kris/kx-waf
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Adding stuff

Browse Source
This commit is contained in:
kris
2024-12-18 11:46:51 +00:00
commit e8043f036d
11 changed files with 406 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
ld6/flow.london.firstderivatives.com.conf
+47
View File
@@ -0,0 +1,47 @@
upstream flow-london {
hash $remote_addr consistent;
zone flow-london 64k;
server 10.60.32.11:4010; # Use your own IP address
server 10.60.32.12:4010;
keepalive 120;
}
server {
listen 80;
server_name flow.london.firstderivatives.com;
return 301 https://flow.london.firstderivatives.com$request_uri;
}
server {
listen 443 ssl;
server_name flow.london.firstderivatives.com;
ssl_certificate /etc/ssl/client/flow.london.firstderivatives.com.cer; # Client Supplied Certificate
ssl_certificate_key /etc/ssl/client/flow.london.firstderivatives.com.key; # Client Supplied Certificate
ssl_prefer_server_ciphers on;
ssl_protocols TLSv1.2 TLSv1.3;
access_log /var/log/nginx/flow.london.firstderivatives.com.access.log main ;
access_log syslog:server=10.60.64.56:514,tag=nginx,severity=info;
error_log /var/log/nginx/flow.london.firstderivatives.com.error.log;
error_log syslog:server=10.60.64.56:514,tag=nginx_error,severity=warn;
status_zone status_zone;
### WAF Component ###
include conf.d/00-waf_enable.conf;
### WAF Component ###
location / {
proxy_pass http://flow-london/;
proxy_set_header Origin http://flow.london.firstderivatives.com;
proxy_hide_header Access-Control-Allow-Origin;
add_header Access-Control-Allow-Origin $http_origin;
proxy_set_header Host flow.london.firstderivatives.com; # Required if Proxy Header is needed
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $remote_addr;
### Web Sockets (wss) ###
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $connection_upgrade;
### Web Sockets (wss) ###
}
}
ld6/i-trader.adss.com.conf
+47
View File
@@ -0,0 +1,47 @@
upstream itrader-adss {
hash $remote_addr consistent;
zone itrader-adss 64k;
server 10.60.32.11:4015; # Use your own IP address
server 10.60.32.12:4015;
keepalive 120;
}
server {
listen 80;
server_name i-trader.adss.com;
return 301 https://i-trader.adss.com$request_uri;
}
server {
listen 443 ssl;
server_name i-trader.adss.com;
ssl_certificate /etc/ssl/client/i-trader.adss.com.cer; # Client Supplied Certificate
ssl_certificate_key /etc/ssl/client/i-trader.adss.com.key; # Client Supplied Certificate
ssl_prefer_server_ciphers on;
ssl_protocols TLSv1.2 TLSv1.3;
access_log /var/log/nginx/i-trader.adss.com.access.log main ;
access_log syslog:server=10.60.64.56:514,tag=nginx,severity=info;
error_log /var/log/nginx/i-trader.adss.com.error.log;
error_log syslog:server=10.60.64.56:514,tag=nginx_error,severity=warn;
status_zone status_zone;
### WAF Component ###
include conf.d/00-waf_enable.conf;
### WAF Component ###
location / {
proxy_pass http://itrader-adss/;
proxy_set_header Origin http://i-trader.adss.com;
proxy_hide_header Access-Control-Allow-Origin;
add_header Access-Control-Allow-Origin $http_origin;
proxy_set_header Host i-trader.adss.com; # Required if Proxy Header is needed
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $remote_addr;
### Web Sockets (wss) ###
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $connection_upgrade;
### Web Sockets (wss) ###
}
}
ld6/ld.smbc-gle-saml.firstderivatives.com.conf
+47
View File
@@ -0,0 +1,47 @@
upstream ld-smbc-gle-saml {
hash $remote_addr consistent;
zone ld-smbc-gle-saml 64k;
server 10.60.32.11:4020; # Use your own IP address
server 10.60.32.12:4020;
keepalive 120;
}
server {
listen 80;
server_name ld.smbc-gle-saml.firstderivatives.com;
return 301 https://ld.smbc-gle-saml.firstderivatives.com$request_uri;
}
server {
listen 443 ssl;
server_name ld.smbc-gle-saml.firstderivatives.com;
ssl_certificate /etc/ssl/client/ld.smbc-gle-saml.firstderivatives.com.cer; # Client Supplied Certificate
ssl_certificate_key /etc/ssl/client/ld.smbc-gle-saml.firstderivatives.com.key; # Client Supplied Certificate
ssl_prefer_server_ciphers on;
ssl_protocols TLSv1.2 TLSv1.3;
access_log /var/log/nginx/ld.smbc-gle-saml.firstderivatives.com.access.log main ;
access_log syslog:server=10.60.64.56:514,tag=nginx,severity=info;
error_log /var/log/nginx/ld.smbc-gle-saml.firstderivatives.com.error.log;
error_log syslog:server=10.60.64.56:514,tag=nginx_error,severity=warn;
status_zone status_zone;
### WAF Component ###
include conf.d/00-waf_enable.conf;
### WAF Component ###
location / {
proxy_pass http://ld-smbc-gle-saml/;
proxy_set_header Origin https://ld.smbc-gle-saml.firstderivatives.com;
proxy_hide_header Access-Control-Allow-Origin;
add_header Access-Control-Allow-Origin $http_origin;
proxy_set_header Host ld.smbc-gle-saml.firstderivatives.com; # Required if Proxy Header is needed
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $remote_addr;
### Web Sockets (wss) ###
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $connection_upgrade;
### Web Sockets (wss) ###
}
}
ld6/ld.smbc-gle.firstderivatives.com.conf
+47
View File
@@ -0,0 +1,47 @@
upstream ld-smbc-gle {
hash $remote_addr consistent;
zone ld-smbc-gle 64k;
server 10.60.32.11:4010; # Use your own IP address
server 10.60.32.12:4010;
keepalive 120;
}
server {
listen 80;
server_name ld.smbc-gle.firstderivatives.com;
return 301 https://ld.smbc-gle.firstderivatives.com$request_uri;
}
server {
listen 443 ssl;
server_name ld.smbc-gle.firstderivatives.com;
ssl_certificate /etc/ssl/client/ld.smbc-gle.firstderivatives.com.cer; # Client Supplied Certificate
ssl_certificate_key /etc/ssl/client/ld.smbc-gle.firstderivatives.com.key; # Client Supplied Certificate
ssl_prefer_server_ciphers on;
ssl_protocols TLSv1.2 TLSv1.3;
access_log /var/log/nginx/ld.smbc-gle.firstderivatives.com.access.log main ;
access_log syslog:server=10.60.64.56:514,tag=nginx,severity=info;
error_log /var/log/nginx/ld.smbc-gle.firstderivatives.com.error.log;
error_log syslog:server=10.60.64.56:514,tag=nginx_error,severity=warn;
status_zone status_zone;
### WAF Component ###
include conf.d/00-waf_enable.conf;
### WAF Component ###
location / {
proxy_pass http://ld-smbc-gle/;
proxy_set_header Origin http://ld.smbc-gle.firstderivatives.com;
proxy_hide_header Access-Control-Allow-Origin;
add_header Access-Control-Allow-Origin $http_origin;
proxy_set_header Host ld.smbc-gle.firstderivatives.com; # Required if Proxy Header is needed
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $remote_addr;
### Web Sockets (wss) ###
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $connection_upgrade;
### Web Sockets (wss) ###
}
}
ld6/ld.smbc-rm-saml.firstderivatives.com.conf
+47
View File
@@ -0,0 +1,47 @@
upstream ld-smbc-rm-saml {
hash $remote_addr consistent;
zone ld-smbc-rm-saml 64k;
server 10.60.32.11:4025; # Use your own IP address
server 10.60.32.12:4025;
keepalive 120;
}
server {
listen 80;
server_name ld.smbc-rm-saml.firstderivatives.com;
return 301 https://ld.smbc-rm-saml.firstderivatives.com$request_uri;
}
server {
listen 443 ssl;
server_name ld.smbc-rm-saml.firstderivatives.com;
ssl_certificate /etc/ssl/client/ld.smbc-rm-saml.firstderivatives.com.cer; # Client Supplied Certificate
ssl_certificate_key /etc/ssl/client/ld.smbc-rm-saml.firstderivatives.com.key; # Client Supplied Certificate
ssl_prefer_server_ciphers on;
ssl_protocols TLSv1.2 TLSv1.3;
access_log /var/log/nginx/ld.smbc-rm-saml.firstderivatives.com.access.log main ;
access_log syslog:server=10.60.64.56:514,tag=nginx,severity=info;
error_log /var/log/nginx/ld.smbc-rm-saml.firstderivatives.com.error.log;
error_log syslog:server=10.60.64.56:514,tag=nginx_error,severity=warn;
status_zone status_zone;
### WAF Component ###
include conf.d/00-waf_enable.conf;
### WAF Component ###
location / {
proxy_pass http://ld-smbc-rm-saml/;
proxy_set_header Origin https://ld.smbc-rm-saml.firstderivatives.com;
proxy_hide_header Access-Control-Allow-Origin;
add_header Access-Control-Allow-Origin $http_origin;
proxy_set_header Host ld.smbc-rm-saml.firstderivatives.com; # Required if Proxy Header is needed
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $remote_addr;
### Web Sockets (wss) ###
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $connection_upgrade;
### Web Sockets (wss) ###
}
}
ld6/ld.smbc-rm.firstderivatives.com.conf
+47
View File
@@ -0,0 +1,47 @@
upstream ld-smbc-rm {
hash $remote_addr consistent;
zone ld-smbc-rm 64k;
server 10.60.32.11:4608; # Use your own IP address
server 10.60.32.12:4608;
keepalive 120;
}
server {
listen 80;
server_name ld.smbc-rm.firstderivatives.com;
return 301 https://ld.smbc-rm.firstderivatives.com$request_uri;
}
server {
listen 443 ssl;
server_name ld.smbc-rm.firstderivatives.com;
ssl_certificate /etc/ssl/client/ld.smbc-rm.firstderivatives.com.cer; # Client Supplied Certificate
ssl_certificate_key /etc/ssl/client/ld.smbc-rm.firstderivatives.com.key; # Client Supplied Certificate
ssl_prefer_server_ciphers on;
ssl_protocols TLSv1.2 TLSv1.3;
access_log /var/log/nginx/ld.smbc-rm.firstderivatives.com.access.log main ;
access_log syslog:server=10.60.64.56:514,tag=nginx,severity=info;
error_log /var/log/nginx/ld.smbc-rm.firstderivatives.com.error.log;
error_log syslog:server=10.60.64.56:514,tag=nginx_error,severity=warn;
status_zone status_zone;
### WAF Component ###
include conf.d/00-waf_enable.conf;
### WAF Component ###
location / {
proxy_pass http://ld-smbc-rm/;
proxy_set_header Origin http://ld.smbc-rm.firstderivatives.com;
proxy_hide_header Access-Control-Allow-Origin;
add_header Access-Control-Allow-Origin $http_origin;
proxy_set_header Host ld.smbc-rm.firstderivatives.com; # Required if Proxy Header is needed
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $remote_addr;
### Web Sockets (wss) ###
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $connection_upgrade;
### Web Sockets (wss) ###
}
}