mirror of
https://github.com/empayre/fleet.git
synced 2024-11-06 08:55:24 +00:00
7dadec3ecf
#7970 - [X] Changes file added for user-visible changes in `changes/` or `orbit/changes/`. See [Changes files](https://fleetdm.com/docs/contributing/committing-changes#changes-files) for more information. - ~[ ] Documented any API changes (docs/Using-Fleet/REST-API.md or docs/Contributing/API-for-contributors.md)~ - ~[ ] Documented any permissions changes~ - ~[ ] Input data is properly validated, `SELECT *` is avoided, SQL injection is prevented (using placeholders for values in statements)~ - ~[ ] Added support on fleet's osquery simulator `cmd/osquery-perf` for new osquery data ingestion features.~ - [X] Added/updated tests - [x] Manual QA for all new/changed functionality - For Orbit and Fleet Desktop changes: - [x] Manual QA must be performed in the three main OSs, macOS, Windows and Linux. - [x] Auto-update manual QA, from released version of component to new version (see [tools/tuf/test](../tools/tuf/test/README.md)).
27 lines
883 B
Nginx Configuration File
27 lines
883 B
Nginx Configuration File
server {
|
|
listen 8888;
|
|
ssl on;
|
|
server_name proxy;
|
|
proxy_ssl_server_name on;
|
|
|
|
# Use the same TLS certificate as the Fleet server as server certificate.
|
|
ssl_certificate /etc/nginx/certificates/fleet.crt;
|
|
ssl_certificate_key /etc/nginx/certificates/fleet.key;
|
|
|
|
# This server enforces all clients to use client certificates.
|
|
ssl_client_certificate /etc/nginx/certificates/client-ca.crt;
|
|
ssl_verify_client on;
|
|
|
|
# Fleet requests are routed to a Fleet server.
|
|
location / {
|
|
proxy_pass https://host.docker.internal:8080;
|
|
# Configure TLS server certificate to use to verify the Fleet server.
|
|
proxy_ssl_verify on;
|
|
proxy_ssl_trusted_certificate /etc/nginx/certificates/fleet.crt;
|
|
}
|
|
|
|
# TUF requests are routed to a TUF server.
|
|
location /tuf/ {
|
|
proxy_pass http://host.docker.internal:8081/;
|
|
}
|
|
} |