Skip to content
GitLab
Explore
Sign in
Primary navigation
Search or go to…
Project
C
clarin-dspace
Manage
Activity
Members
Labels
Plan
Issues
Issue boards
Milestones
Wiki
Code
Merge requests
Repository
Branches
Commits
Tags
Repository graph
Compare revisions
Snippets
Build
Pipelines
Jobs
Pipeline schedules
Artifacts
Deploy
Container registry
Model registry
Operate
Environments
Monitor
Incidents
Analyze
Value stream analytics
Contributor analytics
CI/CD analytics
Repository analytics
Model experiments
Help
Help
Support
GitLab documentation
Compare GitLab plans
Community forum
Contribute to GitLab
Provide feedback
Keyboard shortcuts
?
Snippets
Groups
Projects
Show more breadcrumbs
commul
docker
clarin-dspace
Commits
cd6cf4ef
Commit
cd6cf4ef
authored
6 years ago
by
egon w. stemle
Browse files
Options
Downloads
Patches
Plain Diff
Sanitise white-space
parent
5c46c7d7
No related branches found
No related tags found
No related merge requests found
Changes
1
Hide whitespace changes
Inline
Side-by-side
Showing
1 changed file
dockerfiles/commul-customization/default-ssl
+43
-44
43 additions, 44 deletions
dockerfiles/commul-customization/default-ssl
with
43 additions
and
44 deletions
dockerfiles/commul-customization/default-ssl
+
43
−
44
View file @
cd6cf4ef
upstream tomcats {
server dspace:8009;
keepalive 10;
server dspace:8009;
keepalive 10;
}
server {
listen 80;
listen [::]:80;
server_name clarin-dev.eurac.edu;
listen 80;
listen [::]:80;
server_name clarin-dev.eurac.edu;
location /repository/oai {
location /repository/oai {
client_body_buffer_size 32K;
client_body_buffer_size 32K;
client_max_body_size 4G;
client_max_body_size 4G;
sendfile on;
send_timeout 300s;
sendfile on;
send_timeout 300s;
ajp_keep_conn on;
ajp_pass tomcats;
ajp_keep_conn on;
ajp_pass tomcats;
}
}
location / {
return 301 https://$server_name$request_uri;
}
location / {
return 301 https://$server_name$request_uri;
}
}
server {
...
...
@@ -73,9 +73,9 @@ server {
rewrite ^/(.*)/xmlui/handle/(.*)$ https://$http_host/repository/oai/cite?metadataPrefix=%1&handle=$2? redirect;
}
#
location = / {
#
return 301 /repository;
#
}
#
location = / {
#
return 301 /repository;
#
}
location / {
index index.php index.html index.htm;
...
...
@@ -85,18 +85,17 @@ server {
if ($HTTP_X_SCHEME = "http") {
rewrite ^ https://$http_host$request_uri permanent;
}
}
location /php/aa-statistics.php {
shib_request /shibauthorizer;
shib_request_use_headers on;
fastcgi_pass unix:/run/php/php7.0-fpm.sock;
fastcgi_param SCRIPT_FILENAME /opt/nginx/html$fastcgi_script_name;
fastcgi_param PATH_INFO $fastcgi_script_name;
fastcgi_split_path_info ^(.+\.php)(/.+)$;
include fastcgi_params;
}
shib_request /shibauthorizer;
shib_request_use_headers on;
fastcgi_pass unix:/run/php/php7.0-fpm.sock;
fastcgi_param SCRIPT_FILENAME /opt/nginx/html$fastcgi_script_name;
fastcgi_param PATH_INFO $fastcgi_script_name;
fastcgi_split_path_info ^(.+\.php)(/.+)$;
include fastcgi_params;
}
location /repository {
...
...
@@ -137,16 +136,16 @@ server {
# add path your repository path that will be protected by shibboleth
location /repository/xmlui/shibboleth-login {
include repository_auth;
include repository_auth;
ajp_keep_conn on;
ajp_pass tomcats;
}
}
location /xmlui/shibboleth-login {
include repository_auth;
ajp_keep_conn on;
include repository_auth;
ajp_keep_conn on;
ajp_pass tomcats;
}
}
# remove the robots and favicon from the logs
# location ~ /robots.txt$ { access_log off; log_not_found off; }
...
...
@@ -174,17 +173,17 @@ server {
}
location /secure {
#include shib_clear_headers;
#Add your attributes here. They get introduced as headers
#by the FastCGI authorizer so we must prevent spoofing.
#more_clear_input_headers 'displayName' 'mail' 'persistent-id';
shib_request /shibauthorizer;
shib_request_use_headers on;
gzip off;
include shib_fastcgi_params;
fastcgi_pass unix:/tmp/fcgiwrap.socket;
fastcgi_param SCRIPT_FILENAME /opt/nginx/html$fastcgi_script_name;
}
#
include shib_clear_headers;
#
Add your attributes here. They get introduced as headers
#
by the FastCGI authorizer so we must prevent spoofing.
#
more_clear_input_headers 'displayName' 'mail' 'persistent-id';
shib_request /shibauthorizer;
shib_request_use_headers on;
gzip off;
include shib_fastcgi_params;
fastcgi_pass unix:/tmp/fcgiwrap.socket;
fastcgi_param SCRIPT_FILENAME /opt/nginx/html$fastcgi_script_name;
}
include /opt/nginx/conf/proxies-enabled/*;
}
This diff is collapsed.
Click to expand it.
Preview
0%
Loading
Try again
or
attach a new file
.
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Save comment
Cancel
Please
register
or
sign in
to comment