mirror of
https://github.com/go-sigma/sigma.git
synced 2026-10-28 14:34:34 +08:00
Tosone
2009156bf5
Run the self-hosted rs3 service instead of Minio in test.yml and swap the local helper script, Makefile helm values, and AGENTS.md notes accordingly. Fix the E2E workflow (refs #426): it only triggered on the `main` branch, which does not exist in this repository, so the job never ran. Trigger it on `dev` for both push and pull_request like test.yml, build the image via the consolidated `make docker-build`, bump the checkout/setup-go actions, drop the hosted-toolcache cleanup, and refresh the E2E tooling to k6 v2.3.0 and skopeo v1.24.1. Repair the image startup path as well: start nginx with an explicit /etc/nginx/nginx.conf and a /dev/stderr error log so the non-root user does not touch the compiled-in log path, create /etc/sigma with mode 0755 before copying config.yaml (COPY --chmod made the directory non-traversable), and disable redis in the shipped default config since cache, locker and work queue are inmemory.
71 lines
1.6 KiB
Plaintext
71 lines
1.6 KiB
Plaintext
error_log /dev/stderr warn;
|
|
pid /tmp/nginx.pid;
|
|
|
|
worker_processes auto;
|
|
|
|
events {
|
|
worker_connections 1024;
|
|
}
|
|
|
|
http {
|
|
include /etc/nginx/mime.types;
|
|
default_type application/octet-stream;
|
|
|
|
access_log /dev/stdout;
|
|
error_log /dev/stderr warn;
|
|
|
|
server_tokens off;
|
|
absolute_redirect off;
|
|
client_max_body_size 0;
|
|
client_body_temp_path /tmp/client_temp;
|
|
proxy_temp_path /tmp/proxy_temp;
|
|
fastcgi_temp_path /tmp/fastcgi_temp;
|
|
uwsgi_temp_path /tmp/uwsgi_temp;
|
|
scgi_temp_path /tmp/scgi_temp;
|
|
|
|
gzip on;
|
|
gzip_static on;
|
|
gzip_disable "msie6";
|
|
gzip_vary on;
|
|
gzip_types text/plain text/css application/javascript application/json;
|
|
|
|
server {
|
|
listen 8080;
|
|
server_name _;
|
|
index index.html;
|
|
|
|
location /api/ {
|
|
proxy_pass http://127.0.0.1:3000;
|
|
proxy_set_header Host $host;
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
proxy_set_header X-Forwarded-Proto $scheme;
|
|
}
|
|
|
|
location /v2/ {
|
|
proxy_pass http://127.0.0.1:3000;
|
|
proxy_set_header Host $host;
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
proxy_set_header X-Forwarded-Proto $scheme;
|
|
}
|
|
|
|
location = /swagger {
|
|
return 301 /swagger/;
|
|
}
|
|
|
|
location /swagger/ {
|
|
alias /app/swag/;
|
|
try_files $uri $uri/ =404;
|
|
}
|
|
|
|
location / {
|
|
alias /app/;
|
|
try_files $uri $uri/ /index.html;
|
|
expires 1d;
|
|
add_header X-Frame-Options DENY always;
|
|
add_header Content-Security-Policy "frame-ancestors 'none'" always;
|
|
}
|
|
}
|
|
}
|