add srem-test to DMZ as srem.psi.ch

Signed-off-by: Basil Bruhn <basil.bruhn@psi.ch>
2025-11-27 12:25:37 +01:00
parent aa758539fd
commit 9a708b6317
3 changed files with 61 additions and 2 deletions
@@ -0,0 +1,30 @@
+server {
+    listen 80;
+    server_name srem.psi.ch;
+
+    return 301 https://$host$request_uri;
+}
+
+server {
+    listen 443 ssl;
+    server_name srem.psi.ch;
+
+    ssl_certificate     /etc/nginx/certs/lx-docker-dmz-01.psi.ch.crt;
+    ssl_certificate_key /etc/nginx/private/lx-docker-dmz-01.psi.ch.key;
+
+    access_log /var/log/nginx/srem.access.log;
+    error_log  /var/log/nginx/srem.error.log;
+
+    # Proxy EVERYTHING to the Apache container
+    location / {
+        proxy_pass http://apache_app:80;
+
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+
+        # Important for CGI apps
+        proxy_buffering off;
+    }
+}
+