Files
ulweb/nginx/dev.hub.umagul.net.conf
2026-07-12 01:09:33 +00:00

59 lines
1.7 KiB
Plaintext

server {
listen 80;
server_name dev.hub.umagul.net;
location /.well-known/acme-challenge/ {
root /var/www/certbot;
}
location /mqtt {
# proxy MQTT over WebSocket (strip the /mqtt prefix so Mosquitto sees /)
proxy_pass http://127.0.0.1:9001/;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_read_timeout 300s;
}
location / {
return 301 https://$host$request_uri;
}
}
server {
listen 443 ssl;
server_name dev.hub.umagul.net;
ssl_certificate /etc/letsencrypt/live/dev.hub.umagul.net/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/dev.hub.umagul.net/privkey.pem;
client_max_body_size 20m;
location /mqtt {
proxy_pass http://127.0.0.1:9001/;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_read_timeout 300s;
}
location / {
proxy_pass http://127.0.0.1:3000;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_read_timeout 300s;
proxy_connect_timeout 75s;
}
}