Skip to content

Commit

Permalink
Improve nginx configuration, add mock cert fp
Browse files Browse the repository at this point in the history
  • Loading branch information
DJAndries committed Aug 1, 2023
1 parent 07ea648 commit 1234a27
Show file tree
Hide file tree
Showing 2 changed files with 17 additions and 5 deletions.
20 changes: 16 additions & 4 deletions misc/temporary-enclave-bypass/nginx.conf
Original file line number Diff line number Diff line change
@@ -1,21 +1,33 @@
worker_processes 10;
worker_rlimit_nofile 8192;
worker_processes 16;

events {
worker_connections 4096;
}

http {
sendfile on;
access_log off;
error_log off;
keepalive_requests 100000;
keepalive_timeout 60;

upstream keepalive-upstream {
server 127.0.0.1:8081;
keepalive 200;
}

server {
listen 8080;

location /enclave {
proxy_pass https://127.0.0.1:8443;
proxy_ssl_verify off;
}

location / {
proxy_pass http://127.0.0.1:8081;
proxy_pass http://keepalive-upstream;
proxy_http_version 1.1;
proxy_set_header Connection "";
}
}
}
2 changes: 1 addition & 1 deletion start.sh
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
#!/bin/sh

nitriding \
-acme \
-mock-cert-fp "D87B0D697A90A2503F68E406CC8AFC26F2470F82F707D8E66616BA888B1B43C0" \
-fqdn "star-randsrv.bsg.brave.com" \
-appurl "https://github.com/brave/star-randsrv" \
-appwebsrv "http://127.0.0.1:8080" \
Expand Down

0 comments on commit 1234a27

Please sign in to comment.