Пример конфигурации клиентского приложения для Microsoft Windows: iam-slim-config.yaml#

kintsugi.common.conf: |-
  proxy_pass_request_headers on;
  proxy_set_header Authorization $http_authorization;
  proxy_ssl_verify off;

  proxy_read_timeout 120s;
  proxy_connect_timeout 120s;
kintsugi.server.conf: |-
  location / {
      return 301 /frontend/;
  }
  location ~ /backend/(?<subpath>.*)$ {
    include /usr/local/openresty/nginx/conf/custom.d/kintsugi.common.conf;
    set $ingress_curator curator-kintsugi.example.test;
    proxy_set_header Host $ingress_curator;
    proxy_ssl_name $ingress_curator;
    proxy_ssl_server_name on;
    proxy_pass https://$ingress_curator/$subpath;
  }
  location ~ ^/slim/sockets/database/terminal(.*)$ {
    proxy_pass_request_headers off;
    proxy_set_header Authorization $http_authorization;
    proxy_ssl_verify off;
    set $ingress_terminal terminal-slim-kintsugi.example.test;
    proxy_ssl_name $ingress_terminal;
    proxy_ssl_server_name on;
    proxy_pass https://$ingress_terminal/sockets/database/terminal$is_args$args;

    proxy_http_version 1.1;
    proxy_set_header Sec-WebSocket-Key $http_sec_websocket_key;
    proxy_set_header Sec-WebSocket-Version $http_sec_websocket_version;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection "upgrade";
    proxy_set_header Host $ingress_terminal;

    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header iv-user $http_iv_user;
  }
  location ~ ^/slim/sockets/database/structure(.*)$ {
    proxy_pass_request_headers off;
    proxy_set_header Authorization $http_authorization;
    proxy_ssl_verify off;
    set $ingress_backend backend-slim-kintsugi.example.test;
    proxy_ssl_name $ingress_backend;
    proxy_ssl_server_name on;
    proxy_pass https://$ingress_backend/sockets/database/structure$is_args$args;

    proxy_http_version 1.1;
    proxy_set_header Sec-WebSocket-Key $http_sec_websocket_key;
    proxy_set_header Sec-WebSocket-Version $http_sec_websocket_version;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection "upgrade";
    proxy_set_header Host $ingress_backend;

    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header iv-user $http_iv_user;
  }
  location ~ ^/frontend/(?<subpath>.*)$ {
    include /usr/local/openresty/nginx/conf/custom.d/kintsugi.common.conf;
    set $ingress_frontend frontend-slim-kintsugi.example.test;
    proxy_set_header Host $ingress_frontend;
    proxy_ssl_name $ingress_frontend;
    proxy_ssl_server_name on;
    proxy_pass https://$ingress_frontend/$subpath;
  }
  location /iam-auth {
    if ($http_referer = '') {
      return 301 https://$host/frontend;
    }
    include /usr/local/openresty/nginx/conf/custom.d/kintsugi.common.conf;
    proxy_ssl_name proxy-kintsugi-slim.test;
    proxy_ssl_server_name on;
    proxy_pass https://proxy-kintsugi-slim.test/backend/;
  }
kintsugi.upstream.conf: |-
  upstream ingress_curator {
      include /usr/local/openresty/nginx/conf/common/jct.upstream.conf;
      server curator-kintsugi.example.test:443;
  }
  upstream ingress_backend {
      include /usr/local/openresty/nginx/conf/common/jct.upstream.conf;
      server backend-slim-kintsugi.example.test:443;
  }
  upstream ingress_terminal {
      include /usr/local/openresty/nginx/conf/common/jct.upstream.conf;
      server terminal-slim-kintsugi.example.test:443;
  }
  upstream ingress_frontend {
      include /usr/local/openresty/nginx/conf/common/jct.upstream.conf;
      server frontend-slim-kintsugi.example.test:443;
  }
  upstream ingress_grafana {
      include /usr/local/openresty/nginx/conf/common/jct.upstream.conf;
      server grafana-kintsugi.example.test:443;
  }