|
|
|
# Current Infrastructure
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
[Edit link](https://drive.google.com/file/d/1RVMcXwhoyex6TNLx1B71AeqVNfA-i5Mh/view?usp=sharing)
|
|
|
|
|
|
|
|
## Nginx
|
|
|
|
Docker Start: <pre>docker run --name=nginx --net=dockernet --restart=always -v /home/nginx:/opt -p 80:80 -p 443:443 -d nginx</pre>
|
|
|
|
current default.conf:
|
|
|
|
|
|
|
|
```
|
|
|
|
server {
|
|
|
|
listen 80 default_server;
|
|
|
|
listen [::]:80 default_server;
|
|
|
|
#server_name accelerator;
|
|
|
|
return 301 https://134.103.176.108$request_uri;
|
|
|
|
}
|
|
|
|
|
|
|
|
server {
|
|
|
|
listen 443;
|
|
|
|
#server_name accelerator;
|
|
|
|
|
|
|
|
ssl on;
|
|
|
|
ssl_certificate /opt/cert/cert.pem;
|
|
|
|
ssl_certificate_key /opt/cert/key.pem;
|
|
|
|
ssl_session_cache shared:SSL:10m;
|
|
|
|
|
|
|
|
ssl_ciphers !RC4:HIGH:!aNULL:!MD5;
|
|
|
|
ssl_prefer_server_ciphers on;
|
|
|
|
ssl_protocols TLSv1.2 TLSv1.1 TLSv1;
|
|
|
|
|
|
|
|
location /socket/createToken/ {
|
|
|
|
proxy_set_header HOST $host;
|
|
|
|
proxy_http_version 1.1;
|
|
|
|
proxy_set_header Upgrade $http_upgrade;
|
|
|
|
proxy_set_header Connection upgrade;
|
|
|
|
proxy_pass http://licode:3001/createToken/;
|
|
|
|
}
|
|
|
|
|
|
|
|
location / {
|
|
|
|
proxy_set_header HOST $host;
|
|
|
|
proxy_http_version 1.1;
|
|
|
|
proxy_set_header Upgrade $http_upgrade;
|
|
|
|
proxy_set_header Connection upgrade;
|
|
|
|
proxy_pass https://acc/;
|
|
|
|
}
|
|
|
|
|
|
|
|
location /socket/socket.io/ {
|
|
|
|
proxy_pass http://licode:8080/socket.io/;
|
|
|
|
|
|
|
|
proxy_http_version 1.1;
|
|
|
|
proxy_redirect off;
|
|
|
|
|
|
|
|
proxy_set_header 'Access-Control-Allow-Origin' '*';
|
|
|
|
proxy_set_header Upgrade $http_upgrade;
|
|
|
|
proxy_set_header Connection "upgrade";
|
|
|
|
proxy_set_header Host $http_host;
|
|
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
|
|
proxy_set_header X-Forwarded-Proto $scheme;
|
|
|
|
proxy_set_header X-NginX-Proxy true;
|
|
|
|
proxy_read_timeout 86400;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
```
|
|
|
|
|
|
|
|
## Licode docker Start
|
|
|
|
<pre>docker run -d --name licode --restart=always --net=dockernet -e "MAXPROCESSES=16" -e "LICODEHOSTNAME=accelerator.reutlingen-university.de" -e "ERIZOCLIENTPORT=443" -p 3000:3000 -p 30000-30050:30000-30050/udp -p 3001:3001 -p 3004:3004 -p 8080:8080 -e "SSL=TRUE" -e "MIN_PORT=30000" -e "MAX_PORT=30050" -e "STUNTURN=[{'url': 'stun:stun.l.google.com:19302'},{'username': 'ksystem', 'credential': 'ksystem15','url': 'stun:134.103.176.133:443?transport=tcp'},{'username': 'ksystem', 'credential': 'ksystem15','url': 'stun:134.103.176.133:443?transport=udp'},{'username': 'ksystem', 'credential': 'ksystem15','url': 'turn:134.103.176.133:443?transport=tcp'},{'username': 'ksystem', 'credential': 'ksystem15','url': 'turn:134.103.176.133:443?transport=udp'}]" -e "PUBLIC_IP=134.103.176.109" rofl256/ezlicode:stable2</pre> |
|
|
\ No newline at end of file |
