diff options
author | Wayne Witzel III <wayne@riotousliving.com> | 2016-10-07 16:47:15 +0200 |
---|---|---|
committer | Wayne Witzel III <wayne@riotousliving.com> | 2016-10-07 16:47:15 +0200 |
commit | 579df6e215b315cace676acb8e6a945810f1449b (patch) | |
tree | 2d727e8278e33f815e1c4bac6f6fb4138032952c | |
parent | Merge branch 'devel' into jtabor-sockets (diff) | |
download | awx-579df6e215b315cace676acb8e6a945810f1449b.tar.xz awx-579df6e215b315cace676acb8e6a945810f1449b.zip |
new configuration files for uwsgi/daphne
-rw-r--r-- | config/awx-nginx-80.conf | 73 | ||||
-rw-r--r-- | config/uwsgi_params | 17 | ||||
-rw-r--r-- | requirements/requirements.txt | 3 |
3 files changed, 92 insertions, 1 deletions
diff --git a/config/awx-nginx-80.conf b/config/awx-nginx-80.conf new file mode 100644 index 0000000000..facaeae181 --- /dev/null +++ b/config/awx-nginx-80.conf @@ -0,0 +1,73 @@ +worker_processes auto; + +# Enable upgrading of connection (and websocket proxying) depending on the +# presence of the upgrade field in the client request header +map \$http_upgrade \$connection_upgrade { +default upgrade; +'' close; +} + +# Create an upstream alias to where we've set daphne to bind to +upstream uwsgi { + server 127.0.0.1:8050; +} + +upstream daphne { + server 127.0.0.1:8051; +} + +http { + ssl_session_cache shared:SSL:10m; + ssl_session_timeout 10m; + + server { + listen 80; + listen 443 ssl; + + # If you have a domain name, this is where to add it + server_name localhost *; + keepalive_timeout 70; + + ssl_certificate /etc/tower/tower.crt; + ssl_certificate_key /etc/tower/tower.key; + ssl_protocols TLSv1 TLSv1.1 TLSv1.2; + ssl_ciphers HIGH:!aNULL:!MD5; + + location /favicon.ico { alias /var/lib/awx/public/static/favicon.ico; } + location /static { alias /var/lib/awx/public/static; } + + location /websocket { + # Pass request to the upstream alias + proxy_pass http://daphne; + # Require http version 1.1 to allow for upgrade requests + proxy_http_version 1.1; + # We want proxy_buffering off for proxying to websockets. + proxy_buffering off; + # http://en.wikipedia.org/wiki/X-Forwarded-For + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + # enable this if you use HTTPS: + proxy_set_header X-Forwarded-Proto https; + # pass the Host: header from the client for the sake of redirects + proxy_set_header Host $http_host; + # We've set the Host header, so we don't need Nginx to muddle + # about with redirects + proxy_redirect off; + # Depending on the request value, set the Upgrade and + # connection headers + proxy_set_header Upgrade $http_upgrade; + proxy_set_header Connection $connection_upgrade; + } + + location / { + proxy_pass http://uwsgi; + proxy_http_version 1.1; + proxy_buffering off; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto https; + proxy_set_header Host $http_host; + proxy_redirect off; + proxy_set_header Upgrade $http_upgrade; + proxy_set_header Connection $connection_upgrade; + } + } +} diff --git a/config/uwsgi_params b/config/uwsgi_params new file mode 100644 index 0000000000..09c732cd68 --- /dev/null +++ b/config/uwsgi_params @@ -0,0 +1,17 @@ + +uwsgi_param QUERY_STRING $query_string; +uwsgi_param REQUEST_METHOD $request_method; +uwsgi_param CONTENT_TYPE $content_type; +uwsgi_param CONTENT_LENGTH $content_length; + +uwsgi_param REQUEST_URI $request_uri; +uwsgi_param PATH_INFO $document_uri; +uwsgi_param DOCUMENT_ROOT $document_root; +uwsgi_param SERVER_PROTOCOL $server_protocol; +uwsgi_param REQUEST_SCHEME $scheme; +uwsgi_param HTTPS $https if_not_empty; + +uwsgi_param REMOTE_ADDR $remote_addr; +uwsgi_param REMOTE_PORT $remote_port; +uwsgi_param SERVER_PORT $server_port; +uwsgi_param SERVER_NAME $server_name; diff --git a/requirements/requirements.txt b/requirements/requirements.txt index c2effa3802..be4e9117a0 100644 --- a/requirements/requirements.txt +++ b/requirements/requirements.txt @@ -134,4 +134,5 @@ wsgiref==0.1.2 xmltodict==0.9.2 channels==0.17.2 asgi_amqp==0.3 - +uwsgi==2.0.14 +daphne==0.15.0 |