limits

nginx/update-nginx.txt

@@ -0,0 +1,66 @@
+cat > /data/nba-go-config/nginx/nginx.conf << 'EOF'
+user nginx;
+
+events {
+    worker_connections 1024;
+}
+
+http {
+    proxy_cache_path /var/cache/nginx levels=1:2 keys_zone=api_cache:10m max_size=100m inactive=5m;
+
+    map $http_referer $blocked_referer {
+        default 0;
+        "~*nbasalarymodel\.xyz" 1;
+        "~*kacpertheater\.github\.io" 1;
+    }
+
+    upstream go_backend {
+        server api1:5000;
+        server api2:5000;
+        server api3:5000;
+    }
+
+    server {
+        listen 8080;
+
+        access_log /dev/stdout;
+        error_log /dev/stderr;
+
+        if ($blocked_referer) {
+            return 403;
+        }
+
+        location /api/ {
+            proxy_cache api_cache;
+            proxy_cache_valid 200 30s;
+            proxy_cache_key "$request_uri";
+            proxy_cache_use_stale error timeout updating;
+            add_header X-Cache-Status $upstream_cache_status;
+
+            proxy_pass http://go_backend;
+            proxy_http_version 1.1;
+            proxy_set_header Upgrade $http_upgrade;
+            proxy_set_header Connection keep-alive;
+            proxy_set_header Host $host;
+            proxy_cache_bypass $http_upgrade;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+        }
+
+        location / {
+            proxy_pass http://go_backend;
+            proxy_http_version 1.1;
+            proxy_set_header Upgrade $http_upgrade;
+            proxy_set_header Connection keep-alive;
+            proxy_set_header Host $host;
+            proxy_cache_bypass $http_upgrade;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+        }
+    }
+}
+EOF
+
+docker exec 4c3368863bdc nginx -s reload