mirror of
https://github.com/goharbor/harbor.git
synced 2024-12-21 16:19:21 +01:00
19a13e8575
Use non-root user to run the service within these docker images, and provide HEALTHCHECK mechanism.
84 lines
2.2 KiB
Plaintext
84 lines
2.2 KiB
Plaintext
worker_processes auto;
|
|
|
|
events {
|
|
worker_connections 1024;
|
|
use epoll;
|
|
multi_accept on;
|
|
}
|
|
|
|
http {
|
|
tcp_nodelay on;
|
|
|
|
# this is necessary for us to be able to disable request buffering in all cases
|
|
proxy_http_version 1.1;
|
|
|
|
|
|
upstream registry {
|
|
server registry:5000;
|
|
}
|
|
|
|
upstream ui {
|
|
server ui:8080;
|
|
}
|
|
|
|
log_format timed_combined '$$remote_addr - '
|
|
'"$$request" $$status $$body_bytes_sent '
|
|
'"$$http_referer" "$$http_user_agent" '
|
|
'$$request_time $$upstream_response_time $$pipe';
|
|
|
|
access_log /dev/stdout timed_combined;
|
|
|
|
server {
|
|
listen 80;
|
|
server_tokens off;
|
|
# disable any limits to avoid HTTP 413 for large image uploads
|
|
client_max_body_size 0;
|
|
|
|
location / {
|
|
proxy_pass http://ui/;
|
|
proxy_set_header Host $$host;
|
|
proxy_set_header X-Real-IP $$remote_addr;
|
|
proxy_set_header X-Forwarded-For $$proxy_add_x_forwarded_for;
|
|
|
|
# When setting up Harbor behind other proxy, such as an Nginx instance, remove the below line if the proxy already has similar settings.
|
|
proxy_set_header X-Forwarded-Proto $$scheme;
|
|
|
|
proxy_buffering off;
|
|
proxy_request_buffering off;
|
|
}
|
|
|
|
location /v1/ {
|
|
return 404;
|
|
}
|
|
|
|
location /v2/ {
|
|
proxy_pass http://ui/registryproxy/v2/;
|
|
proxy_set_header Host $$http_host;
|
|
proxy_set_header X-Real-IP $$remote_addr;
|
|
proxy_set_header X-Forwarded-For $$proxy_add_x_forwarded_for;
|
|
|
|
# When setting up Harbor behind other proxy, such as an Nginx instance, remove the below line if the proxy already has similar settings.
|
|
proxy_set_header X-Forwarded-Proto $$scheme;
|
|
proxy_buffering off;
|
|
proxy_request_buffering off;
|
|
}
|
|
|
|
location /service/ {
|
|
proxy_pass http://ui/service/;
|
|
proxy_set_header Host $$host;
|
|
proxy_set_header X-Real-IP $$remote_addr;
|
|
proxy_set_header X-Forwarded-For $$proxy_add_x_forwarded_for;
|
|
|
|
# When setting up Harbor behind other proxy, such as an Nginx instance, remove the below line if the proxy already has similar settings.
|
|
proxy_set_header X-Forwarded-Proto $$scheme;
|
|
|
|
proxy_buffering off;
|
|
proxy_request_buffering off;
|
|
}
|
|
|
|
location /service/notifications {
|
|
return 404;
|
|
}
|
|
}
|
|
}
|