main.nginx.conf

# Copyright 2017 ODK Central Developers
# See the NOTICE file at the top-level directory of this distribution and at
# https://github.com/getodk/central-frontend/blob/master/NOTICE.
#
# This file is part of ODK Central. It is subject to the license terms in
# the LICENSE file found in the top-level directory of this distribution and at
# https://www.apache.org/licenses/LICENSE-2.0. No part of ODK Central,
# including this file, may be copied, modified, propagated, or distributed
# except according to the terms contained in the LICENSE file.

# This configuration file is for development only. For production, see
# https://github.com/getodk/central.

daemon off;
error_log stderr;
pid ./.nginx/nginx.pid;

events {
}
http {
  access_log ./.nginx/nginx-access.log;
  client_body_temp_path ./.nginx;

  types {
      text/html                             html htm shtml;
      text/css                              css;
      text/xml                              xml;
      application/javascript                js;

      text/plain                            txt;

      image/png                             png;
      image/x-icon                          ico;
      image/svg+xml                         svg svgz;

      application/font-woff                 woff;
      application/json                      json;
      application/vnd.ms-excel              xls;
      application/zip                       zip;

      application/vnd.openxmlformats-officedocument.spreadsheetml.sheet          xlsx;
  }

  map $sent_http_set_cookie $session_cookie {
    ~^__Host-(session=.+)$ $1;
  }

  server {
    listen 8989;
    server_name localhost;

    server_tokens off;

    include ./common-headers.nginx.conf;

    client_max_body_size 100m;

    gzip on;
    gzip_vary on;
    gzip_min_length 1280;
    gzip_http_version 1.1;
    gzip_types text/plain text/css application/json application/x-javascript text/xml text/csv;

    location /- {
      proxy_pass http://localhost:8005/-;
      proxy_redirect off;
      proxy_set_header Host $host;
    }

    location ~ ^/v\d {
      proxy_pass http://localhost:8383;
      proxy_redirect off;

      # buffer requests, but not responses, so streaming out works.
      proxy_request_buffering on;
      proxy_buffering off;
      proxy_read_timeout 2m;

      # Dev-specific hacks:

      # In conjunction with the map{} definition above, remap
      # "Set-Cookie: __Host-session=..." to "Set-Cookie: session=..."
      #
      #   1. Cookies cannot use the "__Host-" prefix in non-HTTPs requests
      #      see: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie#cookie_prefixes
      #   2. central-backend cookie parsing is relaxed and will consider the
      #      first cookie ending in "session" to be the session cookie
      add_header Set-Cookie $session_cookie;
      # re-add common headers after add_header call
      include ./common-headers.nginx.conf;

      # Trick central-backend from thinking connections are coming
      # over HTTPS so that ExpressJS will set "secure" cookies.
      proxy_set_header X-Forwarded-Proto https;
    }

    location / {
      root ./dist;

      include ./common-headers.nginx.conf;
      # We return this header for more files in development than we do in
      # production. That's needed because in development, unlike production,
      # many file names don't contain hashes.
      add_header Cache-Control no-cache;
    }
  }
}