orenoblog

エンジニアになりたいExcel方眼紙erの物語

Nginx+chef-serverの簡単な設定

フロントにNginxを使います。

# /etc/nginx/nginx.conf
user  nginx;
worker_processes  1;
error_log  /var/log/nginx/error.log warn;
pid        /var/run/nginx.pid;


events {    worker_connections  1024;
}
http {
        #chef-server
        upstream chef_api_local {
                server localhost:4000;        }
        upstream chef_webui_local {
                server localhost:4040;
        }
        include conf.d/*;
}
# /etc/nginx/conf.d/chef-server.conf
server {
        server_name <servername>;
        ssl on;        ssl_certificate /etc/pki/tls/certs/server.crt;
        ssl_certificate_key /etc/pki/tls/certs/server.key;
        listen 443;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X_FORWARDED_PROTO $scheme;
        proxy_set_header Host $host:4000;        proxy_redirect off;

        location / {
                if ( $http_x_ops_timestamp = "") {
                        proxy_pass http://chef_webui_local;
                }
                try_files $uri @backend;
                break;
        }        location @backend {
                proxy_set_header X-Forwarded-Proto 'https';
                proxy_set_header Host $server_name;
                proxy_pass http://chef_api_local;
        }
}