feat(signer): ajouter sdk_signer (docker-support), route WSS /signer/ws via Nginx
This commit is contained in:
parent
eca6052c91
commit
bf07c2de9d
@ -231,7 +231,6 @@ services:
|
|||||||
depends_on:
|
depends_on:
|
||||||
- sdk_relay_1
|
- sdk_relay_1
|
||||||
- sdk_storage
|
- sdk_storage
|
||||||
- sdk_signer
|
|
||||||
volumes:
|
volumes:
|
||||||
- ./proxy/nginx.conf:/etc/nginx/conf.d/default.conf:ro
|
- ./proxy/nginx.conf:/etc/nginx/conf.d/default.conf:ro
|
||||||
- ./certs:/etc/nginx/certs:ro
|
- ./certs:/etc/nginx/certs:ro
|
||||||
|
@ -22,6 +22,9 @@ server {
|
|||||||
# CSP minimale (adapter selon besoins)
|
# CSP minimale (adapter selon besoins)
|
||||||
add_header Content-Security-Policy "default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; connect-src 'self' ws: wss: http: https:; img-src 'self' data:;" always;
|
add_header Content-Security-Policy "default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; connect-src 'self' ws: wss: http: https:; img-src 'self' data:;" always;
|
||||||
|
|
||||||
|
# Résolveur DNS Docker pour les upstreams dynamiques
|
||||||
|
resolver 127.0.0.11 ipv6=off valid=10s;
|
||||||
|
|
||||||
# ihm_client statique servi directement
|
# ihm_client statique servi directement
|
||||||
root /usr/share/nginx/html;
|
root /usr/share/nginx/html;
|
||||||
index index.html;
|
index index.html;
|
||||||
@ -73,7 +76,8 @@ server {
|
|||||||
|
|
||||||
# WebSocket sdk_signer (port 9090)
|
# WebSocket sdk_signer (port 9090)
|
||||||
location /signer/ws/ {
|
location /signer/ws/ {
|
||||||
proxy_pass http://sdk_signer:9090;
|
set $signer_upstream sdk_signer:9090;
|
||||||
|
proxy_pass http://$signer_upstream;
|
||||||
proxy_http_version 1.1;
|
proxy_http_version 1.1;
|
||||||
proxy_set_header Upgrade $http_upgrade;
|
proxy_set_header Upgrade $http_upgrade;
|
||||||
proxy_set_header Connection "upgrade";
|
proxy_set_header Connection "upgrade";
|
||||||
|
Loading…
x
Reference in New Issue
Block a user