UL/ulweb
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(S2-a): ingest durable app MQTT points securely

Browse Source
This commit is contained in:
Brent Perteet
2026-08-20 15:22:40 -05:00
parent daa3407b9d
commit 8bcc12ec96
14 changed files with 979 additions and 59 deletions
Download Patch File Download Diff File Expand all files Collapse all files

22
nginx/dev.hub.umagul.net.conf
View File

@@ -6,18 +6,6 @@ server {
root /var/www/certbot;
}
location /mqtt {
# proxy MQTT over WebSocket (strip the /mqtt prefix so Mosquitto sees /)
proxy_pass http://127.0.0.1:9001/;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_read_timeout 300s;
}
location / {
return 301 https://$host$request_uri;
}
@@ -33,14 +21,8 @@ server {
client_max_body_size 20m;
location /mqtt {
proxy_pass http://127.0.0.1:9001/;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_read_timeout 300s;
# Anonymous MQTT-over-WebSocket was removed for Sprint 2 security criterion B1.
return 410;
}
location / {