Mercurial > hg > digilib

annotate doc/src/site/markdown/deployment.md @ 1654:22dd14eccdc0

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Change digilib project links to GitHub.
author Robert Casties <r0bcas7@gmail.com>
date Tue, 14 Nov 2017 18:41:22 +0100
parents b924f480326e
children
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
1639
b924f480326e Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff changeset
1 # Deploying digilib
b924f480326e Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff changeset
2
b924f480326e Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff changeset
3 There are a variety of ways to deploy digilib on different server setups.
b924f480326e Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff changeset
4
b924f480326e Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff changeset
5 ## nginx as proxy
b924f480326e Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff changeset
6
b924f480326e Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff changeset
7 This is an example configuration for `nginx` as a proxy for a single instance
b924f480326e Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff changeset
8 of digilib (listening on port `8080`) that handles transport encryption and
b924f480326e Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff changeset
9 restricts access to sensitive data to the gateway of a local network
b924f480326e Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff changeset
10 (`1.2.3.4`).
b924f480326e Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff changeset
11
b924f480326e Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff changeset
12 ```nginx
b924f480326e Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff changeset
13 server {
b924f480326e Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff changeset
14 listen 443 ssl http2;
b924f480326e Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff changeset
15 listen [::]:443 ssl http2;
b924f480326e Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff changeset
16 server_name digilib.example.org;
b924f480326e Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff changeset
17
b924f480326e Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff changeset
18 # this certificate chain shall *not* include the root certificate:
b924f480326e Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff changeset
19 ssl_certificate /etc/ssl/certs/digilib.example.org.pem;
b924f480326e Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff changeset
20 ssl_certificate_key /etc/ssl/private/digilib.example.org.key;
b924f480326e Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff changeset
21
b924f480326e Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff changeset
22 include /etc/nginx/proxy_params;
b924f480326e Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff changeset
23
b924f480326e Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff changeset
24 location ~* .*/(dlConfig|dlRequest).jsp$ {
b924f480326e Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff changeset
25 allow 1.2.3.4;
b924f480326e Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff changeset
26 deny all;
b924f480326e Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff changeset
27 proxy_pass http://localhost:8080;
b924f480326e Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff changeset
28 }
b924f480326e Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff changeset
29
b924f480326e Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff changeset
30 location / {
b924f480326e Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff changeset
31 proxy_pass http://localhost:8080;
b924f480326e Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff changeset
32 }
b924f480326e Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff changeset
33 }
b924f480326e Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff changeset
34 ```
b924f480326e Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff changeset
35
b924f480326e Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff changeset
36 ## Resources
b924f480326e Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff changeset
37
b924f480326e Adds a doc/?/deployment.md
Frank Sachsenheim <funkyfuture@riseup.net>
parents:
diff changeset
38 - the [nginx documentation](nginx.org/en/docs/)