erp-platform/configs/deployment/configs/nginx.conf
Sedat ÖZTÜRK 58c71827cc vite.config
2025-08-12 15:53:51 +03:00

140 lines
No EOL
3.7 KiB
Nginx Configuration File

# HTTP'den HTTPS'e yönlendirme
server {
listen 80 default_server;
listen [::]:80 default_server;
server_name _;
location / {
return 301 https://$host$request_uri;
}
}
# devops.sozsoft.com
server {
listen 443 ssl http2;
server_name devops.sozsoft.com;
ssl_certificate /etc/ssl/sozsoft.com/fullchain1.pem;
ssl_trusted_certificate /etc/ssl/sozsoft.com/chain1.pem;
ssl_certificate_key /etc/ssl/sozsoft.com/privkey1.pem;
location / {
proxy_pass http://127.0.0.1:3000;
include /etc/nginx/proxy_params;
proxy_set_header Connection $http_connection;
proxy_set_header Upgrade $http_upgrade;
client_max_body_size 512M;
}
}
# chat.sozsoft.com
server {
listen 443 ssl http2;
server_name chat.sozsoft.com;
ssl_certificate /etc/ssl/sozsoft.com/fullchain1.pem;
ssl_trusted_certificate /etc/ssl/sozsoft.com/chain1.pem;
ssl_certificate_key /etc/ssl/sozsoft.com/privkey1.pem;
location / {
proxy_pass http://127.0.0.1:3001; # ← PORT bilgisi güncellendi
include /etc/nginx/proxy_params;
proxy_set_header Connection $http_connection;
proxy_set_header Upgrade $http_upgrade;
client_max_body_size 512M;
}
}
# ai.sozsoft.com
server {
listen 443 ssl http2;
server_name ai.sozsoft.com;
ssl_certificate /etc/ssl/sozsoft.com/fullchain1.pem;
ssl_trusted_certificate /etc/ssl/sozsoft.com/chain1.pem;
ssl_certificate_key /etc/ssl/sozsoft.com/privkey1.pem;
location / {
proxy_pass http://127.0.0.1:5678;
include /etc/nginx/proxy_params;
proxy_set_header Connection $http_connection;
proxy_set_header Upgrade $http_upgrade;
proxy_read_timeout 300;
proxy_connect_timeout 300;
proxy_send_timeout 300;
client_max_body_size 512M;
}
}
# api.sozsoft.com
server {
listen 443 ssl http2;
server_name api.sozsoft.com;
ssl_certificate /etc/ssl/sozsoft.com/fullchain1.pem;
ssl_trusted_certificate /etc/ssl/sozsoft.com/chain1.pem;
ssl_certificate_key /etc/ssl/sozsoft.com/privkey1.pem;
underscores_in_headers on;
ignore_invalid_headers off;
large_client_header_buffers 4 16k;
location / {
proxy_pass http://127.0.0.1:8080/;
include /etc/nginx/proxy_params;
proxy_set_header __tenant $http___tenant; # ← ÖNEMLİ
}
}
# cdn.sozsoft.com
server {
listen 443 ssl http2;
server_name cdn.sozsoft.com;
ssl_certificate /etc/ssl/sozsoft.com/fullchain1.pem;
ssl_trusted_certificate /etc/ssl/sozsoft.com/chain1.pem;
ssl_certificate_key /etc/ssl/sozsoft.com/privkey1.pem;
location / {
proxy_pass http://127.0.0.1:8081;
include /etc/nginx/proxy_params;
}
}
# sozsoft.com
server {
listen 443 ssl http2;
server_name sozsoft.com;
ssl_certificate /etc/ssl/sozsoft.com/fullchain1.pem;
ssl_trusted_certificate /etc/ssl/sozsoft.com/chain1.pem;
ssl_certificate_key /etc/ssl/sozsoft.com/privkey1.pem;
underscores_in_headers on;
ignore_invalid_headers off;
large_client_header_buffers 4 16k;
location / {
proxy_pass http://127.0.0.1:3002;
include /etc/nginx/proxy_params;
}
}
server {
listen 443 ssl http2;
server_name ~^(?!(devops|chat|ai|api|cdn)\.).*\.sozsoft\.com$;
ssl_certificate /etc/ssl/sozsoft.com/fullchain1.pem;
ssl_trusted_certificate /etc/ssl/sozsoft.com/chain1.pem;
ssl_certificate_key /etc/ssl/sozsoft.com/privkey1.pem;
underscores_in_headers on;
ignore_invalid_headers off;
large_client_header_buffers 4 16k;
location / {
proxy_pass http://127.0.0.1:3002;
include /etc/nginx/proxy_params;
}
}