From 23a96eb2bfd954f74db274b80b451cc387204927 Mon Sep 17 00:00:00 2001 From: Karol Wypchlo Date: Tue, 18 Feb 2020 10:58:55 +0100 Subject: [PATCH] update to newest config version --- setup-scripts/skynet-nginx.conf | 64 +++++++++++++++++---------------- 1 file changed, 34 insertions(+), 30 deletions(-) diff --git a/setup-scripts/skynet-nginx.conf b/setup-scripts/skynet-nginx.conf index 11c9fc81..59708f2a 100644 --- a/setup-scripts/skynet-nginx.conf +++ b/setup-scripts/skynet-nginx.conf @@ -1,47 +1,51 @@ server { - listen 443 ssl; - listen [::]:443 ssl; + listen 80 default_server; + listen [::]:80 default_server; + server_name _; + return 301 https://$host$request_uri; +} - server_name siasky.net www.siasky.net; +server { + listen 443 ssl http2; + listen [::]:443 ssl http2; + server_name siasky.net www.siasky.net; # replace with actual server names - location / { - client_max_body_size 1000M; - root /home/user/skynet-webportal/packages/skynet/build; + location / { + root /home/user/skynet-webportal/packages/sia-skynet/build; # path to root of index.html } - location ^~ /api/ { - client_max_body_size 1000M; + location /skynet/skyfile/ { + client_max_body_size 1000M; # make sure to limit the size of upload to a sane value proxy_read_timeout 600; - rewrite ^/api/(.*)$ /$1 break; - proxy_pass http://127.0.0.1:4000/; + proxy_pass http://127.0.0.1:4000; } - location /skynet/skyfile { - client_max_body_size 1000M; - proxy_read_timeout 600; - proxy_pass http://127.0.0.1:9980; - proxy_set_header Access-Control-Allow-Origin: *; - proxy_set_header User-Agent: Sia-Agent; - proxy_set_header Expect $http_expect; - # authorization header is base64 encoded user:pass - proxy_set_header Authorization "Basic OmQwNWJiMDI0NzE1YWVhMGJiNzM0Y2UwNTdhY2JhZTI3"; - } - - location ~ "^/([a-zA-Z0-9-_]{46})$" { + location ~ "^/([a-zA-Z0-9-_+/]{46})$" { proxy_read_timeout 600; + # proxy this call to siad /skunet/skylink/ endpoint (make sure the ip is correct) proxy_pass http://127.0.0.1:9980/skynet/skylink/$1; proxy_set_header Access-Control-Allow-Origin: *; - proxy_set_header User-Agent: Sia-Agent; - # authorization header is base64 encoded user:pass - proxy_set_header Authorization "Basic OjY3MDAxYWY5OGRjNzk1YjEyZTEwYTgxM2IwYjc2ZmRh"; + # make sure to override user agent header - siad requirement + proxy_set_header User-Agent: Sia-Agent; + # replace BASE64_AUTHENTICATION with base64 encoded : + # for sia user is empty so it's just : + # to generate the passcode use https://www.base64encode.org or any other base64 encoder + proxy_set_header Authorization "Basic BASE64_AUTHENTICATION"; } - location ~ "^/file/([a-zA-Z0-9-_]{46})$" { + location ~ "^/file/([a-zA-Z0-9-_+/]{46})$" { proxy_read_timeout 600; + # proxy this call to siad /skunet/skylink/ endpoint (make sure the ip is correct) + # this alias also adds attachment=true url param to force download the file proxy_pass http://127.0.0.1:9980/skynet/skylink/$1?attachment=true; proxy_set_header Access-Control-Allow-Origin: *; - proxy_set_header User-Agent: Sia-Agent; - # authorization header is base64 encoded user:pass - proxy_set_header Authorization "Basic OjY3MDAxYWY5OGRjNzk1YjEyZTEwYTgxM2IwYjc2ZmRh"; + # make sure to override user agent header - siad requirement + proxy_set_header User-Agent: Sia-Agent; + # replace BASE64_AUTHENTICATION with base64 encoded : + # for sia user is empty so it's just : + # to generate the passcode use https://www.base64encode.org or any other base64 encoder + proxy_set_header Authorization "Basic BASE64_AUTHENTICATION"; } -} + + # SLL CERTIFICATES BELOW THIS LINE +} \ No newline at end of file