mirror of
https://github.com/NginxProxyManager/nginx-proxy-manager.git
synced 2025-08-16 13:56:52 +00:00
2f8097cdd4
HSTS is defined at the server level and re-adding the host at the location prevents inheritance from the advanced config include. Per the NGINX documentation, "These directives are inherited from the previous configuration level if and only if there are no add_header directives defined on the current level."
69 lines
1.6 KiB
Plaintext
69 lines
1.6 KiB
Plaintext
{% include "_header_comment.conf" %}
|
|
|
|
{% if enabled %}
|
|
server {
|
|
set $forward_scheme {{ forward_scheme }};
|
|
set $server "{{ forward_host }}";
|
|
set $port {{ forward_port }};
|
|
|
|
{% include "_listen.conf" %}
|
|
{% include "_certificates.conf" %}
|
|
{% include "_assets.conf" %}
|
|
{% include "_exploits.conf" %}
|
|
{% include "_hsts.conf" %}
|
|
{% include "_forced_ssl.conf" %}
|
|
|
|
{% if allow_websocket_upgrade == 1 or allow_websocket_upgrade == true %}
|
|
proxy_set_header Upgrade $http_upgrade;
|
|
proxy_set_header Connection $http_connection;
|
|
proxy_http_version 1.1;
|
|
{% endif %}
|
|
|
|
access_log /data/logs/proxy-host-{{ id }}_access.log proxy;
|
|
error_log /data/logs/proxy-host-{{ id }}_error.log warn;
|
|
|
|
{{ advanced_config }}
|
|
|
|
{{ locations }}
|
|
|
|
{% if use_default_location %}
|
|
|
|
location / {
|
|
|
|
{% if access_list_id > 0 %}
|
|
{% if access_list.items.length > 0 %}
|
|
# Authorization
|
|
auth_basic "Authorization required";
|
|
auth_basic_user_file /data/access/{{ access_list_id }};
|
|
|
|
{{ access_list.passauth }}
|
|
{% endif %}
|
|
|
|
# Access Rules
|
|
{% for client in access_list.clients %}
|
|
{{- client.rule -}};
|
|
{% endfor %}deny all;
|
|
|
|
# Access checks must...
|
|
{% if access_list.satisfy %}
|
|
{{ access_list.satisfy }};
|
|
{% endif %}
|
|
|
|
{% endif %}
|
|
|
|
{% if allow_websocket_upgrade == 1 or allow_websocket_upgrade == true %}
|
|
proxy_set_header Upgrade $http_upgrade;
|
|
proxy_set_header Connection $http_connection;
|
|
proxy_http_version 1.1;
|
|
{% endif %}
|
|
|
|
# Proxy!
|
|
include conf.d/include/proxy.conf;
|
|
}
|
|
{% endif %}
|
|
|
|
# Custom
|
|
include /data/nginx/custom/server_proxy[.]conf;
|
|
}
|
|
{% endif %}
|