backend for xcvr appview
updated nginx and fixed jwks path
+15
-21
+14
-20
nginx/xcvr.conf
+14
-20
nginx/xcvr.conf
···
1
1
server {
2
2
listen 443;
3
-
server_name xcvr.chat;
3
+
server_name xcvr.org;
4
4
5
-
ssl_certificate /etc/letsencrypt/live/xcvr.chat/fullchain.pem;
6
-
ssl_certificate_key /etc/letsencrypt/live/xcvr.chat/privkey.pem;
5
+
ssl_certificate /etc/letsencrypt/live/xcvr.org/fullchain.pem;
6
+
ssl_certificate_key /etc/letsencrypt/live/xcvr.org/privkey.pem;
7
7
8
8
ssl_protocols TLSv1.2 TLSv1.3;
9
9
ssl_prefer_server_ciphers on;
10
10
ssl_ciphers HIGH:!aNULL:!MD5;
11
11
12
-
root /var/www/xcvr;
13
-
index index.html;
14
-
15
-
location /xrpc/ {
12
+
location ~ ^/(xrpc|lrc|meta|oauth)/ {
16
13
proxy_pass http://127.0.0.1:8080;
17
-
proxy_set_header Host $host;
18
-
proxy_set_header X-Real-IP $remote_addr;
19
-
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
20
-
}
21
-
22
-
location "~^/(3[2-9][0-9]{3}|[4-5][0-9]{4}|6[0-5][0-9]{3})/ws$" {
23
-
set $port $1;
24
-
proxy_pass http://127.0.0.1:$port/ws;
25
-
26
14
proxy_http_version 1.1;
27
15
proxy_set_header Upgrade $http_upgrade;
28
-
proxy_set_header Connection "upgrade";
16
+
proxy_set_header Connection 'upgrade';
29
17
proxy_set_header Host $host;
18
+
proxy_set_header X-Real-IP $remote_addr;
19
+
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
20
+
proxy_set_header X-Forwarded-Proto $scheme;
21
+
proxy_cache_bypass $http_upgrade;
30
22
}
23
+
31
24
32
25
location / {
33
-
try_files $uri /index.html;
26
+
try_files $uri $uri/ /index.html;
27
+
root /var/www/xcvr-frontend/build;
34
28
}
35
29
}
36
30
37
31
server {
38
32
listen 80;
39
-
server_name xcvr.chat;
33
+
server_name xcvr.org;
40
34
41
35
location / {
42
36
return 301 https://$host$request_uri;
43
37
}
44
-
}
38
+
}