data/router/build.conf

@@ -14,9 +14,37 @@ server {
 
 	ssl_certificate /etc/letsencrypt/live/build.haiku-os.org/fullchain.pem;
 	ssl_certificate_key /etc/letsencrypt/live/build.haiku-os.org/privkey.pem;
-	location /buildbot {
+
+	# put a one day session timeout for websockets to stay longer
+	ssl_session_cache      shared:SSL:10m;
+	ssl_session_timeout  1440m;
+
+	# force https
+	add_header Strict-Transport-Security "max-age=31536000; includeSubdomains;";
+
+	proxy_set_header HOST $host;
+	proxy_set_header X-Real-IP $remote_addr;
+	proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+	proxy_set_header X-Forwarded-Proto  $scheme;
+	proxy_set_header X-Forwarded-Server  $host;
+	proxy_set_header X-Forwarded-Host  $host;
+
+	location /buildbot/ {
 		proxy_bind $server_addr;
-		proxy_pass http://infrastructure_buildbot_1:80;
+		proxy_pass http://infrastructure_buildbot_1:80/;
+	}
+	location /buildbot/sse/ {
+		# proxy buffering will prevent sse to work
+		proxy_buffering off;
+		proxy_pass http://infrastructure_buildbot_1:80/sse/;
+	}
+	location /buildbot/ws {
+		proxy_http_version 1.1;
+		proxy_set_header Upgrade $http_upgrade;
+		proxy_set_header Connection "upgrade";
+		proxy_pass http://infrastructure_buildbot_1:80/ws;
+		# raise the proxy timeout for the websocket
+		proxy_read_timeout 6000s;
 	}
 }