mirror of
https://github.com/gravitl/netmaker.git
synced 2025-09-08 06:04:20 +08:00
1a1ba1ccf4
* Move ee code to ee package and unify ee status to IsPro * Consolidate naming for paid/professional/enterprise version as "pro". Notes: - Changes image tags - Changes build tags - Changes package names - Doesn't change links to docs that mention "ee" - Doesn't change parameters sent to PostHog that mention "ee" * Revert docker image tag being -pro, back to -ee * Revert go build tag being pro, back to ee * Add build tags for some ee content * [2] Revert go build tag being pro, back to ee * Fix test workflow * Add a json tag to be backwards compatible with frontend "IsEE" check * Add a json tag for the serverconfig struct for IsEE * Ammend json tag to Is_EE * fix ee tags --------- Co-authored-by: Abhishek Kondur <abhi281342@gmail.com>
63 lines
1.6 KiB
Text
63 lines
1.6 KiB
Text
# Dashboard
|
|
https://dashboard.{$NM_DOMAIN} {
|
|
tls /root/certs/fullchain.pem /root/certs/privkey.pem
|
|
# Apply basic security headers
|
|
header {
|
|
# Enable cross origin access to *.{$NM_DOMAIN}
|
|
Access-Control-Allow-Origin *.{$NM_DOMAIN}
|
|
# Enable HTTP Strict Transport Security (HSTS)
|
|
Strict-Transport-Security "max-age=31536000;"
|
|
# Enable cross-site filter (XSS) and tell browser to block detected attacks
|
|
X-XSS-Protection "1; mode=block"
|
|
# Disallow the site to be rendered within a frame on a foreign domain (clickjacking protection)
|
|
X-Frame-Options "SAMEORIGIN"
|
|
# Prevent search engines from indexing
|
|
X-Robots-Tag "none"
|
|
# Remove the server name
|
|
-Server
|
|
}
|
|
|
|
reverse_proxy http://netmaker-ui
|
|
}
|
|
|
|
# Netmaker Exporter
|
|
https://netmaker-exporter.{$NM_DOMAIN} {
|
|
tls /root/certs/fullchain.pem /root/certs/privkey.pem
|
|
reverse_proxy http://netmaker-exporter:8085
|
|
}
|
|
|
|
# Prometheus
|
|
https://prometheus.{$NM_DOMAIN} {
|
|
tls /root/certs/fullchain.pem /root/certs/privkey.pem
|
|
reverse_proxy http://prometheus:9090
|
|
}
|
|
|
|
# Grafana
|
|
https://grafana.{$NM_DOMAIN} {
|
|
tls /root/certs/fullchain.pem /root/certs/privkey.pem
|
|
reverse_proxy http://grafana:3000
|
|
}
|
|
|
|
# API
|
|
https://api.{$NM_DOMAIN} {
|
|
tls /root/certs/fullchain.pem /root/certs/privkey.pem
|
|
reverse_proxy http://netmaker:8081
|
|
}
|
|
|
|
# TURN
|
|
https://turn.{$NM_DOMAIN} {
|
|
tls /root/certs/fullchain.pem /root/certs/privkey.pem
|
|
reverse_proxy host.docker.internal:3479
|
|
}
|
|
|
|
# TURN API
|
|
https://turnapi.{$NM_DOMAIN} {
|
|
tls /root/certs/fullchain.pem /root/certs/privkey.pem
|
|
reverse_proxy http://host.docker.internal:8089
|
|
}
|
|
|
|
# MQ
|
|
wss://broker.{$NM_DOMAIN} {
|
|
tls /root/certs/fullchain.pem /root/certs/privkey.pem
|
|
reverse_proxy ws://mq:8883
|
|
}
|