This repository has been archived on 2022-10-07. You can view files and clone it, but cannot push or open issues or pull requests.
skynet-webportal/setup-scripts/skynet-nginx.conf

128 lines
4.9 KiB
Plaintext
Raw Normal View History

limit_req_zone $binary_remote_addr zone=stats_by_ip:10m rate=10r/m;
limit_conn_zone $binary_remote_addr zone=uploads_by_ip:10m;
limit_conn_zone $binary_remote_addr zone=downloads_by_ip:10m;
limit_req_status 429;
limit_conn_status 429;
2020-01-29 21:41:20 +00:00
server {
2020-02-18 09:58:55 +00:00
listen 80 default_server;
listen [::]:80 default_server;
server_name _;
return 301 https://$host$request_uri;
}
2020-02-04 18:55:34 +00:00
2020-02-18 09:58:55 +00:00
server {
listen 443 ssl http2;
listen [::]:443 ssl http2;
server_name siasky.net www.siasky.net; # replace with actual server names
2020-01-29 21:41:20 +00:00
# ddos protection: closing slow connections
client_body_timeout 5s;
client_header_timeout 5s;
2020-03-10 13:36:21 +00:00
# Enable the following line if you want to have auto uuid support. This
# means users are able to upload Skyfiles without having to provide a uuid
# themselves.
# rewrite ^/skynet/skyfile/?$ /skynet/skyfile/$request_id$1;
# NOTE: make sure to enable any additional configuration you might need like gzip
2020-02-18 09:58:55 +00:00
location / {
root /home/user/skynet-webportal/public; # path to root of index.html
}
2020-01-29 21:41:20 +00:00
2020-03-18 20:36:30 +00:00
location /stats {
limit_req zone=stats_by_ip; # ddos protection: max 10 requests per minute
2020-03-18 20:36:30 +00:00
proxy_set_header Access-Control-Allow-Origin: *;
proxy_set_header User-Agent: Sia-Agent;
# replace BASE64_AUTHENTICATION with base64 encoded <user>:<password>
2020-03-18 20:36:30 +00:00
# for sia user is empty so it's just :<password>
# to generate the passcode use https://www.base64encode.org or any other base64 encoder
proxy_set_header Authorization "Basic BASE64_AUTHENTICATION";
proxy_pass http://127.0.0.1:9970/skynet/stats;
}
2020-03-18 20:36:30 +00:00
location /statsdown {
limit_req zone=stats_by_ip; # ddos protection: max 10 requests per minute
2020-03-18 20:36:30 +00:00
proxy_set_header Access-Control-Allow-Origin: *;
proxy_set_header User-Agent: Sia-Agent;
# replace BASE64_AUTHENTICATION with base64 encoded <user>:<password>
2020-03-18 20:36:30 +00:00
# for sia user is empty so it's just :<password>
# to generate the passcode use https://www.base64encode.org or any other base64 encoder
proxy_set_header Authorization "Basic BASE64_AUTHENTICATION";
proxy_pass http://127.0.0.1:9980/skynet/stats;
}
2020-03-18 20:36:30 +00:00
2020-02-18 09:58:55 +00:00
location /skynet/skyfile/ {
limit_conn uploads_by_ip 10; # ddos protection: max 10 uploads at a time
2020-02-18 09:58:55 +00:00
client_max_body_size 1000M; # make sure to limit the size of upload to a sane value
proxy_read_timeout 600;
2020-02-18 16:25:03 +00:00
# proxy this call to siad endpoint (make sure the ip is correct)
#
# note that we point uploads to port '9970', do this when you want to
# run in a configuration where you have two siad instances, one for
# downloads and one for uploads. This drastically improves the up - and
# download speed of your portal. When running your portal in this double
# siad setup, make sure only the download portal runs in 'portal mode'.
# The upload siad can be run in normal mode. Set the port to '9980' if
# you do not want to run your portal in the double siad setup.
proxy_pass http://127.0.0.1:9970;
proxy_set_header Expect $http_expect;
add_header Access-Control-Allow-Origin *;
proxy_hide_header Access-Control-Allow-Origin;
2020-02-18 16:25:03 +00:00
# make sure to override user agent header - siad requirement
proxy_set_header User-Agent: Sia-Agent;
# replace BASE64_AUTHENTICATION with base64 encoded <user>:<password>
# for sia user is empty so it's just :<password>
# to generate the passcode use https://www.base64encode.org or any other base64 encoder
proxy_set_header Authorization "Basic BASE64_AUTHENTICATION";
}
2020-03-10 13:36:21 +00:00
location ~ "^/([a-zA-Z0-9-_]{46}(/.*)?)$" {
limit_conn downloads_by_ip 10; # ddos protection: max 10 downloads at a time
proxy_read_timeout 600;
2020-03-10 13:36:21 +00:00
# proxy this call to siad /skynet/skylink/ endpoint (make sure the ip is
# correct)
proxy_pass http://127.0.0.1:9980/skynet/skylink/$1$is_args$args;
proxy_set_header Access-Control-Allow-Origin: *;
2020-02-18 09:58:55 +00:00
# make sure to override user agent header - siad requirement
proxy_set_header User-Agent: Sia-Agent;
2020-03-12 14:15:48 +00:00
# make sure the Skynet-File-Metadata header gets exposed in the response
add_header Access-Control-Expose-Headers skynet-file-metadata;
# if you are expecting large headers (ie. Skynet-Skyfile-Metadata), tune these values to your needs
#proxy_buffer_size 128k;
#proxy_buffers 4 128k;
2020-01-31 18:26:20 +00:00
}
2020-03-10 13:36:21 +00:00
location ~ "^/file/([a-zA-Z0-9-_]{46}(/.*)?)$" {
limit_conn downloads_by_ip 10; # ddos protection: max 10 downloads at a time
2020-01-31 18:26:20 +00:00
proxy_read_timeout 600;
2020-03-10 13:36:21 +00:00
# proxy this call to siad /skunet/skylink/ endpoint (make sure the ip is
# correct) this alias also adds attachment=true url param to force
# download the file
proxy_pass http://127.0.0.1:9980/skynet/skylink/$1?attachment=true&$args;
proxy_set_header Access-Control-Allow-Origin: *;
2020-02-18 09:58:55 +00:00
# make sure to override user agent header - siad requirement
proxy_set_header User-Agent: Sia-Agent;
2020-03-12 14:15:48 +00:00
# make sure the Skynet-File-Metadata header gets exposed in the response
add_header Access-Control-Expose-Headers skynet-file-metadata;
# if you are expecting large headers (ie. Skynet-Skyfile-Metadata), tune these values to your needs
#proxy_buffer_size 128k;
#proxy_buffers 4 128k;
2020-01-31 18:26:20 +00:00
}
2020-02-18 09:58:55 +00:00
# SLL CERTIFICATES BELOW THIS LINE
2020-03-18 20:36:30 +00:00
}