Mercurial > hg > digilib
diff doc/src/site/markdown/server-setup.md @ 1658:28df291d4e26
Updated documentation.
Updated build and install instructions to be simpler and hopefully more
clear. Updated @funkyfuture's refactored configuration docs (still lots
TODO).
Added @funkyfuture's server-setup docu to menu.
Renamed non-minified digilib-dbg.html to digilib-dev.html
author | Robert Casties <r0bcas7@gmail.com> |
---|---|
date | Mon, 20 Nov 2017 21:08:35 +0100 |
parents | |
children | 6d5e04a54848 |
line wrap: on
line diff
--- /dev/null Thu Jan 01 00:00:00 1970 +0000 +++ b/doc/src/site/markdown/server-setup.md Mon Nov 20 21:08:35 2017 +0100 @@ -0,0 +1,40 @@ +# Server setups for digilib + +There are a variety of ways to deploy digilib on different server configurations for production sites. + +Here are some examples. + +## nginx as proxy + +This is an example configuration for `nginx` as a proxy for a single instance +of digilib (listening on port `8080`) that handles transport encryption and +restricts access to sensitive data to the gateway of a local network +(`1.2.3.4`). + +```nginx +server { + listen 443 ssl http2; + listen [::]:443 ssl http2; + server_name digilib.example.org; + + # this certificate chain shall *not* include the root certificate: + ssl_certificate /etc/ssl/certs/digilib.example.org.pem; + ssl_certificate_key /etc/ssl/private/digilib.example.org.key; + + include /etc/nginx/proxy_params; + + location ~* .*/(dlConfig|dlRequest).jsp$ { + allow 1.2.3.4; + deny all; + proxy_pass http://localhost:8080; + } + + location / { + proxy_pass http://localhost:8080; + } +} +``` + +## Resources + +- the [nginx documentation](nginx.org/en/docs/)