Config for force_ssl = true about active-elastic-job HOT 9 CLOSED

files:
   "/opt/elasticbeanstalk/support/conf/webapp_healthd.conf":
     owner: root
     group: root
     mode: "000644"
     content: |
       client_max_body_size 10M;

       upstream my_app {
         server unix:///var/run/puma/my_app.sock;
       }

       map $uri $preferred_proto {
         default "https";
         ~^/(packs|public)/ "none";
         ~^/active_job "http";
         ~^/health "http";
       }

       log_format healthd '$msec"$uri"'
                       '$status"$request_time"$upstream_response_time"'
                       '$http_x_forwarded_for';

       server {

         sendfile on;

         tcp_nopush on;
         tcp_nodelay off;

         gzip on;
         gzip_http_version 1.0;
         gzip_proxied any;
         gzip_min_length 500;
         gzip_disable "MSIE [1-6]\.";
         gzip_types text/plain text/xml text/css
                   text/comma-separated-values
                   text/javascript application/x-javascript
                   application/atom+xml;


         listen 80;
         server_name _ localhost;

         root /var/app/current/public;

         error_page 405 = /active_job;

         if ($time_iso8601 ~ "^(\d{4})-(\d{2})-(\d{2})T(\d{2})") {
           set $year $1;
           set $month $2;
           set $day $3;
           set $hour $4;
         }

         access_log  /var/log/nginx/access.log  main;
         access_log /var/log/nginx/healthd/application.log.$year-$month-$day-$hour healthd;

         try_files $uri/index.html $uri.html $uri @app;


         if ($preferred_proto = "http") {
           set $http_x_forwarded_proto $preferred_proto;
         }

         if ($preferred_proto = "none") {
           set $preferred_proto $http_x_forwarded_proto;
         }

         if ($preferred_proto != $http_x_forwarded_proto) {
           rewrite ^(.*) $preferred_proto://$host$request_uri redirect;
         }


         # App always use https
         location @app  {
           proxy_http_version 1.1;
           proxy_set_header Connection "";
           proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
           proxy_set_header X-Real-IP $remote_addr;
           proxy_set_header X-Forwarded-Proto https;
           proxy_set_header Host $host;

           proxy_pass http://my_app;
         }


         # WS support always use https
         location /cable {
           proxy_http_version 1.1;
           proxy_set_header Upgrade "websocket";
           proxy_set_header Connection "Upgrade";
           proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
           proxy_set_header X-Real-IP $remote_addr;
           proxy_set_header X-Forwarded-Proto https;
           proxy_set_header Host $host;

           proxy_pass http://my_app;
         }


         # Elastic active jobs don't use https
         location /active_job {
           proxy_http_version 1.1;
           proxy_set_header Connection "";
           proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
           proxy_set_header X-Real-IP $remote_addr;
           proxy_set_header Host $host;

           # note the trailing slash here, it matters!
           proxy_pass http://my_app/;
         }


         # Change packs for assets if you are using native compile assets for rails app
         location /packs {
           alias /var/app/current/public/packs;
           gzip_static on;
           gzip on;
           expires max;
           add_header Cache-Control public;
         }


         location /public {
           alias /var/app/current/public;
           gzip_static on;
           gzip on;
           expires max;
           add_header Cache-Control public;
         }
       }

container_commands:
  99_restart_nginx:
    command: "service nginx restart || service nginx start"