| e5b523e | | | 1 | { |
| e5b523e | | | 2 | on_demand_tls { |
| e5b523e | | | 3 | ask http://grove-api:4000/api/pages/ask |
| e5b523e | | | 4 | } |
| e5b523e | | | 5 | } |
| e5b523e | | | 6 | |
| bdb18c9 | | | 7 | collab.{$DOMAIN} { |
| 0b4b582 | | | 8 | handle /socket.io/* { |
| 0b4b582 | | | 9 | reverse_proxy grove-web:3334 |
| 0b4b582 | | | 10 | } |
| 0b4b582 | | | 11 | |
| 0b4b582 | | | 12 | handle /api/auth/* { |
| 0b4b582 | | | 13 | reverse_proxy hub-api:4000 |
| 0b4b582 | | | 14 | } |
| 0b4b582 | | | 15 | |
| 0b4b582 | | | 16 | handle /api/repos { |
| 0b4b582 | | | 17 | reverse_proxy grove-api:4000 |
| 0b4b582 | | | 18 | } |
| 0b4b582 | | | 19 | |
| 0b4b582 | | | 20 | handle /api/repos/* { |
| 0b4b582 | | | 21 | reverse_proxy grove-api:4000 |
| 0b4b582 | | | 22 | } |
| 0b4b582 | | | 23 | |
| 0b4b582 | | | 24 | handle { |
| 0b4b582 | | | 25 | reverse_proxy grove-web:3000 |
| 0b4b582 | | | 26 | } |
| bdb18c9 | | | 27 | |
| bdb18c9 | | | 28 | header { |
| bdb18c9 | | | 29 | X-Content-Type-Options nosniff |
| bdb18c9 | | | 30 | X-Frame-Options DENY |
| bdb18c9 | | | 31 | } |
| bdb18c9 | | | 32 | } |
| bdb18c9 | | | 33 | |
| da0f651 | | | 34 | canopy.{$DOMAIN} { |
| da0f651 | | | 35 | handle /api/auth/* { |
| da0f651 | | | 36 | reverse_proxy hub-api:4000 |
| da0f651 | | | 37 | } |
| da0f651 | | | 38 | |
| 1da9874 | | | 39 | handle /api/canopy/* { |
| 1da9874 | | | 40 | reverse_proxy grove-api:4000 |
| 1da9874 | | | 41 | } |
| 1da9874 | | | 42 | |
| da0f651 | | | 43 | handle /api/repos { |
| da0f651 | | | 44 | reverse_proxy grove-api:4000 |
| da0f651 | | | 45 | } |
| da0f651 | | | 46 | |
| da0f651 | | | 47 | handle /api/repos/* { |
| da0f651 | | | 48 | reverse_proxy grove-api:4000 |
| da0f651 | | | 49 | } |
| da0f651 | | | 50 | |
| da0f651 | | | 51 | handle { |
| da0f651 | | | 52 | reverse_proxy grove-web:3000 |
| da0f651 | | | 53 | } |
| da0f651 | | | 54 | |
| da0f651 | | | 55 | header { |
| da0f651 | | | 56 | X-Content-Type-Options nosniff |
| da0f651 | | | 57 | X-Frame-Options DENY |
| da0f651 | | | 58 | } |
| da0f651 | | | 59 | } |
| da0f651 | | | 60 | |
| fe2e544 | | | 61 | ring.{$DOMAIN} { |
| fe2e544 | | | 62 | handle /api/auth/* { |
| fe2e544 | | | 63 | reverse_proxy hub-api:4000 |
| fe2e544 | | | 64 | } |
| fe2e544 | | | 65 | |
| fe2e544 | | | 66 | handle /api/ring/* { |
| fe2e544 | | | 67 | reverse_proxy grove-api:4000 |
| fe2e544 | | | 68 | } |
| fe2e544 | | | 69 | |
| fe2e544 | | | 70 | handle /api/repos { |
| fe2e544 | | | 71 | reverse_proxy grove-api:4000 |
| fe2e544 | | | 72 | } |
| fe2e544 | | | 73 | |
| fe2e544 | | | 74 | handle /api/repos/* { |
| fe2e544 | | | 75 | reverse_proxy grove-api:4000 |
| fe2e544 | | | 76 | } |
| fe2e544 | | | 77 | |
| fe2e544 | | | 78 | handle { |
| fe2e544 | | | 79 | reverse_proxy grove-web:3000 |
| fe2e544 | | | 80 | } |
| fe2e544 | | | 81 | |
| fe2e544 | | | 82 | header { |
| fe2e544 | | | 83 | X-Content-Type-Options nosniff |
| fe2e544 | | | 84 | X-Frame-Options DENY |
| fe2e544 | | | 85 | } |
| fe2e544 | | | 86 | } |
| fe2e544 | | | 87 | |
| 4bb999b | | | 88 | isl.{$DOMAIN} { |
| 4bb999b | | | 89 | handle /ws { |
| abf167c | | | 90 | reverse_proxy 172.18.0.1:3011 { |
| abf167c | | | 91 | header_down -X-Frame-Options |
| abf167c | | | 92 | } |
| 4bb999b | | | 93 | } |
| 4bb999b | | | 94 | |
| 4bb999b | | | 95 | handle { |
| abf167c | | | 96 | reverse_proxy 172.18.0.1:3011 { |
| abf167c | | | 97 | header_down -X-Frame-Options |
| abf167c | | | 98 | } |
| 4bb999b | | | 99 | } |
| 4bb999b | | | 100 | |
| 4bb999b | | | 101 | header { |
| 4bb999b | | | 102 | X-Content-Type-Options nosniff |
| 7e5aa77 | | | 103 | Content-Security-Policy "frame-ancestors https://grove.host https://*.grove.host http://grove.test:*" |
| 4bb999b | | | 104 | } |
| 4bb999b | | | 105 | } |
| 4bb999b | | | 106 | |
| 135dfe5 | | | 107 | {$DOMAIN} { |
| 5f0fbcf | | | 108 | handle /v2/* { |
| 5f0fbcf | | | 109 | reverse_proxy registry:5000 |
| 5f0fbcf | | | 110 | } |
| 5f0fbcf | | | 111 | |
| 8d0dc12 | | | 112 | handle /api/canopy/* { |
| 8d0dc12 | | | 113 | reverse_proxy grove-api:4000 |
| 8d0dc12 | | | 114 | } |
| 8d0dc12 | | | 115 | |
| f0bb192 | | | 116 | handle /api/auth/* { |
| 135dfe5 | | | 117 | reverse_proxy hub-api:4000 |
| 135dfe5 | | | 118 | } |
| 135dfe5 | | | 119 | |
| 4dfd09b | | | 120 | handle /api/instances { |
| 4dfd09b | | | 121 | reverse_proxy hub-api:4000 |
| 4dfd09b | | | 122 | } |
| 4dfd09b | | | 123 | |
| f0bb192 | | | 124 | handle /api/instances/* { |
| f0bb192 | | | 125 | reverse_proxy hub-api:4000 |
| f0bb192 | | | 126 | } |
| f0bb192 | | | 127 | |
| 79efd41 | | | 128 | handle /api/orgs { |
| 79efd41 | | | 129 | reverse_proxy hub-api:4000 |
| 79efd41 | | | 130 | } |
| 79efd41 | | | 131 | |
| 79efd41 | | | 132 | handle /api/orgs/* { |
| 79efd41 | | | 133 | reverse_proxy hub-api:4000 |
| 79efd41 | | | 134 | } |
| 79efd41 | | | 135 | |
| ffa10b4 | | | 136 | handle /api/repos { |
| ffa10b4 | | | 137 | reverse_proxy grove-api:4000 |
| ffa10b4 | | | 138 | } |
| ffa10b4 | | | 139 | |
| f0bb192 | | | 140 | handle /api/repos/* { |
| f0bb192 | | | 141 | reverse_proxy grove-api:4000 |
| f0bb192 | | | 142 | } |
| f0bb192 | | | 143 | |
| 85f7497 | | | 144 | handle /api/pages/* { |
| 85f7497 | | | 145 | reverse_proxy grove-api:4000 |
| 85f7497 | | | 146 | } |
| 85f7497 | | | 147 | |
| 4ae9b20 | | | 148 | handle /downloads/* { |
| 4ae9b20 | | | 149 | root * /srv |
| 4ae9b20 | | | 150 | file_server |
| 4ae9b20 | | | 151 | } |
| 4ae9b20 | | | 152 | |
| 135dfe5 | | | 153 | handle /health { |
| 135dfe5 | | | 154 | reverse_proxy hub-api:4000 |
| 135dfe5 | | | 155 | } |
| 135dfe5 | | | 156 | |
| 135dfe5 | | | 157 | handle { |
| 4a006da | | | 158 | reverse_proxy grove-web:3000 |
| 135dfe5 | | | 159 | } |
| 135dfe5 | | | 160 | |
| 135dfe5 | | | 161 | header { |
| 135dfe5 | | | 162 | X-Content-Type-Options nosniff |
| 135dfe5 | | | 163 | X-Frame-Options DENY |
| 135dfe5 | | | 164 | } |
| 135dfe5 | | | 165 | } |
| e5b523e | | | 166 | |
| ff50d03 | | | 167 | # Grove Pages — path-based default hosting at pages.grove.host/{owner}/{repo} |
| ff50d03 | | | 168 | pages.{$DOMAIN} { |
| ff50d03 | | | 169 | root * /srv/pages/sites/_pages |
| ff50d03 | | | 170 | file_server browse |
| ff50d03 | | | 171 | |
| ff50d03 | | | 172 | header { |
| ff50d03 | | | 173 | X-Content-Type-Options nosniff |
| ff50d03 | | | 174 | X-Frame-Options SAMEORIGIN |
| ff50d03 | | | 175 | } |
| ff50d03 | | | 176 | } |
| ff50d03 | | | 177 | |
| ff50d03 | | | 178 | # Grove Pages — custom domains |
| e5b523e | | | 179 | :443 { |
| e5b523e | | | 180 | tls { |
| e5b523e | | | 181 | on_demand |
| e5b523e | | | 182 | } |
| e5b523e | | | 183 | |
| e5b523e | | | 184 | root * /srv/pages/sites/{host} |
| 1688ad1 | | | 185 | file_server browse |
| e5b523e | | | 186 | |
| e5b523e | | | 187 | header { |
| e5b523e | | | 188 | X-Content-Type-Options nosniff |
| e5b523e | | | 189 | X-Frame-Options SAMEORIGIN |
| e5b523e | | | 190 | } |
| e5b523e | | | 191 | } |