Scribd
Upload
4 views

nginx-proxy

The document is a configuration file for Nginx, detailing server blocks for various subdomains of vipmonte.io, including SSL settings and proxy pass directives. It specifies upstream servers for different services and includes redirection rules for certain paths. Additionally, it provides configurations for handling ACME challenges for Let's Encrypt certificate management.

Uploaded by

2707974
Copyright
© © All Rights Reserved
Available Formats
Download as TXT, PDF, TXT or read online on Scribd
4 views

nginx-proxy

The document is a configuration file for Nginx, detailing server blocks for various subdomains of vipmonte.io, including SSL settings and proxy pass directives. It specifies upstream servers for different services and includes redirection rules for certain paths. Additionally, it provides configurations for handling ACME challenges for Let's Encrypt certificate management.

Uploaded by

2707974
Copyright
© © All Rights Reserved
Available Formats
Download as TXT, PDF, TXT or read online on Scribd
You are on page 1/ 3

/etc/nginx/sites-enabled/xh2-vipmonte.io.

conf
###
# CIO LINK TRACKER
###

server {
listen 443 ssl;
ssl_certificate /etc/nginx/certs/xh2-vipmonte.io-cert.pem;
ssl_certificate_key /etc/nginx/certs/xh2-vipmonte.io-key.key;

server_name links.vipmonte.io;
location / {
proxy_pass https://track.customer.io;
proxy_set_header 'Host' 'links.vipmonte.io';
}
}

server {
listen 443 ssl;
ssl_certificate /etc/nginx/certs/xh2-vipmonte.io-cert.pem;
ssl_certificate_key /etc/nginx/certs/xh2-vipmonte.io-key.key;
server_name vipmonte.io;
location / {
proxy_pass https://vipmonte.io;
}

server {
listen 443 http2 ssl;

ssl_certificate /etc/nginx/certs/xh2-vipmonte.io-cert.pem;
ssl_certificate_key /etc/nginx/certs/xh2-vipmonte.io-key.key;

server_name vipmonte.io;
return 301 https://www.vipmonte.io$request_uri;

}
server {
listen 443 http2 ssl;
ssl_certificate /etc/nginx/certs/xh2-vipmonte.io-cert.pem;
ssl_certificate_key /etc/nginx/certs/xh2-vipmonte.io-key.key;

server_name www.vipmonte.io;

#auth_basic "Restricted";
#auth_basic_user_file /etc/nginx/secret/.montecryptos;

location / {

# root /etc/nginx/html/maintenance;

proxy_pass http://exphub2-gmrc-live;
proxy_http_version 1.1;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $http_CF_Connecting_IP;
proxy_set_header front-real-ip $http_CF_Connecting_IP;
proxy_set_header x-user-ip $http_CF_Connecting_IP;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection Upgrade;
proxy_set_header X-Forwarded-Proto $scheme;

location /api/ {

rewrite /api/(.*) /$1 break;


proxy_pass http://exphub2-sp-ca-gmrc-live;
proxy_http_version 1.1;
proxy_set_header X-Real-IP $http_CF_Connecting_IP;
proxy_set_header front-real-ip $http_CF_Connecting_IP;
proxy_set_header x-user-ip $http_CF_Connecting_IP;
proxy_set_header Host ca-spapi.igp.cloud;
proxy_set_header Origin www.vipmonte.io;
proxy_set_header X-Forwarded-Proto $scheme;
}

location /cms/ {

rewrite /cms/(.*) /$1 break;


proxy_pass http://exphub2-cms-gmrc-live;
proxy_set_header X-Real-IP $http_CF_Connecting_IP;
proxy_set_header front-real-ip $http_CF_Connecting_IP;
proxy_set_header x-user-ip $http_CF_Connecting_IP;
proxy_http_version 1.1;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-Proto $scheme;
}
}

server {
listen 443 http2 ssl;

ssl_certificate /etc/nginx/certs/xh2-vipmonte.io-cert.pem;
ssl_certificate_key /etc/nginx/certs/xh2-vipmonte.io-key.key;
server_name affiliates.vipmonte.io affiliates-dashboard.vipmonte.io;

location /.well-known/acme-challenge {
root /etc/nginx/html/letsencrypt;
}

location / {
return 301 https://gngaffiliates.com$request_uri;
}

server {
listen 443 http2 ssl;
ssl_certificate /etc/nginx/certs/xh2-vipmonte.io-cert.pem;
ssl_certificate_key /etc/nginx/certs/xh2-vipmonte.io-key.key;

server_name cms.vipmonte.io;
location /.well-known/acme-challenge {
root /etc/nginx/html/letsencrypt;
}

location / {
proxy_pass http://exphub2-cms-gmrc-live;
proxy_http_version 1.1;
proxy_set_header Host $host;
}
}
upstream exphub2-cms-gmrc-live {
keepalive 32;
server 10.0.121.21:44015;
server 10.0.121.22:44015;
server 10.0.121.23:44015;
}

upstream exphub2-gmrc-live {
keepalive 32;
server 10.0.121.21:35045;
server 10.0.121.22:35045;
server 10.0.121.23:35045;
}

upstream xlangU {
ip_hash;

server 10.0.121.21:999;
server 10.0.121.22:999;
server 10.0.121.23:999;
}

upstream exphub2-sp-ca-gmrc-live {
keepalive 32;
server ca-spapi.igp.cloud:80;
}

You might also like