 | | | 90 | reverse_proxy grove-api:4000 |
| fe2e544 | | | 91 | } |
| fe2e544 | | | 92 | |
| fe2e544 | | | 93 | handle /api/repos { |
| fe2e544 | | | 94 | reverse_proxy grove-api:4000 |
| fe2e544 | | | 95 | } |
| fe2e544 | | | 96 | |
| fe2e544 | | | 97 | handle /api/repos/* { |
| fe2e544 | | | 98 | reverse_proxy grove-api:4000 |
| fe2e544 | | | 99 | } |
| fe2e544 | | | 100 | |
| fe2e544 | | | 101 | handle { |
| fe2e544 | | | 102 | reverse_proxy grove-web:3000 |
| fe2e544 | | | 103 | } |
| fe2e544 | | | 104 | |
| fe2e544 | | | 105 | header { |
| fe2e544 | | | 106 | X-Content-Type-Options nosniff |
| fe2e544 | | | 107 | X-Frame-Options DENY |
| fe2e544 | | | 108 | } |
| fe2e544 | | | 109 | } |
| fe2e544 | | | 110 | |
| 4bb999b | | | 111 | isl.{$DOMAIN} { |
| 4bb999b | | | 112 | handle /ws { |
| abf167c | | | 113 | reverse_proxy 172.18.0.1:3011 { |
| abf167c | | | 114 | header_down -X-Frame-Options |
| abf167c | | | 115 | } |
| 4bb999b | | | 116 | } |
| 4bb999b | | | 117 | |
| 4bb999b | | | 118 | handle { |
| abf167c | | | 119 | reverse_proxy 172.18.0.1:3011 { |
| abf167c | | | 120 | header_down -X-Frame-Options |
| abf167c | | | 121 | } |
| 4bb999b | | | 122 | } |
| 4bb999b | | | 123 | |
| 4bb999b | | | 124 | header { |
| 4bb999b | | | 125 | X-Content-Type-Options nosniff |
| 7e5aa77 | | | 126 | Content-Security-Policy "frame-ancestors https://grove.host https://*.grove.host http://grove.test:*" |
| 4bb999b | | | 127 | } |
| 4bb999b | | | 128 | } |
| 4bb999b | | | 129 | |
| 135dfe5 | | | 130 | {$DOMAIN} { |
| 5f0fbcf | | | 131 | handle /v2/* { |
| 5f0fbcf | | | 132 | reverse_proxy registry:5000 |
| 5f0fbcf | | | 133 | } |
| 5f0fbcf | | | 134 | |
| 8d0dc12 | | | 135 | handle /api/canopy/* { |
| 8d0dc12 | | | 136 | reverse_proxy grove-api:4000 |
| 8d0dc12 | | | 137 | } |
| 8d0dc12 | | | 138 | |
| f0bb192 | | | 139 | handle /api/auth/* { |
| 135dfe5 | | | 140 | reverse_proxy hub-api:4000 |
| 135dfe5 | | | 141 | } |
| 135dfe5 | | | 142 | |
| 4dfd09b | | | 143 | handle /api/instances { |
| 4dfd09b | | | 144 | reverse_proxy hub-api:4000 |
| 4dfd09b | | | 145 | } |
| 4dfd09b | | | 146 | |
| f0bb192 | | | 147 | handle /api/instances/* { |
| f0bb192 | | | 148 | reverse_proxy hub-api:4000 |
| f0bb192 | | | 149 | } |
| f0bb192 | | | 150 | |
| 79efd41 | | | 151 | handle /api/orgs { |
| 79efd41 | | | 152 | reverse_proxy hub-api:4000 |
| 79efd41 | | | 153 | } |
| 79efd41 | | | 154 | |
| 79efd41 | | | 155 | handle /api/orgs/* { |
| 79efd41 | | | 156 | reverse_proxy hub-api:4000 |
| 79efd41 | | | 157 | } |
| 79efd41 | | | 158 | |
| ffa10b4 | | | 159 | handle /api/repos { |
| ffa10b4 | | | 160 | reverse_proxy grove-api:4000 |
| ffa10b4 | | | 161 | } |
| ffa10b4 | | | 162 | |
| f0bb192 | | | 163 | handle /api/repos/* { |
| f0bb192 | | | 164 | reverse_proxy grove-api:4000 |
| f0bb192 | | | 165 | } |
| f0bb192 | | | 166 | |
| 85f7497 | | | 167 | handle /api/pages/* { |
| 85f7497 | | | 168 | reverse_proxy grove-api:4000 |
| 85f7497 | | | 169 | } |
| 85f7497 | | | 170 | |
| 4ae9b20 | | | 171 | handle /downloads/* { |
| 4ae9b20 | | | 172 | root * /srv |
| 4ae9b20 | | | 173 | file_server |
| 4ae9b20 | | | 174 | } |
| 4ae9b20 | | | 175 | |
| 135dfe5 | | | 176 | handle /health { |
| 135dfe5 | | | 177 | reverse_proxy hub-api:4000 |
| 135dfe5 | | | 178 | } |
| 135dfe5 | | | 179 | |
| 135dfe5 | | | 180 | handle { |
| 4a006da | | | 181 | reverse_proxy grove-web:3000 |
| 135dfe5 | | | 182 | } |
| 135dfe5 | | | 183 | |
| 135dfe5 | | | 184 | header { |
| 135dfe5 | | | 185 | X-Content-Type-Options nosniff |
| 135dfe5 | | | 186 | X-Frame-Options DENY |
| 135dfe5 | | | 187 | } |
| 135dfe5 | | | 188 | } |
| e5b523e | | | 189 | |
| ff50d03 | | | 190 | # Grove Pages — path-based default hosting at pages.grove.host/{owner}/{repo} |
| ff50d03 | | | 191 | pages.{$DOMAIN} { |
| ff50d03 | | | 192 | root * /srv/pages/sites/_pages |
| ff50d03 | | | 193 | file_server browse |
| ff50d03 | | | 194 | |
| ff50d03 | | | 195 | header { |
| ff50d03 | | | 196 | X-Content-Type-Options nosniff |
| ff50d03 | | | 197 | X-Frame-Options SAMEORIGIN |
| ff50d03 | | | 198 | } |
| ff50d03 | | | 199 | } |
| ff50d03 | | | 200 | |
| ff50d03 | | | 201 | # Grove Pages — custom domains |
| e5b523e | | | 202 | :443 { |
| e5b523e | | | 203 | tls { |
| e5b523e | | | 204 | on_demand |
| e5b523e | | | 205 | } |
| e5b523e | | | 206 | |
| e5b523e | | | 207 | root * /srv/pages/sites/{host} |
| 1688ad1 | | | 208 | file_server browse |
| e5b523e | | | 209 | |
| e5b523e | | | 210 | header { |
| e5b523e | | | 211 | X-Content-Type-Options nosniff |
| e5b523e | | | 212 | X-Frame-Options SAMEORIGIN |
| e5b523e | | | 213 | } |
| e5b523e | | | 214 | } |