b2g.kz

Назначение: Основной домен для всех приложений

Upstream

upstream api_backend {
    server 10.10.19.21:8000;  # web-1
    server 10.10.19.22:8000;  # web-2
}

upstream shared_backend {
    server 10.10.19.21:8002;  # web-1
    server 10.10.19.22:8002;  # web-2
}

upstream suo_backend {
    server 10.10.19.21:8001;  # web-1
    server 10.10.19.22:8001;  # web-2
}

Server блоки

CallBox

location /callbox/ {
    alias /var/www/callbox/;
    try_files $uri $uri/ /callbox/index.html;
}

location /api/ {
    proxy_pass http://api_backend;
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
}

Shared Admin

location /admin/ {
    alias /var/www/shared-admin/;
    try_files $uri $uri/ /admin/index.html;
}

location /admin-api/ {
    proxy_pass http://shared_backend;
}

СУО

location /suo/ {
    alias /var/www/suo/;
    try_files $uri $uri/ /suo/index.html;
}

location /suo-api/ {
    proxy_pass http://suo_backend;
}

# WebSocket для СУО
location /suo-api/ws/ {
    proxy_pass http://suo_backend;
    proxy_http_version 1.1;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection "upgrade";
}

SSL

ssl_certificate /etc/letsencrypt/live/b2g.kz/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/b2g.kz/privkey.pem;

Обновление: Certbot автоматически (cron на lb-1)