ae9a71034d
Add HTTP /v1 MVC, TCP send path, groups with server-side member-avatar collage, object-storage upload, and friends/favorites around the architecture-v3 layout. Co-authored-by: Cursor <cursoragent@cursor.com>
30 lines
925 B
Plaintext
30 lines
925 B
Plaintext
# Spark IM + shared HTTPS on :443 (ssl_preread).
|
|
# sparkim.wyrs365.com → IM TLS terminator → PROXY plaintext to gnet :19000
|
|
# default SNI → existing HTTP sites on 127.0.0.1:8443 (proxy_protocol restores RealIP)
|
|
|
|
map $ssl_preread_server_name $spark_sni_backend {
|
|
sparkim.wyrs365.com 127.0.0.1:19001;
|
|
default 127.0.0.1:8443;
|
|
}
|
|
|
|
server {
|
|
listen 443 reuseport;
|
|
listen [::]:443 reuseport;
|
|
ssl_preread on;
|
|
proxy_connect_timeout 5s;
|
|
proxy_timeout 3600s;
|
|
proxy_protocol on;
|
|
proxy_pass $spark_sni_backend;
|
|
}
|
|
|
|
server {
|
|
listen 127.0.0.1:19001 ssl proxy_protocol;
|
|
ssl_certificate /etc/letsencrypt/live/sparkim.wyrs365.com/fullchain.pem;
|
|
ssl_certificate_key /etc/letsencrypt/live/sparkim.wyrs365.com/privkey.pem;
|
|
ssl_protocols TLSv1.2 TLSv1.3;
|
|
proxy_connect_timeout 5s;
|
|
proxy_timeout 3600s;
|
|
proxy_protocol on;
|
|
proxy_pass 127.0.0.1:19000;
|
|
}
|