Securing HTTP requests about harmony-api HOT 6 OPEN

# --- + PROXY + ---

# Template variables:
#
# * domain = harmony.domain.com
# * name = harmony
# * type = proxy
# * host = localhost
# * port = 8282

upstream harmony-lb {
    server localhost:8282;
}

server {
   listen 80;
   server_name harmony.domain.com;
   return 301 https://harmony.domain.com$request_uri;
}

server {
    server_name harmony.domain.com;
    listen 443 ssl;


    location / {
        allow 192.168.1.1/24;
        allow 127.0.0.1;
        deny all;

        proxy_set_header Host $host;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

        proxy_pass http://harmony-lb;
    }

    ssl_certificate /etc/letsencrypt/live/harmony.domain.com/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/harmony.domain.com/privkey.pem;
    ssl_stapling on;
    ssl_stapling_verify on;
    add_header Strict-Transport-Security "max-age=31536000; includeSubdomains";

    access_log /var/log/nginx/harmony-access.log;
    error_log  /var/log/nginx/harmony-error.log;
}

# --- - PROXY - ---

        allow 192.168.1.1/24;
        allow 127.0.0.1;
        deny all;