Cache/nginx.conf at main · Netflix-Database/Cache · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
worker_processes auto;

events {
    worker_connections 768;
    # multi_accept on;
}

http {
    proxy_cache_path /var/cache/nginx levels=1:2 keys_zone=static_cache:10m inactive=60m;
    proxy_cache_key "$scheme$request_method$host$request_uri";
    proxy_cache_valid 200 60m;

    add_header Cache-Status $upstream_cache_status;

    map $imgtype $origin_file {
        default desktop.jpg;
        desktopImg desktop.jpg;
        titleImg titleImg.png;
        small small.png;
    }


    server {
        listen 8080;

        location = /livez {
            access_log off;
            add_header Cache-Control "no-store" always;
            default_type application/json;
            return 200 '{"status":"ok"}';
        }

        location = /readyz {
            access_log off;
            add_header Cache-Control "no-store" always;
            default_type application/json;
            return 200 '{"status":"ok"}';
        }

        location /live/ {
            resolver 8.8.8.8;

            proxy_ssl_server_name on;
            proxy_set_header Host ${HUB_LIVE_HOST};
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_set_header X-Forwarded-Proto $scheme;

            add_header Access-Control-Allow-Origin ${HUB_ORIGIN};

            proxy_pass https://${HUB_LIVE_HOST}/;
        }

        location ~ ^/avatar/([0-9]+)$ {
            resolver 8.8.8.8;
            set $user_id $1;

            proxy_ssl_server_name on;
            proxy_set_header Host api.${AUTH_DOMAIN};
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_set_header X-Forwarded-Proto $scheme;

            proxy_pass https://api.${AUTH_DOMAIN}/publicuser/$user_id/avatar;
        }

        location ~ ^/hub_images/(?<id>[A-Za-z0-9_-]+)/(?<imgtype>[A-Za-z0-9_-]+)/(?<w>\d+)x(?<h>\d+)\.(jpg|png)$ {
            resolver 8.8.8.8;
            set $sig "internal";
            set $src "${HUB_IMAGES_URL}/$id/$origin_file";

            proxy_ssl_server_name on;
            proxy_set_header Host ${IMAGEPROXY_HOST};
            proxy_hide_header Set-Cookie;

            add_header Access-Control-Allow-Origin ${HUB_ORIGIN};

            proxy_pass https://${IMAGEPROXY_HOST}/$sig/rs:fit:$w:$h/plain/$src;
        }

        location ~ ^/hub_images/(?<id>\d+)/(?<file>[^/]+)$ {
            resolver 8.8.8.8;
            set $sig "internal";
            set $src "${HUB_IMAGES_URL}/$id/$file";

            proxy_ssl_server_name on;
            proxy_set_header Host ${IMAGEPROXY_HOST};
            proxy_hide_header Set-Cookie;

            add_header Access-Control-Allow-Origin ${HUB_ORIGIN};

            proxy_pass https://${IMAGEPROXY_HOST}/$sig/plain/$src;
        }

        location /logo/ {
            proxy_pass ${BRAND_URL};
            proxy_cache static_cache;
            proxy_cache_bypass $http_pragma;
            proxy_cache_revalidate on;
        }

        location /data/ {
            resolver 8.8.8.8;

            proxy_ssl_server_name on;
            proxy_set_header Host ${AZURE_BLOB_HOST};
            proxy_set_header X-Real-IP $remote_addr;
            proxy_hide_header Access-Control-Allow-Origin;
            proxy_cache static_cache;
            proxy_cache_bypass $http_pragma;
            proxy_cache_revalidate on;

            add_header Access-Control-Allow-Origin ${HUB_ORIGIN};

            proxy_pass https://${AZURE_BLOB_HOST};
        }
    }
}