Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- # HTTP server
- server {
- listen 80;
- server_name mesh.*;
- location / {
- proxy_pass http://meshcentral:800/;
- proxy_http_version 1.1;
- # Inform MeshCentral about the real host, port and protocol
- proxy_set_header X-Forwarded-Host $host:$server_port;
- proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
- proxy_set_header X-Forwarded-Proto $scheme;
- }
- }
- # HTTPS server
- server {
- listen 443 ssl;
- server_name mesh.*;
- # MeshCentral uses long standing web socket connections, set longer timeouts.
- proxy_send_timeout 330s;
- proxy_read_timeout 330s;
- # We can use the MeshCentral generated certificate & key
- # ssl_certificate webserver-cert-public.crt;
- # ssl_certificate_key webserver-cert-private.key;
- # ssl_session_cache shared:WEBSSL:10m;
- # ssl_ciphers HIGH:!aNULL:!MD5;
- # ssl_prefer_server_ciphers on;
- location / {
- proxy_pass http://meshcentral:4430/;
- proxy_http_version 1.1;
- # Allows websockets over HTTPS.
- proxy_set_header Upgrade $http_upgrade;
- proxy_set_header Connection "upgrade";
- proxy_set_header Host $host;
- # Inform MeshCentral about the real host, port and protocol
- proxy_set_header X-Forwarded-Host $host:$server_port;
- proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
- proxy_set_header X-Forwarded-Proto $scheme;
- }
- }
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement