Skip to content
Snippets Groups Projects
Commit f133ab52 authored by ale's avatar ale
Browse files

Use a prefix for env vars

parent 385d40a2
No related branches found
No related tags found
No related merge requests found
Pipeline #85444 passed
...@@ -5,7 +5,7 @@ proxy one domain to a single upstream address. ...@@ -5,7 +5,7 @@ proxy one domain to a single upstream address.
Use environment variables to control the proxy behavior. Use environment variables to control the proxy behavior.
* `PORT` (default 443) - Port that the proxy will listen on. * `PROXY_PORT` (default 443) - Port that the proxy will listen on.
* `DOMAIN` - Domain to proxy. * `PROXY_DOMAIN` - Domain to proxy.
* `BACKEND_ADDR` - Address (in host:port syntax) of the upstream. * `PROXY_BACKEND_ADDR` - Address (in host:port syntax) of the upstream.
...@@ -8,8 +8,8 @@ config_dir=$(mktemp -d) ...@@ -8,8 +8,8 @@ config_dir=$(mktemp -d)
echo "generating self-signed certificate..." echo "generating self-signed certificate..."
openssl req -x509 -newkey rsa:2048 -sha256 -days 3650 \ openssl req -x509 -newkey rsa:2048 -sha256 -days 3650 \
-nodes -keyout ${config_dir}/ssl.key -out ${config_dir}/ssl.crt \ -nodes -keyout ${config_dir}/ssl.key -out ${config_dir}/ssl.crt \
-subj "/CN=${DOMAIN}" \ -subj "/CN=${PROXY_DOMAIN}" \
-addext "subjectAltName=DNS:${DOMAIN},DNS:*.${DOMAIN}" -addext "subjectAltName=DNS:${PROXY_DOMAIN},DNS:*.${PROXY_DOMAIN}"
cat >${config_dir}/nginx.conf <<EOF cat >${config_dir}/nginx.conf <<EOF
include /etc/nginx/modules-enabled/*.conf; include /etc/nginx/modules-enabled/*.conf;
...@@ -30,12 +30,12 @@ http { ...@@ -30,12 +30,12 @@ http {
include /etc/nginx/conf.d/*.conf; include /etc/nginx/conf.d/*.conf;
upstream target { upstream target {
server ${BACKEND_ADDR}; server ${PROXY_BACKEND_ADDR};
} }
server { server {
listen [::]:${PORT:-443} http2 ssl; listen [::]:${PROXY_PORT:-443} http2 ssl;
server_name *.${DOMAIN} ${DOMAIN}; server_name *.${PROXY_DOMAIN} ${PROXY_DOMAIN};
ssl_certificate ${config_dir}/ssl.crt; ssl_certificate ${config_dir}/ssl.crt;
ssl_certificate_key ${config_dir}/ssl.key; ssl_certificate_key ${config_dir}/ssl.key;
location / { location / {
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment