Migrations/neko-rooms
1
0
Fork 0
mirror of https://github.com/m1k1o/neko-rooms.git synced 2026-11-02 22:51:34 -06:00
Code Issues Packages Projects Releases Wiki Activity

NGINX WebSocket and Proxy Improvements (#170)

Browse Source
This commit is contained in:
H1ghSyst3m
2025-09-26 09:00:39 +02:00
committed by GitHub
parent e2688cb853
commit 5028a28255
1 changed files with 27 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
community/scripts/ubuntu-debian.sh
+26 -5
View File
@@ -571,34 +571,55 @@ echo -e "${AQUA}\n==================================================${NC}"
# Configure NGINX without SSL
echo -e "${YELLOW}Configuring NGINX without SSL...${NC}"
cat <<EOF > /etc/nginx/sites-available/${DOMAIN}-neko-rooms.conf
map \$http_upgrade \$connection_upgrade {
default upgrade;
'' close;
}
server {
listen 80;
server_name ${DOMAIN};
location / {
location ^~ /${PATH_PREFIX}/ {
proxy_pass http://127.0.0.1:${DOCKER_PORT};
proxy_set_header Host \$host;
proxy_http_version 1.1;
# WebSocket headers
proxy_set_header Upgrade \$http_upgrade;
proxy_set_header Connection "upgrade";
proxy_set_header Connection \$connection_upgrade;
# Forwarding headers for reverse proxy
proxy_set_header X-Real-IP \$remote_addr;
proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto \$scheme;
proxy_cache_bypass \$http_upgrade;
proxy_connect_timeout 60s;
proxy_send_timeout 4h;
proxy_read_timeout 4h;
send_timeout 900s;
proxy_request_buffering off;
proxy_buffering off;
proxy_read_timeout 900s;
}
# Admin Panel Restricted Access
location ~ ^/$ {
location / {
auth_basic "Restricted Access";
auth_basic_user_file /etc/nginx/.htpasswd;
proxy_pass http://127.0.0.1:${DOCKER_PORT};
proxy_set_header Host \$host;
proxy_http_version 1.1;
# Falls das Admin-UI WebSockets nutzt, sind wir vorbereitet
proxy_set_header Upgrade \$http_upgrade;
proxy_set_header Connection \$connection_upgrade;
# Forwarding headers wie oben
proxy_set_header X-Real-IP \$remote_addr;
proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto \$scheme;
}
}
EOF