| e5b523e | | | 1 | { |
| e5b523e | | | 2 | on_demand_tls { |
| e5b523e | | | 3 | ask http://grove-api:4000/api/pages/ask |
| e5b523e | | | 4 | } |
| e5b523e | | | 5 | } |
| e5b523e | | | 6 | |
| 9ba5911 | | | 7 | thegild.app { |
| cb3a292 | | | 8 | tls /certs/thegild.app.crt /certs/thegild.app.key |
| cb3a292 | | | 9 | |
| f840c8f | | | 10 | reverse_proxy gild-web:3000 |
| 9ba5911 | | | 11 | |
| 9ba5911 | | | 12 | header { |
| 9ba5911 | | | 13 | X-Content-Type-Options nosniff |
| 9ba5911 | | | 14 | X-Frame-Options DENY |
| 9ba5911 | | | 15 | } |
| 9ba5911 | | | 16 | } |
| 9ba5911 | | | 17 | |
| bdb18c9 | | | 18 | collab.{$DOMAIN} { |
| 0b4b582 | | | 19 | handle /socket.io/* { |
| 0b4b582 | | | 20 | reverse_proxy grove-web:3334 |
| 0b4b582 | | | 21 | } |
| 0b4b582 | | | 22 | |
| 0b4b582 | | | 23 | handle /api/auth/* { |
| 0b4b582 | | | 24 | reverse_proxy hub-api:4000 |
| 0b4b582 | | | 25 | } |
| 0b4b582 | | | 26 | |
| 0b4b582 | | | 27 | handle /api/repos { |
| 0b4b582 | | | 28 | reverse_proxy grove-api:4000 |
| 0b4b582 | | | 29 | } |
| 0b4b582 | | | 30 | |
| 0b4b582 | | | 31 | handle /api/repos/* { |
| 0b4b582 | | | 32 | reverse_proxy grove-api:4000 |
| 0b4b582 | | | 33 | } |
| 0b4b582 | | | 34 | |
| 0b4b582 | | | 35 | handle { |
| 0b4b582 | | | 36 | reverse_proxy grove-web:3000 |
| 0b4b582 | | | 37 | } |
| bdb18c9 | | | 38 | |
| bdb18c9 | | | 39 | header { |
| bdb18c9 | | | 40 | X-Content-Type-Options nosniff |
| bdb18c9 | | | 41 | X-Frame-Options DENY |
| bdb18c9 | | | 42 | } |
| bdb18c9 | | | 43 | } |
| bdb18c9 | | | 44 | |
| da0f651 | | | 45 | canopy.{$DOMAIN} { |
| da0f651 | | | 46 | handle /api/auth/* { |
| da0f651 | | | 47 | reverse_proxy hub-api:4000 |
| da0f651 | | | 48 | } |
| da0f651 | | | 49 | |
| 1da9874 | | | 50 | handle /api/canopy/* { |
| 1da9874 | | | 51 | reverse_proxy grove-api:4000 |
| 1da9874 | | | 52 | } |
| 1da9874 | | | 53 | |
| da0f651 | | | 54 | handle /api/repos { |
| da0f651 | | | 55 | reverse_proxy grove-api:4000 |
| da0f651 | | | 56 | } |
| da0f651 | | | 57 | |
| da0f651 | | | 58 | handle /api/repos/* { |
| da0f651 | | | 59 | reverse_proxy grove-api:4000 |
| da0f651 | | | 60 | } |
| da0f651 | | | 61 | |
| da0f651 | | | 62 | handle { |
| da0f651 | | | 63 | reverse_proxy grove-web:3000 |
| da0f651 | | | 64 | } |
| da0f651 | | | 65 | |
| da0f651 | | | 66 | header { |
| da0f651 | | | 67 | X-Content-Type-Options nosniff |
| da0f651 | | | 68 | X-Frame-Options DENY |
| da0f651 | | | 69 | } |
| da0f651 | | | 70 | } |
| da0f651 | | | 71 | |
| fe2e544 | | | 72 | ring.{$DOMAIN} { |
| fe2e544 | | | 73 | handle /api/auth/* { |
| fe2e544 | | | 74 | reverse_proxy hub-api:4000 |
| fe2e544 | | | 75 | } |
| fe2e544 | | | 76 | |
| fe2e544 | | | 77 | handle /api/ring/* { |
| fe2e544 | | | 78 | reverse_proxy grove-api:4000 |
| fe2e544 | | | 79 | } |
| fe2e544 | | | 80 | |
| fe2e544 | | | 81 | handle /api/repos { |
| fe2e544 | | | 82 | reverse_proxy grove-api:4000 |
| fe2e544 | | | 83 | } |
| fe2e544 | | | 84 | |
| fe2e544 | | | 85 | handle /api/repos/* { |
| fe2e544 | | | 86 | reverse_proxy grove-api:4000 |
| fe2e544 | | | 87 | } |
| fe2e544 | | | 88 | |
| fe2e544 | | | 89 | handle { |
| fe2e544 | | | 90 | reverse_proxy grove-web:3000 |
| fe2e544 | | | 91 | } |
| fe2e544 | | | 92 | |
| fe2e544 | | | 93 | header { |
| fe2e544 | | | 94 | X-Content-Type-Options nosniff |
| fe2e544 | | | 95 | X-Frame-Options DENY |
| fe2e544 | | | 96 | } |
| fe2e544 | | | 97 | } |
| fe2e544 | | | 98 | |
| 4bb999b | | | 99 | isl.{$DOMAIN} { |
| 4bb999b | | | 100 | handle /ws { |
| abf167c | | | 101 | reverse_proxy 172.18.0.1:3011 { |
| abf167c | | | 102 | header_down -X-Frame-Options |
| abf167c | | | 103 | } |
| 4bb999b | | | 104 | } |
| 4bb999b | | | 105 | |
| 4bb999b | | | 106 | handle { |
| abf167c | | | 107 | reverse_proxy 172.18.0.1:3011 { |
| abf167c | | | 108 | header_down -X-Frame-Options |
| abf167c | | | 109 | } |
| 4bb999b | | | 110 | } |
| 4bb999b | | | 111 | |
| 4bb999b | | | 112 | header { |
| 4bb999b | | | 113 | X-Content-Type-Options nosniff |
| 7e5aa77 | | | 114 | Content-Security-Policy "frame-ancestors https://grove.host https://*.grove.host http://grove.test:*" |
| 4bb999b | | | 115 | } |
| 4bb999b | | | 116 | } |
| 4bb999b | | | 117 | |
| 135dfe5 | | | 118 | {$DOMAIN} { |
| 5f0fbcf | | | 119 | handle /v2/* { |
| 5f0fbcf | | | 120 | reverse_proxy registry:5000 |
| 5f0fbcf | | | 121 | } |
| 5f0fbcf | | | 122 | |
| 8d0dc12 | | | 123 | handle /api/canopy/* { |
| 8d0dc12 | | | 124 | reverse_proxy grove-api:4000 |
| 8d0dc12 | | | 125 | } |
| 8d0dc12 | | | 126 | |
| f0bb192 | | | 127 | handle /api/auth/* { |
| 135dfe5 | | | 128 | reverse_proxy hub-api:4000 |
| 135dfe5 | | | 129 | } |
| 135dfe5 | | | 130 | |
| 4dfd09b | | | 131 | handle /api/instances { |
| 4dfd09b | | | 132 | reverse_proxy hub-api:4000 |
| 4dfd09b | | | 133 | } |
| 4dfd09b | | | 134 | |
| f0bb192 | | | 135 | handle /api/instances/* { |
| f0bb192 | | | 136 | reverse_proxy hub-api:4000 |
| f0bb192 | | | 137 | } |
| f0bb192 | | | 138 | |
| 79efd41 | | | 139 | handle /api/orgs { |
| 79efd41 | | | 140 | reverse_proxy hub-api:4000 |
| 79efd41 | | | 141 | } |
| 79efd41 | | | 142 | |
| 79efd41 | | | 143 | handle /api/orgs/* { |
| 79efd41 | | | 144 | reverse_proxy hub-api:4000 |
| 79efd41 | | | 145 | } |
| 79efd41 | | | 146 | |
| ffa10b4 | | | 147 | handle /api/repos { |
| ffa10b4 | | | 148 | reverse_proxy grove-api:4000 |
| ffa10b4 | | | 149 | } |
| ffa10b4 | | | 150 | |
| f0bb192 | | | 151 | handle /api/repos/* { |
| f0bb192 | | | 152 | reverse_proxy grove-api:4000 |
| f0bb192 | | | 153 | } |
| f0bb192 | | | 154 | |
| 85f7497 | | | 155 | handle /api/pages/* { |
| 85f7497 | | | 156 | reverse_proxy grove-api:4000 |
| 85f7497 | | | 157 | } |
| 85f7497 | | | 158 | |
| 4ae9b20 | | | 159 | handle /downloads/* { |
| 4ae9b20 | | | 160 | root * /srv |
| 4ae9b20 | | | 161 | file_server |
| 4ae9b20 | | | 162 | } |
| 4ae9b20 | | | 163 | |
| 135dfe5 | | | 164 | handle /health { |
| 135dfe5 | | | 165 | reverse_proxy hub-api:4000 |
| 135dfe5 | | | 166 | } |
| 135dfe5 | | | 167 | |
| 135dfe5 | | | 168 | handle { |
| 4a006da | | | 169 | reverse_proxy grove-web:3000 |
| 135dfe5 | | | 170 | } |
| 135dfe5 | | | 171 | |
| 135dfe5 | | | 172 | header { |
| 135dfe5 | | | 173 | X-Content-Type-Options nosniff |
| 135dfe5 | | | 174 | X-Frame-Options DENY |
| 135dfe5 | | | 175 | } |
| 135dfe5 | | | 176 | } |
| e5b523e | | | 177 | |
| ff50d03 | | | 178 | # Grove Pages — path-based default hosting at pages.grove.host/{owner}/{repo} |
| ff50d03 | | | 179 | pages.{$DOMAIN} { |
| ff50d03 | | | 180 | root * /srv/pages/sites/_pages |
| ff50d03 | | | 181 | file_server browse |
| ff50d03 | | | 182 | |
| ff50d03 | | | 183 | header { |
| ff50d03 | | | 184 | X-Content-Type-Options nosniff |
| ff50d03 | | | 185 | X-Frame-Options SAMEORIGIN |
| ff50d03 | | | 186 | } |
| ff50d03 | | | 187 | } |
| ff50d03 | | | 188 | |
| ff50d03 | | | 189 | # Grove Pages — custom domains |
| e5b523e | | | 190 | :443 { |
| e5b523e | | | 191 | tls { |
| e5b523e | | | 192 | on_demand |
| e5b523e | | | 193 | } |
| e5b523e | | | 194 | |
| e5b523e | | | 195 | root * /srv/pages/sites/{host} |
| 1688ad1 | | | 196 | file_server browse |
| e5b523e | | | 197 | |
| e5b523e | | | 198 | header { |
| e5b523e | | | 199 | X-Content-Type-Options nosniff |
| e5b523e | | | 200 | X-Frame-Options SAMEORIGIN |
| e5b523e | | | 201 | } |
| e5b523e | | | 202 | } |