131 lines
4.3 KiB
PowerShell
131 lines
4.3 KiB
PowerShell
param(
|
|
[string]$Image = "nginx:alpine"
|
|
)
|
|
|
|
$ErrorActionPreference = "Stop"
|
|
|
|
$repoRoot = Split-Path -Parent $PSScriptRoot
|
|
|
|
$serverSnippetConfig = @(
|
|
"events {}"
|
|
""
|
|
"http {"
|
|
" include /etc/nginx/mime.types;"
|
|
" default_type application/octet-stream;"
|
|
""
|
|
" include /etc/nginx/kit/http/gzip.conf;"
|
|
" include /etc/nginx/kit/http/websocket-map.conf;"
|
|
""
|
|
" include /etc/nginx/kit/examples/example.com.conf;"
|
|
"}"
|
|
) -join "\n"
|
|
|
|
$serverSnippetConfigShell = $serverSnippetConfig -replace "`n", "\\n"
|
|
|
|
$optionalSnippetConfig = @(
|
|
"events {}"
|
|
""
|
|
"http {"
|
|
" include /etc/nginx/mime.types;"
|
|
" default_type application/octet-stream;"
|
|
""
|
|
" server {"
|
|
" listen 8080;"
|
|
" include /etc/nginx/kit/security-legacy.conf;"
|
|
""
|
|
" location /fastcgi {"
|
|
" include /etc/nginx/kit/fastcgi/hide-powered-by.conf;"
|
|
" include /etc/nginx/kit/fastcgi/timeout-300.conf;"
|
|
" }"
|
|
""
|
|
" location /proxy {"
|
|
" include /etc/nginx/kit/proxy_pass/hide-powered-by.conf;"
|
|
" }"
|
|
" }"
|
|
"}"
|
|
) -join "\n"
|
|
|
|
$optionalSnippetConfigShell = $optionalSnippetConfig -replace "`n", "\\n"
|
|
|
|
$advancedProxyConfig = @(
|
|
"events {}"
|
|
""
|
|
"http {"
|
|
" include /etc/nginx/mime.types;"
|
|
" default_type application/octet-stream;"
|
|
""
|
|
" include /etc/nginx/kit/http/log-format-upstream.conf;"
|
|
""
|
|
" server {"
|
|
" include /etc/nginx/kit/listen/http.conf;"
|
|
" server_name streaming.example.com;"
|
|
" access_log /var/log/nginx/streaming.access.log upstream_timing;"
|
|
""
|
|
" location /events/ {"
|
|
" include /etc/nginx/kit/proxy_pass/forwarded.conf;"
|
|
" include /etc/nginx/kit/proxy_pass/streaming.conf;"
|
|
" include /etc/nginx/kit/proxy_pass/timeout-300.conf;"
|
|
" proxy_pass http://127.0.0.1:9000;"
|
|
" }"
|
|
""
|
|
" location /secure-upstream/ {"
|
|
" include /etc/nginx/kit/proxy_pass/forwarded.conf;"
|
|
" include /etc/nginx/kit/proxy_pass/https-upstream.conf;"
|
|
" proxy_pass https://example.com;"
|
|
" }"
|
|
" }"
|
|
"}"
|
|
) -join "\n"
|
|
|
|
$advancedProxyConfigShell = $advancedProxyConfig -replace "`n", "\\n"
|
|
|
|
$modernHttp2Config = @(
|
|
"events {}"
|
|
""
|
|
"http {"
|
|
" include /etc/nginx/mime.types;"
|
|
" default_type application/octet-stream;"
|
|
""
|
|
" server {"
|
|
" include /etc/nginx/kit/listen/http.conf;"
|
|
" include /etc/nginx/kit/listen/https.conf;"
|
|
" include /etc/nginx/kit/listen/http2.conf;"
|
|
" include /etc/nginx/snippets/cert/mydomain.com.conf;"
|
|
" server_name modern.example.com;"
|
|
" }"
|
|
"}"
|
|
) -join "\n"
|
|
|
|
$modernHttp2ConfigShell = $modernHttp2Config -replace "`n", "\\n"
|
|
|
|
$containerCommand = @(
|
|
"set -eu"
|
|
"apk add --no-cache openssl >/dev/null"
|
|
"mkdir -p /etc/nginx/snippets/cert /etc/ssl/certimate /tmp/nginx-kit/snippets/cert /tmp/nginx-kit/examples/snippets/cert"
|
|
"openssl req -x509 -nodes -newkey rsa:2048 -keyout /etc/ssl/certimate/example.com.key -out /etc/ssl/certimate/example.com.crt -subj '/CN=example.com' -days 1 >/dev/null 2>&1"
|
|
"cp /etc/nginx/kit/templates/cert/example.com.conf /etc/nginx/snippets/cert/mydomain.com.conf"
|
|
"cp /etc/nginx/kit/templates/cert/example.com.conf /tmp/nginx-kit/snippets/cert/mydomain.com.conf"
|
|
"cp /etc/nginx/kit/templates/cert/example.com.conf /tmp/nginx-kit/examples/snippets/cert/mydomain.com.conf"
|
|
"ln -s /etc/nginx/kit /tmp/nginx-kit/kit"
|
|
"mkdir -p /tmp/nginx-kit/examples"
|
|
"ln -s /etc/nginx/kit /tmp/nginx-kit/examples/kit"
|
|
"cp /etc/nginx/kit/examples/reverse-proxy.nginx.conf /tmp/nginx-kit/examples/reverse-proxy.nginx.conf"
|
|
"printf '%b' '$serverSnippetConfigShell' > /tmp/nginx-kit/server-snippet.nginx.conf"
|
|
"printf '%b' '$optionalSnippetConfigShell' > /tmp/nginx-kit/optional-snippets.nginx.conf"
|
|
"printf '%b' '$advancedProxyConfigShell' > /tmp/nginx-kit/advanced-proxy.nginx.conf"
|
|
"printf '%b' '$modernHttp2ConfigShell' > /tmp/nginx-kit/modern-http2.nginx.conf"
|
|
"echo 'Validating examples/example.com.conf'"
|
|
"nginx -t -c /tmp/nginx-kit/server-snippet.nginx.conf"
|
|
"echo 'Validating examples/reverse-proxy.nginx.conf'"
|
|
"nginx -t -c /tmp/nginx-kit/examples/reverse-proxy.nginx.conf"
|
|
"echo 'Validating optional security and hide-powered-by snippets'"
|
|
"nginx -t -c /tmp/nginx-kit/optional-snippets.nginx.conf"
|
|
"echo 'Validating optional upstream logging, streaming, and HTTPS-upstream snippets'"
|
|
"nginx -t -c /tmp/nginx-kit/advanced-proxy.nginx.conf"
|
|
"echo 'Validating modern http2 on snippets'"
|
|
"nginx -t -c /tmp/nginx-kit/modern-http2.nginx.conf"
|
|
) -join "; "
|
|
|
|
docker run --rm `
|
|
-v "${repoRoot}:/etc/nginx/kit:ro" `
|
|
$Image sh -lc $containerCommand
|