60 lines
2.2 KiB
Plaintext
60 lines
2.2 KiB
Plaintext
# Include inside the authenticated HiCAD HTTPS server block.
|
|
# Replace __AI_CAD_WS_PROXY_SECRET__ during deployment and chmod the rendered file 600.
|
|
|
|
location ^~ /vendor/zoo-modeling-app/assets {
|
|
root /var/www/ai-chatbot/public;
|
|
try_files $uri =404;
|
|
gzip_static on;
|
|
add_header Cache-Control "public, max-age=31536000, immutable" always;
|
|
}
|
|
|
|
location ^~ /vendor/zoo-modeling-app/fonts/ {
|
|
root /var/www/ai-chatbot/public;
|
|
try_files $uri =404;
|
|
add_header Cache-Control "public, max-age=31536000, immutable" always;
|
|
}
|
|
|
|
location = /vendor/zoo-modeling-app/kcl_wasm_lib_bg.wasm {
|
|
root /var/www/ai-chatbot/public;
|
|
try_files $uri =404;
|
|
add_header Cache-Control "public, max-age=3600" always;
|
|
}
|
|
|
|
location = /_hicad_zoo_ws_auth {
|
|
internal;
|
|
proxy_pass http://127.0.0.1:3125/api/ai-cad/zoo-ws-authorize;
|
|
proxy_pass_request_body off;
|
|
proxy_set_header Content-Length "";
|
|
proxy_set_header Host $host;
|
|
proxy_set_header Cookie $http_cookie;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
proxy_set_header X-Forwarded-Proto $scheme;
|
|
proxy_set_header X-HiCAD-Original-URI $request_uri;
|
|
proxy_set_header X-HiCAD-WS-Proxy-Secret "__AI_CAD_WS_PROXY_SECRET__";
|
|
}
|
|
|
|
location ^~ /api/ai-cad/zoo-ws/ {
|
|
auth_request /_hicad_zoo_ws_auth;
|
|
auth_request_set $zoo_authorization $upstream_http_x_zoo_authorization;
|
|
|
|
# Resolve at request time and skip AAAA records because the production host
|
|
# has no IPv6 route. This avoids a long failed IPv6 retry on cold connects.
|
|
resolver 1.1.1.1 8.8.8.8 ipv6=off valid=300s;
|
|
set $zoo_api_host api.zoo.dev;
|
|
rewrite ^/api/ai-cad/zoo-ws/(.*)$ /ws/$1 break;
|
|
proxy_pass https://$zoo_api_host$uri$is_args$args;
|
|
proxy_http_version 1.1;
|
|
proxy_ssl_server_name on;
|
|
proxy_ssl_name api.zoo.dev;
|
|
proxy_set_header Host api.zoo.dev;
|
|
proxy_set_header Origin https://app.zoo.dev;
|
|
proxy_set_header Authorization $zoo_authorization;
|
|
proxy_set_header Cookie "";
|
|
proxy_set_header Upgrade $http_upgrade;
|
|
proxy_set_header Connection "upgrade";
|
|
proxy_buffering off;
|
|
proxy_request_buffering off;
|
|
proxy_read_timeout 3600s;
|
|
proxy_send_timeout 3600s;
|
|
}
|