mirror of
https://github.com/gravitl/netmaker.git
synced 2026-01-20 18:17:30 +08:00
36a88544af
* feat(go): define flow events; * feat(go): improve structure; * feat(go): improve structure; * feat(go): remove old flow definitions; * feat(sql): add clickhouse init scripts; * feat(sql): add protobuf spec; * fix(sql): store ip as string; * feat(go): move proto def to grpc dir; * feat(go): use node instead of host as type; optimize protobuf defs; * feat(go): add clickhouse db support; add endpoint to query flows; * fix(go): fix clickhouse config; * fix(go): use error response structure to report error; * feat(go): pass flow logging status to netclient; * feat(go): add peer ip identity map to host peer info; * feat(go): remove prefix from participant obj fields; * feat(go): add flow logs enabled field to host; * feat(go): add filtering to get flow api; * feat(go): fix record struct; * feat(go): add exporter url to server config; * feat(go): add exporter url to server config; * feat(go): enable flow logs by default; * feat(go): update nm-quick.sh; * feat(go): update nm-quick.sh; * feat(go): update nm-quick.sh; * feat(go): update nm-quick.sh; * feat(go): add db initialization logic; * feat(go): filter by network id; * fix(go): connection issue; * fix(go): connection issue; * fix(go): golang builder version; * feat(go): add server settings for flow logs; * feat(go): initialize clickhouse in pro; check for retention; * feat(go): add exporter feature flags; * feat(go): add grpc behind caddy; * feat(go): expose ports correctly; * fix(go): grpc caddyfile config; * fix(go): publish exporter feature flags on license validation; * fix(go): set server name for netmaker exporter; * fix(go): set server name for netmaker exporter; * fix(go): check for nil cancel func; * fix(go): add flow logs field to api host; * fix(go): add flow logs field to api host; * fix(go): remove port from grpc setting; * chore(go): tabs; * feat(go): introduce egress range participant type;. * feat(go): rename egress range to egress route for uniform language; * feat(go): rename egress range to egress route for uniform language; * feat: add peer addr identity map to host peer update; * feat: add address identity map to host peer update; * feat: add address identity map to host peer update; * feat: set correct from and to args; * feat: add support for filtering by node; * feat: use corresponding base image; * feat: update dockerfile base image version; * fix: disable flow logs for all host when global settings are changed; * refactor: setup flow logs manually;
58 lines
1.3 KiB
Text
58 lines
1.3 KiB
Text
# Dashboard
|
|
https://dashboard.{$NM_DOMAIN} {
|
|
# Apply basic security headers
|
|
header {
|
|
# Enable cross origin access to *.{$NM_DOMAIN}
|
|
Access-Control-Allow-Origin *.{$NM_DOMAIN}
|
|
# Enable HTTP Strict Transport Security (HSTS)
|
|
Strict-Transport-Security "max-age=31536000;"
|
|
# Enable cross-site filter (XSS) and tell browser to block detected attacks
|
|
X-XSS-Protection "1; mode=block"
|
|
# Disallow the site to be rendered within a frame on a foreign domain (clickjacking protection)
|
|
X-Frame-Options "SAMEORIGIN"
|
|
# Prevent search engines from indexing
|
|
X-Robots-Tag "none"
|
|
# Remove the server name
|
|
-Server
|
|
}
|
|
|
|
reverse_proxy http://netmaker-ui
|
|
}
|
|
|
|
# Netmaker Exporter
|
|
https://netmaker-exporter.{$NM_DOMAIN} {
|
|
reverse_proxy http://netmaker-exporter:8085
|
|
}
|
|
|
|
# Prometheus
|
|
https://prometheus.{$NM_DOMAIN} {
|
|
reverse_proxy http://prometheus:9090
|
|
}
|
|
|
|
# Grafana
|
|
https://grafana.{$NM_DOMAIN} {
|
|
reverse_proxy http://grafana:3000
|
|
}
|
|
|
|
# API
|
|
https://api.{$NM_DOMAIN} {
|
|
reverse_proxy http://netmaker:8081
|
|
}
|
|
|
|
# MQ
|
|
broker.{$NM_DOMAIN} {
|
|
@ws {
|
|
header Connection *Upgrade*
|
|
header Upgrade websocket
|
|
}
|
|
reverse_proxy @ws mq:8883
|
|
}
|
|
|
|
# GRPC
|
|
# https://grpc.{$NM_DOMAIN} {
|
|
# reverse_proxy netmaker-exporter:50051 {
|
|
# transport http {
|
|
# versions h2c
|
|
# }
|
|
# }
|
|
# }
|