hacklab/T-HUB
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Edge: tailscale0 relay exemption, CT320 transit hop, files/office/intake host parity

Browse source
This commit is contained in:
glass beadian 2026-10-11 21:36:20 +00:00
parent 83e34aa343
commit 7cea73dc0d
2 changed files with 86 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

67
infra/occupymedia/edge/nginx.conf
View file

@ -16,6 +16,9 @@ http {
"" close;
}
# Lets the remote failover probe tell edge-served responses from tunnel-served.
add_header X-Served-By occ-edge always;
# HTTP: redirect everything to HTTPS.
server {
listen 80;
@ -125,6 +128,70 @@ http {
return 200 "edge-ok";
}
# Parity with the tunnel ingress: occ-files + Collabora live on CT 320.
server {
listen 443 ssl;
listen [::]:443 ssl;
server_name files.occupymedia.cc;
ssl_certificate /etc/letsencrypt/live/occupymedia.cc/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/occupymedia.cc/privkey.pem;
client_max_body_size 512m;
location / {
proxy_pass http://192.168.13.210:9200;
proxy_http_version 1.1;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto https;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $connection_upgrade;
proxy_read_timeout 3600s;
proxy_send_timeout 3600s;
proxy_buffering off;
}
}
server {
listen 443 ssl;
listen [::]:443 ssl;
server_name office.occupymedia.cc;
ssl_certificate /etc/letsencrypt/live/occupymedia.cc/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/occupymedia.cc/privkey.pem;
location / {
proxy_pass http://192.168.13.210:9980;
proxy_http_version 1.1;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto https;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $connection_upgrade;
proxy_read_timeout 3600s;
proxy_send_timeout 3600s;
}
}
server {
listen 443 ssl;
listen [::]:443 ssl;
server_name intake.occupymedia.cc;
ssl_certificate /etc/letsencrypt/live/occupymedia.cc/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/occupymedia.cc/privkey.pem;
client_max_body_size 20m;
location / {
proxy_pass http://occ-intake:3000;
proxy_http_version 1.1;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto https;
proxy_read_timeout 60s;
}
}
# Everything else on this IP: drop the connection.
server {
listen 443 ssl default_server;