Skip to content

Instantly share code, notes, and snippets.

@maniankara
Created January 29, 2018 22:05
Show Gist options
  • Star 1 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save maniankara/5032e30a657563c8bd6135924e859b8c to your computer and use it in GitHub Desktop.
Save maniankara/5032e30a657563c8bd6135924e859b8c to your computer and use it in GitHub Desktop.
SSL translation for a nexus repository manager implementing two repository connectors dockerfetch and dockerpushtest
upstream dockerfetch {
server 127.0.0.1:8082 fail_timeout=0;
server HOSTNAME.YOURDOMAIN.com:8082 fail_timeout=0;
}
upstream dockerpushtest {
server 127.0.0.1:8083 fail_timeout=0;
server HOSTNAME.YOURDOMAIN.com:8083 fail_timeout=0;
}
server {
listen 48082 ssl;
server_name HOSTNAME.YOURDOMAIN.com;
ssl_certificate /etc/ssl/certs/YOUR_SSL.crt;
ssl_certificate_key /etc/ssl/private/YOUR_SSL.key;
ssl_session_cache shared:SSL:50m;
location / {
proxy_set_header Host $host:$server_port;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_redirect http:// https://;
proxy_pass http://dockerfetch;
client_max_body_size 1024m;
client_body_buffer_size 128k;
}
}
server {
listen 48083 ssl;
server_name HOSTNAME.YOURDOMAIN.com;
ssl_certificate /etc/ssl/certs/YOUR_SSL.crt;
ssl_certificate_key /etc/ssl/private/YOUR_SSL.key;
ssl_session_cache shared:SSL:50m;
location / {
proxy_set_header Host $host:$server_port;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_redirect http:// https://;
proxy_pass http://dockerpushtest;
client_max_body_size 1024m;
client_body_buffer_size 128k;
}
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment