Mercurial > hg > digilib
annotate doc/src/site/markdown/deployment.md @ 1654:22dd14eccdc0
Change digilib project links to GitHub.
author | Robert Casties <r0bcas7@gmail.com> |
---|---|
date | Tue, 14 Nov 2017 18:41:22 +0100 |
parents | b924f480326e |
children |
rev | line source |
---|---|
1639
b924f480326e
Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff
changeset
|
1 # Deploying digilib |
b924f480326e
Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff
changeset
|
2 |
b924f480326e
Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff
changeset
|
3 There are a variety of ways to deploy digilib on different server setups. |
b924f480326e
Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff
changeset
|
4 |
b924f480326e
Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff
changeset
|
5 ## nginx as proxy |
b924f480326e
Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff
changeset
|
6 |
b924f480326e
Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff
changeset
|
7 This is an example configuration for `nginx` as a proxy for a single instance |
b924f480326e
Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff
changeset
|
8 of digilib (listening on port `8080`) that handles transport encryption and |
b924f480326e
Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff
changeset
|
9 restricts access to sensitive data to the gateway of a local network |
b924f480326e
Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff
changeset
|
10 (`1.2.3.4`). |
b924f480326e
Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff
changeset
|
11 |
b924f480326e
Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff
changeset
|
12 ```nginx |
b924f480326e
Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff
changeset
|
13 server { |
b924f480326e
Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff
changeset
|
14 listen 443 ssl http2; |
b924f480326e
Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff
changeset
|
15 listen [::]:443 ssl http2; |
b924f480326e
Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff
changeset
|
16 server_name digilib.example.org; |
b924f480326e
Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff
changeset
|
17 |
b924f480326e
Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff
changeset
|
18 # this certificate chain shall *not* include the root certificate: |
b924f480326e
Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff
changeset
|
19 ssl_certificate /etc/ssl/certs/digilib.example.org.pem; |
b924f480326e
Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff
changeset
|
20 ssl_certificate_key /etc/ssl/private/digilib.example.org.key; |
b924f480326e
Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff
changeset
|
21 |
b924f480326e
Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff
changeset
|
22 include /etc/nginx/proxy_params; |
b924f480326e
Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff
changeset
|
23 |
b924f480326e
Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff
changeset
|
24 location ~* .*/(dlConfig|dlRequest).jsp$ { |
b924f480326e
Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff
changeset
|
25 allow 1.2.3.4; |
b924f480326e
Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff
changeset
|
26 deny all; |
b924f480326e
Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff
changeset
|
27 proxy_pass http://localhost:8080; |
b924f480326e
Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff
changeset
|
28 } |
b924f480326e
Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff
changeset
|
29 |
b924f480326e
Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff
changeset
|
30 location / { |
b924f480326e
Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff
changeset
|
31 proxy_pass http://localhost:8080; |
b924f480326e
Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff
changeset
|
32 } |
b924f480326e
Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff
changeset
|
33 } |
b924f480326e
Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff
changeset
|
34 ``` |
b924f480326e
Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff
changeset
|
35 |
b924f480326e
Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff
changeset
|
36 ## Resources |
b924f480326e
Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff
changeset
|
37 |
b924f480326e
Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff
changeset
|
38 - the [nginx documentation](nginx.org/en/docs/) |