87 lines
2.4 KiB
Plaintext
87 lines
2.4 KiB
Plaintext
server {
|
|
listen __PORT__;
|
|
server_name test1.__DNSDOMAIN__ test2.__DNSDOMAIN__;
|
|
root __TESTDIR__;
|
|
|
|
|
|
# Internal authentication request
|
|
location = /lmauth {
|
|
internal;
|
|
include /etc/nginx/fastcgi_params;
|
|
fastcgi_pass unix:__FASTCGISOCKDIR__/llng-fastcgi.sock;
|
|
|
|
# Drop post datas
|
|
fastcgi_pass_request_body off;
|
|
fastcgi_param CONTENT_LENGTH "";
|
|
|
|
# Keep original hostname
|
|
fastcgi_param HOST $http_host;
|
|
|
|
# Keep original request (LLNG server will received /llauth)
|
|
fastcgi_param X_ORIGINAL_URI $request_uri;
|
|
}
|
|
|
|
# Client requests
|
|
location / {
|
|
# Local application
|
|
index index.pl;
|
|
try_files $uri $uri/ =404;
|
|
|
|
# Reverse proxy
|
|
#proxy_pass http://remote.server/;
|
|
#include /etc/nginx/proxy_params;
|
|
|
|
##################################
|
|
# CALLING AUTHENTICATION #
|
|
##################################
|
|
auth_request /lmauth;
|
|
auth_request_set $lmremote_user $upstream_http_lm_remote_user;
|
|
auth_request_set $lmlocation $upstream_http_location;
|
|
error_page 401 $lmlocation;
|
|
|
|
##################################
|
|
# PASSING HEADERS TO APPLICATION #
|
|
##################################
|
|
|
|
# IF LUA IS SUPPORTED
|
|
#include __CONFDIR__/nginx-lua-headers.conf;
|
|
|
|
# ELSE
|
|
# Set manually your headers
|
|
#auth_request_set $authuser $upstream_http_auth_user;
|
|
#proxy_set_header Auth-User $authuser;
|
|
# OR in the correspondinc block
|
|
#fastcgi_param HTTP_AUTH_USER $authuser;
|
|
|
|
# Then (if LUA not supported), change cookie header to hide LLNG cookie
|
|
#auth_request_set $lmcookie $upstream_http_cookie;
|
|
#proxy_set_header Cookie: $lmcookie;
|
|
# OR in the corresponding block
|
|
#fastcgi_param HTTP_COOKIE $lmcookie;
|
|
|
|
# Uncomment this if you use https only
|
|
#add_header Strict-Transport-Security "15768000";
|
|
|
|
# Set REMOTE_USER (for FastCGI apps only)
|
|
#fastcgi_param REMOTE_USER $lmremote_user;
|
|
}
|
|
|
|
# Handle test CGI
|
|
location ~ \.pl$ {
|
|
include /etc/nginx/fastcgi_params;
|
|
fastcgi_pass unix:__FASTCGISOCKDIR__/llng-fastcgi.sock;
|
|
fastcgi_param LLTYPE cgi;
|
|
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
|
|
fastcgi_split_path_info ^(.*\.pl)(/.+)$;
|
|
fastcgi_param REMOTE_USER $lmremote_user;
|
|
}
|
|
|
|
#location = /status {
|
|
# allow 127.0.0.1;
|
|
# deny all;
|
|
# include /etc/nginx/fastcgi_params;
|
|
# fastcgi_pass unix:__FASTCGISOCKDIR__/llng-fastcgi.sock;
|
|
# fastcgi_param LLTYPE status;
|
|
#}
|
|
}
|