151 lines
4.6 KiB
YAML
151 lines
4.6 KiB
YAML
{{- if and (ne .Values.expose.type "ingress") (not .Values.expose.tls.enabled) }}
|
|
{{- $scheme := (include "harbor.component.scheme" .) -}}
|
|
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: {{ template "harbor.nginx" . }}
|
|
labels:
|
|
{{ include "harbor.labels" . | indent 4 }}
|
|
data:
|
|
nginx.conf: |+
|
|
worker_processes auto;
|
|
pid /tmp/nginx.pid;
|
|
|
|
events {
|
|
worker_connections 3096;
|
|
use epoll;
|
|
multi_accept on;
|
|
}
|
|
|
|
http {
|
|
client_body_temp_path /tmp/client_body_temp;
|
|
proxy_temp_path /tmp/proxy_temp;
|
|
fastcgi_temp_path /tmp/fastcgi_temp;
|
|
uwsgi_temp_path /tmp/uwsgi_temp;
|
|
scgi_temp_path /tmp/scgi_temp;
|
|
tcp_nodelay on;
|
|
|
|
# this is necessary for us to be able to disable request buffering in all cases
|
|
proxy_http_version 1.1;
|
|
|
|
upstream core {
|
|
server "{{ template "harbor.core" . }}:{{ template "harbor.core.servicePort" . }}";
|
|
}
|
|
|
|
upstream portal {
|
|
server {{ template "harbor.portal" . }}:{{ template "harbor.portal.servicePort" . }};
|
|
}
|
|
|
|
log_format timed_combined '[$time_local]:$remote_addr - '
|
|
'"$request" $status $body_bytes_sent '
|
|
'"$http_referer" "$http_user_agent" '
|
|
'$request_time $upstream_response_time $pipe';
|
|
|
|
access_log /dev/stdout timed_combined;
|
|
|
|
map $http_x_forwarded_proto $x_forwarded_proto {
|
|
default $http_x_forwarded_proto;
|
|
"" $scheme;
|
|
}
|
|
|
|
server {
|
|
{{- if .Values.ipFamily.ipv4.enabled}}
|
|
listen 8080;
|
|
{{- end}}
|
|
{{- if .Values.ipFamily.ipv6.enabled }}
|
|
listen [::]:8080;
|
|
{{- end }}
|
|
server_tokens off;
|
|
# disable any limits to avoid HTTP 413 for large image uploads
|
|
client_max_body_size 0;
|
|
|
|
# Add extra headers
|
|
add_header X-Frame-Options DENY;
|
|
add_header Content-Security-Policy "frame-ancestors 'none'";
|
|
|
|
location / {
|
|
proxy_pass {{ $scheme }}://portal/;
|
|
proxy_set_header Host $host;
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
proxy_set_header X-Forwarded-Proto $x_forwarded_proto;
|
|
|
|
proxy_buffering off;
|
|
proxy_request_buffering off;
|
|
}
|
|
|
|
location /api/ {
|
|
proxy_pass {{ $scheme }}://core/api/;
|
|
{{- if and .Values.internalTLS.enabled }}
|
|
proxy_ssl_verify off;
|
|
proxy_ssl_session_reuse on;
|
|
{{- end }}
|
|
proxy_set_header Host $host;
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
proxy_set_header X-Forwarded-Proto $x_forwarded_proto;
|
|
|
|
proxy_buffering off;
|
|
proxy_request_buffering off;
|
|
}
|
|
|
|
location /chartrepo/ {
|
|
proxy_pass {{ $scheme }}://core/chartrepo/;
|
|
{{- if and .Values.internalTLS.enabled }}
|
|
proxy_ssl_verify off;
|
|
proxy_ssl_session_reuse on;
|
|
{{- end }}
|
|
proxy_set_header Host $host;
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
proxy_set_header X-Forwarded-Proto $x_forwarded_proto;
|
|
|
|
proxy_buffering off;
|
|
proxy_request_buffering off;
|
|
}
|
|
|
|
location /c/ {
|
|
proxy_pass {{ $scheme }}://core/c/;
|
|
proxy_set_header Host $host;
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
proxy_set_header X-Forwarded-Proto $x_forwarded_proto;
|
|
|
|
proxy_buffering off;
|
|
proxy_request_buffering off;
|
|
}
|
|
|
|
location /v1/ {
|
|
return 404;
|
|
}
|
|
|
|
location /v2/ {
|
|
proxy_pass {{ $scheme }}://core/v2/;
|
|
proxy_set_header Host $http_host;
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
proxy_set_header X-Forwarded-Proto $x_forwarded_proto;
|
|
proxy_buffering off;
|
|
proxy_request_buffering off;
|
|
proxy_send_timeout 900;
|
|
proxy_read_timeout 900;
|
|
}
|
|
|
|
location /service/ {
|
|
proxy_pass {{ $scheme }}://core/service/;
|
|
proxy_set_header Host $host;
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
proxy_set_header X-Forwarded-Proto $x_forwarded_proto;
|
|
|
|
proxy_buffering off;
|
|
proxy_request_buffering off;
|
|
}
|
|
|
|
location /service/notifications {
|
|
return 404;
|
|
}
|
|
}
|
|
}
|
|
{{- end }}
|