mirror of
https://github.com/TecharoHQ/anubis.git
synced 2025-08-03 01:38:14 -04:00
6858f66a62
* Add check endpoint which can be used with nginx' auth_request function * feat(cmd): allow configuring redirect domains * test: add test environment for the nginx_auth PR This is a full local setup of the nginx_auth PR including HTTPS so that it's easier to validate in isolation. This requires an install of k3s (https://k3s.io) with traefik set to listen on localhost. This will be amended in the future but for now this works enough to ship it. Signed-off-by: Xe Iaso <me@xeiaso.net> * fix(cmd|lib): allow empty redirect domains variable Signed-off-by: Xe Iaso <me@xeiaso.net> * fix(test): add space to target variable in anubis container Signed-off-by: Xe Iaso <me@xeiaso.net> * docs(admin): rewrite subrequest auth docs, make generic * docs(install): document REDIRECT_DOMAINS flag Signed-off-by: Xe Iaso <me@xeiaso.net> * feat(lib): clamp redirects to the same HTTP host Only if REDIRECT_DOMAINS is not set. Signed-off-by: Xe Iaso <me@xeiaso.net> --------- Signed-off-by: Xe Iaso <me@xeiaso.net> Co-authored-by: Xe Iaso <me@xeiaso.net>
25 lines
593 B
Plaintext
25 lines
593 B
Plaintext
server {
|
|
listen 80;
|
|
listen [::]:80;
|
|
server_name nginx.local.cetacean.club;
|
|
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
|
|
location /.within.website/ {
|
|
proxy_pass http://localhost:8923;
|
|
auth_request off;
|
|
}
|
|
|
|
location @redirectToAnubis {
|
|
return 307 /.within.website/?redir=$scheme://$host$request_uri;
|
|
auth_request off;
|
|
}
|
|
|
|
location / {
|
|
auth_request /.within.website/x/cmd/anubis/api/check;
|
|
error_page 401 = @redirectToAnubis;
|
|
root /usr/share/nginx/html;
|
|
index index.html index.htm;
|
|
}
|
|
} |