51 lines
1.2 KiB
Bash
51 lines
1.2 KiB
Bash
#!/bin/bash
|
|
|
|
cat > /etc/nginx/sites-enabled/default <<EOL
|
|
upstream backend {
|
|
server 10.67.1.2; # IP HarryPotter
|
|
server 10.67.1.3; # IP RonWeasley
|
|
server 10.67.1.14; # IP HermioneGranger (setelah nomor 5)
|
|
}
|
|
|
|
server {
|
|
listen 80;
|
|
listen [::]:80;
|
|
|
|
server_name _;
|
|
|
|
error_log /var/log/nginx/error.log;
|
|
access_log /var/log/nginx/access.log;
|
|
|
|
allow 10.67.2.64;
|
|
allow 10.67.2.100;
|
|
allow 10.67.5.50;
|
|
allow 10.67.5.155;
|
|
deny all;
|
|
|
|
auth_basic "Secure Area";
|
|
auth_basic_user_file /etc/nginx/secretchamber;
|
|
|
|
location / {
|
|
proxy_pass http://backend;
|
|
proxy_set_header X-Real-IP \$remote_addr;
|
|
proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
|
|
proxy_set_header Host \$http_host;
|
|
}
|
|
|
|
location ~* /informatika$ {
|
|
proxy_pass https://www.its.ac.id;
|
|
|
|
rewrite ^.*$ /informatika/id/beranda/ break;
|
|
|
|
proxy_set_header Host www.its.ac.id;
|
|
proxy_set_header X-Real-IP \$remote_addr;
|
|
proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
|
|
proxy_set_header X-Forwarded-Proto \$scheme;
|
|
|
|
proxy_ssl_server_name on;
|
|
proxy_ssl_protocols TLSv1.2 TLSv1.3;
|
|
}
|
|
}
|
|
EOL
|
|
|
|
nginx -s reload |