SpongePowered / SpongeAuth / 38098104514

96%

master: 96%

Pull #1994

github

fix(nginx): adapt config for k8s sidecar

- Proxy to the app at 127.0.0.1:8080; docker-compose.yml runs nginx in
  the app container's network namespace so the same config works there
- Log to stdout/stderr, cap uploads at 10M, cache avatars under
  /var/cache/nginx/avatar, drop the missing dynamic-module include
- Pass the ingress's X-Forwarded-Proto through to the app
- Take the client IP from X-Forwarded-For, trusting only the proxies
  in NGINX_TRUSTED_PROXIES; nginx-trusted-proxies.sh renders them at
  startup from /docker-entrypoint.d/ and rejects malformed entries

Signed-off-by: Gabriel Harris-Rouquette <gabizou@me.com>

340 of 372 branches covered (91.4%)

Branch coverage included in aggregate %.

1621 of 1667 relevant lines covered (97.24%)

0.97 hits per line