Files
smom-dbis-138/deploy/nginx/omnl-common-locations.conf
defiQUG 6dcadc86a2 chore(omnl): consolidate portal and domain routing updates
Capture non-secret OMNL portal, journal, chain, and nginx routing updates from the operator cleanup session while leaving generated auth includes unstaged.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-07 09:57:01 -07:00

80 lines
2.6 KiB
Plaintext

# Shared OMNL Bank proxy locations (include inside each server block)
location /api/v1/ {
include /etc/nginx/omnl-portal-auth-current.conf.inc;
proxy_pass http://omnl_api/api/v1/;
proxy_http_version 1.1;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_read_timeout 120s;
}
location /settlement/ {
include /etc/nginx/omnl-portal-auth-current.conf.inc;
proxy_pass http://omnl_settlement/api/v1/settlement/;
proxy_http_version 1.1;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_read_timeout 120s;
}
location /exchange/ {
include /etc/nginx/omnl-portal-auth-current.conf.inc;
proxy_pass http://omnl_exchange/api/v1/exchange/;
proxy_http_version 1.1;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_read_timeout 120s;
}
location /assets/ {
proxy_pass http://omnl_frontend;
proxy_http_version 1.1;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_buffering off;
proxy_request_buffering off;
}
# token-aggregation HTML consoles (/omnl/compliance, /omnl/dashboard, /omnl/terminal)
location /omnl/ {
include /etc/nginx/omnl-portal-auth-current.conf.inc;
proxy_pass http://omnl_api/omnl/;
proxy_http_version 1.1;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_read_timeout 120s;
}
location /health {
return 200 'OMNL Bank online — 128 chains';
add_header Content-Type text/plain;
}
location / {
proxy_pass http://omnl_frontend;
proxy_http_version 1.1;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
add_header Cache-Control "no-cache, no-store, must-revalidate" always;
}
location = /index.html {
proxy_pass http://omnl_frontend/index.html;
proxy_http_version 1.1;
proxy_set_header Host $host;
add_header Cache-Control "no-cache, no-store, must-revalidate" always;
}