eecstime/nginx.conf at main · mr-mph/eecstime · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
server {
    listen       8080;
    server_name  localhost;
    access_log   off;

    # Backend API
    location /api {
        proxy_set_header Host $http_host;
        # W3C Trace Context propagation
        proxy_set_header traceparent $http_traceparent;
        proxy_set_header tracestate $http_tracestate;
        proxy_set_header baggage $http_baggage;
        proxy_pass http://backend:5001;
    }

    # Backend redirects (banner clicks, route redirects)
    location /banner/ {
        proxy_set_header Host $http_host;
        proxy_set_header traceparent $http_traceparent;
        proxy_set_header tracestate $http_tracestate;
        proxy_set_header baggage $http_baggage;
        proxy_pass http://backend:5001;
    }

    location /go/ {
        proxy_set_header Host $http_host;
        proxy_set_header traceparent $http_traceparent;
        proxy_set_header tracestate $http_tracestate;
        proxy_set_header baggage $http_baggage;
        proxy_pass http://backend:5001;
    }

    location /message/ {
        proxy_set_header Host $http_host;
        proxy_pass http://backend:5001;
    }

    # OpenTelemetry Collector proxy — forwards browser OTLP exports.
    # Variable-based proxy_pass defers DNS resolution so nginx starts
    # even when otel-collector is not running (returns 502 instead).
    location /otlp/ {
        resolver 127.0.0.11 valid=30s ipv6=off;
        set $otel_backend http://otel-collector:4318;
        rewrite ^/otlp/(.*) /$1 break;
        proxy_pass $otel_backend;
        proxy_set_header Host $http_host;
    }

    # Frontend
    location / {
        proxy_pass http://frontend:3000;

        # Ensure Nginx properly handles WebSocket requests
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
    }
}

server {
    listen       8081;
    server_name  localhost;
    access_log   off;

    #Docker's embedded DNS in order to resolve upstream names at request time
    resolver 127.0.0.11 valid=5s;

    # Backend API
    location /api {
        proxy_set_header Host $http_host;
        # W3C Trace Context propagation
        proxy_set_header traceparent $http_traceparent;
        proxy_set_header tracestate $http_tracestate;
        proxy_set_header baggage $http_baggage;
        proxy_pass http://backend:5001;
    }

    # Backend redirects (banner clicks, route redirects)
    location /banner/ {
        proxy_set_header Host $http_host;
        proxy_set_header traceparent $http_traceparent;
        proxy_set_header tracestate $http_tracestate;
        proxy_set_header baggage $http_baggage;
        proxy_pass http://backend:5001;
    }

    location /go/ {
        proxy_set_header Host $http_host;
        proxy_set_header traceparent $http_traceparent;
        proxy_set_header tracestate $http_tracestate;
        proxy_set_header baggage $http_baggage;
        proxy_pass http://backend:5001;
    }

    location /message/ {
        proxy_set_header Host $http_host;
        proxy_pass http://backend:5001;
    }

    # Frontend (ag-frontend is a profiled service)
    location / {
        # (use a variable so DNS resolves at request time)
        set $ag_frontend http://ag-frontend:3001;
        proxy_pass $ag_frontend;

        # Ensure Nginx properly handles WebSocket requests
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
    }
}

server {
    listen       8082;
    server_name  localhost;
    access_log   off;

    #Docker's embedded DNS in order to resolve upstream names at request time
    resolver 127.0.0.11 valid=5s;

    # Backend API
    location /api {
        proxy_set_header Host $http_host;
        # W3C Trace Context propagation
        proxy_set_header traceparent $http_traceparent;
        proxy_set_header tracestate $http_tracestate;
        proxy_set_header baggage $http_baggage;
        proxy_pass http://backend:5001;
    }

    # Backend redirects (banner clicks, route redirects)
    location /banner/ {
        proxy_set_header Host $http_host;
        proxy_set_header traceparent $http_traceparent;
        proxy_set_header tracestate $http_tracestate;
        proxy_set_header baggage $http_baggage;
        proxy_pass http://backend:5001;
    }

    location /go/ {
        proxy_set_header Host $http_host;
        proxy_set_header traceparent $http_traceparent;
        proxy_set_header tracestate $http_tracestate;
        proxy_set_header baggage $http_baggage;
        proxy_pass http://backend:5001;
    }

    location /message/ {
        proxy_set_header Host $http_host;
        proxy_pass http://backend:5001;
    }

    # Frontend (staff-frontend is a profiled service)
    location / {
        # (use a variable so DNS resolves at request time)
        set $staff_frontend http://staff-frontend:3002;
        proxy_pass $staff_frontend;

        # Ensure Nginx properly handles WebSocket requests
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
    }
}

# Internal metrics endpoint — only accessible within the Docker network.
# The OTel Collector's nginx receiver scrapes this endpoint.
server {
    listen       8090;
    server_name  localhost;
    access_log   off;

    location /nginx_status {
        stub_status;
    }

    location / {
        return 404;
    }
}