62 lines
2.2 KiB
Plaintext
62 lines
2.2 KiB
Plaintext
include /etc/nginx/conf.d/include/cors;
|
|
|
|
limit_conn downloads_by_ip 100; # ddos protection: max 100 downloads at a time
|
|
|
|
# ensure that skylink that we pass around is base64 encoded (transform base32 encoded ones)
|
|
# this is important because we want only one format in cache keys and logs
|
|
set_by_lua_block $skylink { return require("skynet.skylink").parse(ngx.var.skylink) }
|
|
|
|
# default download rate to unlimited
|
|
set $limit_rate 0;
|
|
|
|
access_by_lua_block {
|
|
if require("skynet.account").accounts_enabled() then
|
|
-- check if portal is in authenticated only mode
|
|
if require("skynet.account").is_access_unauthorized() then
|
|
return require("skynet.account").exit_access_unauthorized()
|
|
end
|
|
|
|
-- check if portal is in subscription only mode
|
|
if require("skynet.account").is_access_forbidden() then
|
|
return require("skynet.account").exit_access_forbidden()
|
|
end
|
|
|
|
-- get account limits of currently authenticated user
|
|
local limits = require("skynet.account").get_account_limits()
|
|
|
|
-- apply download speed limit
|
|
ngx.var.limit_rate = limits.download
|
|
end
|
|
}
|
|
|
|
limit_rate_after 512k;
|
|
limit_rate $limit_rate;
|
|
|
|
proxy_read_timeout 600;
|
|
proxy_set_header User-Agent: Sia-Agent;
|
|
|
|
proxy_pass http://sia:9980/skynet/skylink/$skylink$path$is_args$args;
|
|
proxy_intercept_errors on;
|
|
|
|
error_page 400 /etc/nginx/public/errors/400/index.html;
|
|
error_page 401 /etc/nginx/public/errors/401/index.html;
|
|
error_page 403 /etc/nginx/public/errors/403/index.html;
|
|
error_page 404 /etc/nginx/public/errors/404/index.html;
|
|
error_page 451 /etc/nginx/public/errors/451/index.html;
|
|
error_page 500 /etc/nginx/public/errors/500/index.html;
|
|
|
|
log_by_lua_block {
|
|
local skynet_account = require("skynet.account")
|
|
local skynet_modules = require("skynet.modules")
|
|
local skynet_scanner = require("skynet.scanner")
|
|
local skynet_tracker = require("skynet.tracker")
|
|
|
|
if skynet_modules.is_enabled("a") then
|
|
skynet_tracker.track_download(ngx.header["Skynet-Skylink"], ngx.status, skynet_account.get_auth_headers(), ngx.var.body_bytes_sent)
|
|
end
|
|
|
|
if skynet_modules.is_enabled("s") then
|
|
skynet_scanner.scan_skylink(ngx.header["Skynet-Skylink"])
|
|
end
|
|
}
|