chore: appliquer changements utilisateur (suppression fichiers obsolètes, renommage SSH_USAGE.md)
This commit is contained in:
Your Name
parent
5791d960c4
commit
647a3311eb
67
Dockerfile
67
Dockerfile
@ -1,67 +0,0 @@
|
|||||||
# Dockerfile optimisé pour l'intégration dans 4NK_node
|
|
||||||
FROM node:20-alpine AS builder
|
|
||||||
|
|
||||||
WORKDIR /app
|
|
||||||
|
|
||||||
# Installation des dépendances système
|
|
||||||
RUN apk update && apk add --no-cache \
|
|
||||||
git \
|
|
||||||
build-base \
|
|
||||||
python3 \
|
|
||||||
make \
|
|
||||||
g++ \
|
|
||||||
curl \
|
|
||||||
ca-certificates
|
|
||||||
|
|
||||||
# Copie des fichiers de dépendances
|
|
||||||
COPY package*.json ./
|
|
||||||
|
|
||||||
# Installation des dépendances (inclut les devDependencies nécessaires au build)
|
|
||||||
RUN npm install
|
|
||||||
|
|
||||||
# Copie du code source
|
|
||||||
COPY . .
|
|
||||||
|
|
||||||
# Préparation des dépendances wasm (pkg/sdk_client)
|
|
||||||
ARG SDK_CLIENT_PKG_URL=""
|
|
||||||
ARG SDK_CLIENT_PKG_TARBALL=""
|
|
||||||
ARG SDK_CLIENT_PKG_BASE="https://git.4nkweb.com/4nk/ihm_client/raw/branch/docker-support/pkg"
|
|
||||||
ENV SDK_CLIENT_PKG_URL=${SDK_CLIENT_PKG_URL}
|
|
||||||
ENV SDK_CLIENT_PKG_TARBALL=${SDK_CLIENT_PKG_TARBALL}
|
|
||||||
ENV SDK_CLIENT_PKG_BASE=${SDK_CLIENT_PKG_BASE}
|
|
||||||
RUN chmod +x ./scripts/setup-remote-deps.sh && npm run build_wasm
|
|
||||||
|
|
||||||
# Build de l'application
|
|
||||||
RUN npm run build
|
|
||||||
|
|
||||||
# Image de production
|
|
||||||
FROM nginx:alpine
|
|
||||||
|
|
||||||
# Installation de Node.js pour les scripts de démarrage
|
|
||||||
RUN apk update && apk add --no-cache nodejs npm wget
|
|
||||||
|
|
||||||
# Copie des fichiers buildés
|
|
||||||
COPY --from=builder /app/dist /usr/share/nginx/html
|
|
||||||
COPY --from=builder /app/package*.json /app/
|
|
||||||
|
|
||||||
# Index HTML minimal chargeant le bundle
|
|
||||||
RUN printf '<!doctype html>\n<html lang="fr">\n<head>\n <meta charset="UTF-8" />\n <meta name="viewport" content="width=device-width, initial-scale=1.0" />\n <title>4NK UI</title>\n</head>\n<body>\n <div id="app"></div>\n <script type="module" src="/index.js"></script>\n</body>\n</html>\n' > /usr/share/nginx/html/index.html
|
|
||||||
|
|
||||||
# Copie de la configuration nginx optimisée pour 4NK_node
|
|
||||||
COPY nginx.conf /etc/nginx/conf.d/default.conf
|
|
||||||
|
|
||||||
# Script de démarrage
|
|
||||||
COPY start.sh /start-4nk-node.sh
|
|
||||||
RUN chmod +x /start-4nk-node.sh
|
|
||||||
|
|
||||||
# Exposition des ports
|
|
||||||
EXPOSE 80 3003
|
|
||||||
|
|
||||||
# Variables d'environnement pour 4NK_node
|
|
||||||
ENV SDK_RELAY_WS_URL=ws://sdk_relay_1:8090
|
|
||||||
ENV SDK_RELAY_HTTP_URL=http://sdk_relay_1:8091
|
|
||||||
ENV BITCOIN_RPC_URL=http://bitcoin:18443
|
|
||||||
ENV BLINDBIT_URL=http://blindbit:8000
|
|
||||||
|
|
||||||
# Point d'entrée
|
|
||||||
CMD ["/start-4nk-node.sh"]
|
|
||||||
@ -1,43 +0,0 @@
|
|||||||
version: '3.8'
|
|
||||||
|
|
||||||
services:
|
|
||||||
ihm_client:
|
|
||||||
build:
|
|
||||||
context: .
|
|
||||||
dockerfile: Dockerfile.4nk-node
|
|
||||||
container_name: 4nk-ihm-client
|
|
||||||
ports:
|
|
||||||
- "8080:80"
|
|
||||||
- "3003:3003"
|
|
||||||
environment:
|
|
||||||
- SDK_RELAY_WS_URL=ws://sdk_relay_1:8090
|
|
||||||
- SDK_RELAY_HTTP_URL=http://sdk_relay_1:8091
|
|
||||||
- BITCOIN_RPC_URL=http://bitcoin:18443
|
|
||||||
- BLINDBIT_URL=http://blindbit:8000
|
|
||||||
- NODE_ENV=production
|
|
||||||
volumes:
|
|
||||||
- ihm_client_logs:/var/log/nginx
|
|
||||||
- ihm_client_data:/usr/share/nginx/html/data
|
|
||||||
networks:
|
|
||||||
- btcnet
|
|
||||||
depends_on:
|
|
||||||
- sdk_relay_1
|
|
||||||
- sdk_relay_2
|
|
||||||
- sdk_relay_3
|
|
||||||
restart: unless-stopped
|
|
||||||
healthcheck:
|
|
||||||
test: ["CMD", "wget", "--quiet", "--tries=1", "--timeout=5", "--spider", "http://localhost"]
|
|
||||||
interval: 30s
|
|
||||||
timeout: 10s
|
|
||||||
retries: 3
|
|
||||||
start_period: 40s
|
|
||||||
|
|
||||||
volumes:
|
|
||||||
ihm_client_logs:
|
|
||||||
driver: local
|
|
||||||
ihm_client_data:
|
|
||||||
driver: local
|
|
||||||
|
|
||||||
networks:
|
|
||||||
btcnet:
|
|
||||||
external: true
|
|
||||||
@ -1,223 +0,0 @@
|
|||||||
# Intégration avec 4NK_node
|
|
||||||
|
|
||||||
## Vue d'ensemble
|
|
||||||
|
|
||||||
Ce document décrit l'intégration de `ihm_client` dans l'infrastructure `4NK_node` et les modifications apportées pour assurer une connectivité optimale avec les services backend.
|
|
||||||
|
|
||||||
## Architecture d'intégration
|
|
||||||
|
|
||||||
### Services connectés
|
|
||||||
- **SDK Relays** : Connexion WebSocket pour la synchronisation
|
|
||||||
- **Bitcoin Core** : API RPC pour les opérations blockchain
|
|
||||||
- **Blindbit Oracle** : API pour les oracles
|
|
||||||
- **Tor Proxy** : Proxy pour la confidentialité
|
|
||||||
|
|
||||||
### Ports et URLs
|
|
||||||
- Interface utilisateur : `http://localhost:8080`
|
|
||||||
- SDK Relay 1 : `ws://localhost:8090` (WebSocket)
|
|
||||||
- SDK Relay 2 : `ws://localhost:8092` (WebSocket)
|
|
||||||
- SDK Relay 3 : `ws://localhost:8094` (WebSocket)
|
|
||||||
- Bitcoin Core RPC : `http://localhost:18443`
|
|
||||||
- Blindbit Oracle : `http://localhost:8000`
|
|
||||||
|
|
||||||
## Modifications du script de démarrage
|
|
||||||
|
|
||||||
### Changements principaux
|
|
||||||
|
|
||||||
Le script `start.sh` a été modifié pour améliorer la robustesse et la connectivité :
|
|
||||||
|
|
||||||
#### 1. Vérification WebSocket des relays
|
|
||||||
```bash
|
|
||||||
# Vérification WebSocket des relays (optionnel)
|
|
||||||
check_websocket "sdk_relay WebSocket" "$SDK_RELAY_WS_URL"
|
|
||||||
```
|
|
||||||
|
|
||||||
#### 2. Suppression des dépendances critiques
|
|
||||||
- Les vérifications HTTP des relays ont été supprimées
|
|
||||||
- Les attentes critiques de Bitcoin Core et Blindbit ont été remplacées par des vérifications informatives
|
|
||||||
- L'interface utilisateur démarre maintenant même si certains services ne sont pas encore prêts
|
|
||||||
|
|
||||||
#### 3. Configuration dynamique
|
|
||||||
```bash
|
|
||||||
# Génération de la configuration dynamique
|
|
||||||
cat > /usr/share/nginx/html/config.js << EOF
|
|
||||||
window.ENV_CONFIG = {
|
|
||||||
SDK_RELAY_WS_URL: '$SDK_RELAY_WS_URL',
|
|
||||||
SDK_RELAY_HTTP_URL: '$SDK_RELAY_HTTP_URL',
|
|
||||||
BITCOIN_RPC_URL: '$BITCOIN_RPC_URL',
|
|
||||||
BLINDBIT_URL: '$BLINDBIT_URL',
|
|
||||||
ENVIRONMENT: '4nk-node'
|
|
||||||
};
|
|
||||||
EOF
|
|
||||||
```
|
|
||||||
|
|
||||||
## Fonctionnalités de connectivité
|
|
||||||
|
|
||||||
### Reconnexion automatique
|
|
||||||
L'interface utilisateur gère automatiquement :
|
|
||||||
- La reconnexion aux WebSockets des relays
|
|
||||||
- La gestion des déconnexions temporaires
|
|
||||||
- La récupération après panne de service
|
|
||||||
|
|
||||||
### Gestion des erreurs
|
|
||||||
- Tentatives de reconnexion avec backoff exponentiel
|
|
||||||
- Logs détaillés pour le diagnostic
|
|
||||||
- Dégradation gracieuse en cas d'indisponibilité de service
|
|
||||||
|
|
||||||
## Tests de connectivité
|
|
||||||
|
|
||||||
### Test manuel des WebSockets
|
|
||||||
```bash
|
|
||||||
# Depuis le conteneur ihm_client
|
|
||||||
nc -z sdk_relay_1 8090
|
|
||||||
nc -z sdk_relay_2 8090
|
|
||||||
nc -z sdk_relay_3 8090
|
|
||||||
```
|
|
||||||
|
|
||||||
### Test de l'interface utilisateur
|
|
||||||
```bash
|
|
||||||
# Test HTTP
|
|
||||||
curl -s http://localhost:8080 | head -10
|
|
||||||
|
|
||||||
# Test de santé
|
|
||||||
curl -s http://localhost:8080/health
|
|
||||||
```
|
|
||||||
|
|
||||||
## Monitoring et logs
|
|
||||||
|
|
||||||
### Logs du conteneur
|
|
||||||
```bash
|
|
||||||
# Voir les logs de démarrage
|
|
||||||
docker logs 4nk-ihm-client
|
|
||||||
|
|
||||||
# Suivre les logs en temps réel
|
|
||||||
docker logs -f 4nk-ihm-client
|
|
||||||
```
|
|
||||||
|
|
||||||
### Métriques de santé
|
|
||||||
- Vérification périodique de nginx
|
|
||||||
- Statut des connexions WebSocket
|
|
||||||
- Disponibilité des services backend
|
|
||||||
|
|
||||||
## Dépannage
|
|
||||||
|
|
||||||
### Problèmes courants
|
|
||||||
|
|
||||||
#### 1. Interface utilisateur non accessible
|
|
||||||
```bash
|
|
||||||
# Vérifier le statut du conteneur
|
|
||||||
docker ps | grep ihm_client
|
|
||||||
|
|
||||||
# Vérifier les logs
|
|
||||||
docker logs 4nk-ihm-client --tail=20
|
|
||||||
```
|
|
||||||
|
|
||||||
#### 2. Connexion WebSocket échouée
|
|
||||||
```bash
|
|
||||||
# Vérifier la connectivité réseau
|
|
||||||
docker exec 4nk-ihm-client nc -z sdk_relay_1 8090
|
|
||||||
|
|
||||||
# Vérifier les logs des relays
|
|
||||||
docker logs sdk_relay_1 --tail=10
|
|
||||||
```
|
|
||||||
|
|
||||||
#### 3. Services backend indisponibles
|
|
||||||
```bash
|
|
||||||
# Vérifier Bitcoin Core
|
|
||||||
curl -s --user bitcoin:bitcoin http://localhost:18443
|
|
||||||
|
|
||||||
# Vérifier Blindbit
|
|
||||||
curl -s http://localhost:8000/health
|
|
||||||
```
|
|
||||||
|
|
||||||
### Solutions
|
|
||||||
|
|
||||||
#### Redémarrage du service
|
|
||||||
```bash
|
|
||||||
# Redémarrer ihm_client
|
|
||||||
docker-compose restart ihm_client
|
|
||||||
|
|
||||||
# Reconstruire et redémarrer
|
|
||||||
docker-compose build ihm_client
|
|
||||||
docker-compose up -d ihm_client
|
|
||||||
```
|
|
||||||
|
|
||||||
#### Nettoyage complet
|
|
||||||
```bash
|
|
||||||
# Arrêter tous les services
|
|
||||||
docker-compose down
|
|
||||||
|
|
||||||
# Nettoyer les volumes (optionnel)
|
|
||||||
docker-compose down -v
|
|
||||||
|
|
||||||
# Redémarrer
|
|
||||||
docker-compose up -d
|
|
||||||
```
|
|
||||||
|
|
||||||
## Configuration avancée
|
|
||||||
|
|
||||||
### Variables d'environnement
|
|
||||||
```bash
|
|
||||||
SDK_RELAY_WS_URL=ws://sdk_relay_1:8090
|
|
||||||
SDK_RELAY_HTTP_URL=http://sdk_relay_1:8091
|
|
||||||
BITCOIN_RPC_URL=http://bitcoin:18443
|
|
||||||
BLINDBIT_URL=http://blindbit:8000
|
|
||||||
```
|
|
||||||
|
|
||||||
### Personnalisation du script
|
|
||||||
Le script `start.sh` peut être modifié pour :
|
|
||||||
- Ajouter des vérifications de santé personnalisées
|
|
||||||
- Modifier les timeouts de connexion
|
|
||||||
- Ajouter des métriques de performance
|
|
||||||
|
|
||||||
## Sécurité
|
|
||||||
|
|
||||||
### Isolation réseau
|
|
||||||
- L'interface utilisateur est isolée dans le réseau Docker `btcnet`
|
|
||||||
- Communication sécurisée entre conteneurs
|
|
||||||
- Pas d'exposition directe des services backend
|
|
||||||
|
|
||||||
### Authentification
|
|
||||||
- Bitcoin Core utilise l'authentification par cookie
|
|
||||||
- Les WebSockets des relays sont sécurisés
|
|
||||||
- L'interface utilisateur gère l'authentification côté client
|
|
||||||
|
|
||||||
## Performance
|
|
||||||
|
|
||||||
### Optimisations
|
|
||||||
- Connexions WebSocket persistantes
|
|
||||||
- Mise en cache des données fréquemment utilisées
|
|
||||||
- Compression des données transmises
|
|
||||||
|
|
||||||
### Métriques
|
|
||||||
- Temps de réponse de l'interface
|
|
||||||
- Latence des WebSockets
|
|
||||||
- Utilisation des ressources
|
|
||||||
|
|
||||||
## Maintenance
|
|
||||||
|
|
||||||
### Mises à jour
|
|
||||||
```bash
|
|
||||||
# Mettre à jour l'image
|
|
||||||
docker-compose pull ihm_client
|
|
||||||
|
|
||||||
# Reconstruire avec les dernières modifications
|
|
||||||
docker-compose build ihm_client
|
|
||||||
```
|
|
||||||
|
|
||||||
### Sauvegarde
|
|
||||||
```bash
|
|
||||||
# Sauvegarder la configuration
|
|
||||||
docker cp 4nk-ihm-client:/usr/share/nginx/html/config.js ./backup/
|
|
||||||
|
|
||||||
# Sauvegarder les logs
|
|
||||||
docker logs 4nk-ihm-client > ./backup/ihm_client.log
|
|
||||||
```
|
|
||||||
|
|
||||||
## Support
|
|
||||||
|
|
||||||
Pour toute question ou problème lié à l'intégration :
|
|
||||||
1. Consulter les logs du conteneur
|
|
||||||
2. Vérifier la connectivité réseau
|
|
||||||
3. Tester les services backend individuellement
|
|
||||||
4. Consulter la documentation de `4NK_node`
|
|
||||||
@ -1,96 +0,0 @@
|
|||||||
server {
|
|
||||||
listen 80;
|
|
||||||
server_name localhost;
|
|
||||||
root /usr/share/nginx/html;
|
|
||||||
index index.html;
|
|
||||||
|
|
||||||
# Gestion des fichiers statiques
|
|
||||||
location / {
|
|
||||||
try_files $uri $uri/ /index.html;
|
|
||||||
|
|
||||||
# Headers de sécurité
|
|
||||||
add_header X-Frame-Options "SAMEORIGIN" always;
|
|
||||||
add_header X-Content-Type-Options "nosniff" always;
|
|
||||||
add_header X-XSS-Protection "1; mode=block" always;
|
|
||||||
add_header Referrer-Policy "strict-origin-when-cross-origin" always;
|
|
||||||
}
|
|
||||||
|
|
||||||
# Proxy vers sdk_relay WebSocket
|
|
||||||
location /ws/ {
|
|
||||||
proxy_pass http://sdk_relay_1:8090;
|
|
||||||
proxy_http_version 1.1;
|
|
||||||
proxy_set_header Upgrade $http_upgrade;
|
|
||||||
proxy_set_header Connection "upgrade";
|
|
||||||
proxy_set_header Host $host;
|
|
||||||
proxy_set_header X-Real-IP $remote_addr;
|
|
||||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
||||||
proxy_set_header X-Forwarded-Proto $scheme;
|
|
||||||
proxy_read_timeout 86400;
|
|
||||||
proxy_send_timeout 86400;
|
|
||||||
}
|
|
||||||
|
|
||||||
# Proxy vers sdk_relay HTTP API
|
|
||||||
location /api/ {
|
|
||||||
proxy_pass http://sdk_relay_1:8091/;
|
|
||||||
proxy_set_header Host $host;
|
|
||||||
proxy_set_header X-Real-IP $remote_addr;
|
|
||||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
||||||
proxy_set_header X-Forwarded-Proto $scheme;
|
|
||||||
|
|
||||||
# CORS headers
|
|
||||||
add_header Access-Control-Allow-Origin "*" always;
|
|
||||||
add_header Access-Control-Allow-Methods "GET, POST, OPTIONS, PUT, DELETE" always;
|
|
||||||
add_header Access-Control-Allow-Headers "Authorization,Content-Type,Accept,X-Requested-With" always;
|
|
||||||
|
|
||||||
# Gestion des requêtes OPTIONS
|
|
||||||
if ($request_method = 'OPTIONS') {
|
|
||||||
add_header Access-Control-Allow-Origin "*";
|
|
||||||
add_header Access-Control-Allow-Methods "GET, POST, OPTIONS, PUT, DELETE";
|
|
||||||
add_header Access-Control-Allow-Headers "Authorization,Content-Type,Accept,X-Requested-With";
|
|
||||||
add_header Content-Length 0;
|
|
||||||
add_header Content-Type text/plain;
|
|
||||||
return 204;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
# Proxy vers Bitcoin Core RPC (si nécessaire)
|
|
||||||
location /bitcoin/ {
|
|
||||||
proxy_pass http://bitcoin:18443/;
|
|
||||||
proxy_set_header Host $host;
|
|
||||||
proxy_set_header X-Real-IP $remote_addr;
|
|
||||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
||||||
proxy_set_header X-Forwarded-Proto $scheme;
|
|
||||||
|
|
||||||
# Authentification basique pour Bitcoin RPC
|
|
||||||
auth_basic "Bitcoin RPC";
|
|
||||||
auth_basic_user_file /etc/nginx/.htpasswd;
|
|
||||||
}
|
|
||||||
|
|
||||||
# Proxy vers Blindbit (si nécessaire)
|
|
||||||
location /blindbit/ {
|
|
||||||
proxy_pass http://blindbit:8000/;
|
|
||||||
proxy_set_header Host $host;
|
|
||||||
proxy_set_header X-Real-IP $remote_addr;
|
|
||||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
||||||
proxy_set_header X-Forwarded-Proto $scheme;
|
|
||||||
}
|
|
||||||
|
|
||||||
# Cache pour les assets statiques
|
|
||||||
location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg|woff|woff2|ttf|eot)$ {
|
|
||||||
expires 1y;
|
|
||||||
add_header Cache-Control "public, immutable";
|
|
||||||
try_files $uri =404;
|
|
||||||
}
|
|
||||||
|
|
||||||
# Gestion des erreurs
|
|
||||||
error_page 404 /index.html;
|
|
||||||
error_page 500 502 503 504 /50x.html;
|
|
||||||
|
|
||||||
location = /50x.html {
|
|
||||||
root /usr/share/nginx/html;
|
|
||||||
}
|
|
||||||
|
|
||||||
# Logs
|
|
||||||
access_log /var/log/nginx/ihm_client_access.log;
|
|
||||||
error_log /var/log/nginx/ihm_client_error.log;
|
|
||||||
}
|
|
||||||
@ -1,48 +0,0 @@
|
|||||||
server {
|
|
||||||
listen 80;
|
|
||||||
server_name localhost;
|
|
||||||
|
|
||||||
# Redirection des requêtes HTTP vers Vite
|
|
||||||
location / {
|
|
||||||
proxy_pass http://localhost:3003;
|
|
||||||
proxy_http_version 1.1;
|
|
||||||
proxy_set_header Upgrade $http_upgrade;
|
|
||||||
proxy_set_header Connection "Upgrade";
|
|
||||||
proxy_set_header Host $host;
|
|
||||||
}
|
|
||||||
|
|
||||||
location /ws/ {
|
|
||||||
proxy_pass http://localhost:8090;
|
|
||||||
proxy_http_version 1.1;
|
|
||||||
proxy_set_header Upgrade $http_upgrade;
|
|
||||||
proxy_set_header Connection "Upgrade";
|
|
||||||
proxy_set_header Host $host;
|
|
||||||
proxy_set_header X-Real-IP $remote_addr;
|
|
||||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
||||||
proxy_set_header X-Forwarded-Proto $scheme;
|
|
||||||
proxy_set_header X-NginX-Proxy true;
|
|
||||||
proxy_read_timeout 86400;
|
|
||||||
}
|
|
||||||
|
|
||||||
location /storage/ {
|
|
||||||
rewrite ^/storage(/.*)$ $1 break;
|
|
||||||
proxy_pass http://localhost:8080;
|
|
||||||
proxy_http_version 1.1;
|
|
||||||
proxy_set_header Upgrade $http_upgrade;
|
|
||||||
proxy_set_header Connection "Upgrade";
|
|
||||||
proxy_set_header Host $host;
|
|
||||||
}
|
|
||||||
|
|
||||||
location /api/ {
|
|
||||||
proxy_pass http://localhost:8091;
|
|
||||||
proxy_set_header Host $host;
|
|
||||||
proxy_set_header X-Real-IP $remote_addr;
|
|
||||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
||||||
proxy_set_header X-Forwarded-Proto $scheme;
|
|
||||||
|
|
||||||
# CORS headers
|
|
||||||
add_header Access-Control-Allow-Origin "*" always;
|
|
||||||
add_header Access-Control-Allow-Methods "GET, POST, OPTIONS, PUT, DELETE" always;
|
|
||||||
add_header Access-Control-Allow-Headers "Authorization,Content-Type,Accept,X-Requested-With" always;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
103
ngnix.conf
103
ngnix.conf
@ -1,103 +0,0 @@
|
|||||||
server {
|
|
||||||
listen 80;
|
|
||||||
server_name localhost;
|
|
||||||
root /usr/share/nginx/html;
|
|
||||||
index index.html;
|
|
||||||
|
|
||||||
# Types MIME explicites pour ES Modules et WASM
|
|
||||||
types {
|
|
||||||
application/javascript js mjs;
|
|
||||||
text/css css;
|
|
||||||
application/wasm wasm;
|
|
||||||
}
|
|
||||||
|
|
||||||
# Gestion des fichiers statiques
|
|
||||||
location / {
|
|
||||||
try_files $uri $uri/ /index.html;
|
|
||||||
|
|
||||||
# Headers de sécurité
|
|
||||||
add_header X-Frame-Options "SAMEORIGIN" always;
|
|
||||||
add_header X-Content-Type-Options "nosniff" always;
|
|
||||||
add_header X-XSS-Protection "1; mode=block" always;
|
|
||||||
add_header Referrer-Policy "strict-origin-when-cross-origin" always;
|
|
||||||
}
|
|
||||||
|
|
||||||
# Proxy vers sdk_relay WebSocket
|
|
||||||
location /ws/ {
|
|
||||||
proxy_pass http://sdk_relay_1:8090;
|
|
||||||
proxy_http_version 1.1;
|
|
||||||
proxy_set_header Upgrade $http_upgrade;
|
|
||||||
proxy_set_header Connection "upgrade";
|
|
||||||
proxy_set_header Host $host;
|
|
||||||
proxy_set_header X-Real-IP $remote_addr;
|
|
||||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
||||||
proxy_set_header X-Forwarded-Proto $scheme;
|
|
||||||
proxy_read_timeout 86400;
|
|
||||||
proxy_send_timeout 86400;
|
|
||||||
}
|
|
||||||
|
|
||||||
# Proxy vers sdk_relay HTTP API
|
|
||||||
location /api/ {
|
|
||||||
proxy_pass http://sdk_relay_1:8091/;
|
|
||||||
proxy_set_header Host $host;
|
|
||||||
proxy_set_header X-Real-IP $remote_addr;
|
|
||||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
||||||
proxy_set_header X-Forwarded-Proto $scheme;
|
|
||||||
|
|
||||||
# CORS headers
|
|
||||||
add_header Access-Control-Allow-Origin "*" always;
|
|
||||||
add_header Access-Control-Allow-Methods "GET, POST, OPTIONS, PUT, DELETE" always;
|
|
||||||
add_header Access-Control-Allow-Headers "Authorization,Content-Type,Accept,X-Requested-With" always;
|
|
||||||
|
|
||||||
# Gestion des requêtes OPTIONS
|
|
||||||
if ($request_method = 'OPTIONS') {
|
|
||||||
add_header Access-Control-Allow-Origin "*";
|
|
||||||
add_header Access-Control-Allow-Methods "GET, POST, OPTIONS, PUT, DELETE";
|
|
||||||
add_header Access-Control-Allow-Headers "Authorization,Content-Type,Accept,X-Requested-With";
|
|
||||||
add_header Content-Length 0;
|
|
||||||
add_header Content-Type text/plain;
|
|
||||||
return 204;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
# Proxy vers Bitcoin Core RPC (si nécessaire)
|
|
||||||
location /bitcoin/ {
|
|
||||||
proxy_pass http://bitcoin:18443/;
|
|
||||||
proxy_set_header Host $host;
|
|
||||||
proxy_set_header X-Real-IP $remote_addr;
|
|
||||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
||||||
proxy_set_header X-Forwarded-Proto $scheme;
|
|
||||||
|
|
||||||
# Authentification basique pour Bitcoin RPC
|
|
||||||
auth_basic "Bitcoin RPC";
|
|
||||||
auth_basic_user_file /etc/nginx/.htpasswd;
|
|
||||||
}
|
|
||||||
|
|
||||||
# Proxy vers Blindbit (si nécessaire)
|
|
||||||
location /blindbit/ {
|
|
||||||
proxy_pass http://blindbit:8000/;
|
|
||||||
proxy_set_header Host $host;
|
|
||||||
proxy_set_header X-Real-IP $remote_addr;
|
|
||||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
||||||
proxy_set_header X-Forwarded-Proto $scheme;
|
|
||||||
}
|
|
||||||
|
|
||||||
# Cache pour les assets statiques
|
|
||||||
location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg|woff|woff2|ttf|eot)$ {
|
|
||||||
expires 1y;
|
|
||||||
add_header Cache-Control "public, immutable";
|
|
||||||
try_files $uri =404;
|
|
||||||
}
|
|
||||||
|
|
||||||
# Gestion des erreurs
|
|
||||||
error_page 404 /index.html;
|
|
||||||
error_page 500 502 503 504 /50x.html;
|
|
||||||
|
|
||||||
location = /50x.html {
|
|
||||||
root /usr/share/nginx/html;
|
|
||||||
}
|
|
||||||
|
|
||||||
# Logs
|
|
||||||
access_log /var/log/nginx/ihm_client_access.log;
|
|
||||||
error_log /var/log/nginx/ihm_client_error.log;
|
|
||||||
}
|
|
||||||
Loading…
x
Reference in New Issue
Block a user