nginx.conf

# this file is autogenerated

worker_processes  1;
error_log  stderr;
events {
  worker_connections  1024;
}
http {
  resolver 127.0.0.11 ipv6=off;  # needed for docker to resolve service names
  default_type  application/octet-stream;
  access_log  /dev/stdout;
  sendfile on;
  charset utf-8;

  server {
    listen 80;
    server_name _;

    location / {
      set $pass http://ui;
      proxy_pass $pass;
      proxy_hide_header Content-Security-Policy;
      proxy_set_header Host taskcluster;
    }
    location /references {
      set $pass http://references;
      proxy_pass $pass;
      proxy_hide_header Content-Security-Policy;
      proxy_set_header Host taskcluster;
    }
    location /schemas {
      set $pass http://references;
      proxy_pass $pass;
      proxy_hide_header Content-Security-Policy;
      proxy_set_header Host taskcluster;
    }
    location /login {
      set $pass http://web-server-web:3050;
      proxy_pass $pass;
      proxy_hide_header Content-Security-Policy;
      proxy_set_header Host taskcluster;
    }
    location /graphql {
      set $pass http://web-server-web:3050;
      proxy_pass $pass;
      proxy_hide_header Content-Security-Policy;
      proxy_set_header Host taskcluster;
    }
    location /subscription {
      set $pass http://web-server-web:3050;
      proxy_pass $pass;
      proxy_hide_header Content-Security-Policy;
      proxy_set_header Host taskcluster;
      proxy_set_header Upgrade $http_upgrade; # websocket
      proxy_set_header Connection "Upgrade"; # websocket
    }
    location ~* /(public|private)-bucket/ {
      proxy_set_header X-Real-IP $remote_addr;
      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
      proxy_set_header X-Forwarded-Proto $scheme;
      proxy_set_header Host $http_host;

      proxy_connect_timeout 300;
      proxy_http_version 1.1;
      proxy_set_header Connection "";
      chunked_transfer_encoding off;

      proxy_pass http://s3:9000;
    }

    location /api/auth {
      set $pass http://auth-web;
      proxy_pass $pass;
      proxy_hide_header Content-Security-Policy;
      proxy_set_header Host taskcluster;
    }

    location /api/github {
      set $pass http://github-web;
      proxy_pass $pass;
      proxy_hide_header Content-Security-Policy;
      proxy_set_header Host taskcluster;
    }

    location /api/hooks {
      set $pass http://hooks-web;
      proxy_pass $pass;
      proxy_hide_header Content-Security-Policy;
      proxy_set_header Host taskcluster;
    }

    location /api/index {
      set $pass http://index-web;
      proxy_pass $pass;
      proxy_hide_header Content-Security-Policy;
      proxy_set_header Host taskcluster;
    }

    location /api/notify {
      set $pass http://notify-web;
      proxy_pass $pass;
      proxy_hide_header Content-Security-Policy;
      proxy_set_header Host taskcluster;
    }

    location /api/object {
      set $pass http://object-web;
      proxy_pass $pass;
      proxy_hide_header Content-Security-Policy;
      proxy_set_header Host taskcluster;
    }

    location /api/purge-cache {
      set $pass http://purge-cache-web;
      proxy_pass $pass;
      proxy_hide_header Content-Security-Policy;
      proxy_set_header Host taskcluster;
    }

    location /api/queue {
      set $pass http://queue-web;
      proxy_pass $pass;
      proxy_hide_header Content-Security-Policy;
      proxy_set_header Host taskcluster;
    }

    location /api/secrets {
      set $pass http://secrets-web;
      proxy_pass $pass;
      proxy_hide_header Content-Security-Policy;
      proxy_set_header Host taskcluster;
    }

    location /api/web-server {
      set $pass http://web-server-web;
      proxy_pass $pass;
      proxy_hide_header Content-Security-Policy;
      proxy_set_header Host taskcluster;
    }

    location /api/worker-manager {
      set $pass http://worker-manager-web;
      proxy_pass $pass;
      proxy_hide_header Content-Security-Policy;
      proxy_set_header Host taskcluster;
    }
  }
}