1
#user  nobody;
2
worker_processes  1;
3
 
4
#error_log  logs/error.log;
5
#error_log  logs/error.log  notice;
6
#error_log  logs/error.log  info;
7
 
8
#pid        logs/nginx.pid;
9
 
10
 
11
events {
12
    worker_connections  1024;
13
}
14
 
15
 
16
http {
17
    include       mime.types;
18
    default_type  application/octet-stream;
19
 
20
    #log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
21
    #                  '$status $body_bytes_sent "$http_referer" '
22
    #                  '"$http_user_agent" "$http_x_forwarded_for"';
23
 
24
    #access_log  logs/access.log  main;
25
 
26
    sendfile        on;
27
    #tcp_nopush     on;
28
 
29
    #keepalive_timeout  0;
30
    keepalive_timeout  65;
31
 
32
    #gzip  on;
33
 
34
    server {
35
        listen 443 ssl;# Ganti dengan port yang Anda inginkan
36
        server_name localhost;
37
        
38
        ssl_certificate     /home/jeremi/nginx-ssl/localhost.crt;
39
        ssl_certificate_key /home/jeremi/nginx-ssl/localhost.key;
40
 
41
        ####### MSF CONFIG
42
        # Konfigurasi untuk msf-iam
43
        location /api/msf_iam/ {
44
            proxy_pass https://revo.besmart.id;  # Ganti dengan port aplikasi msf-iam
45
            proxy_ssl_verify off;
46
 
47
            proxy_ssl_server_name on;
48
            proxy_set_header Host revo.besmart.id;
49
            proxy_set_header X-Real-IP $remote_addr;
50
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
51
            proxy_set_header X-Forwarded-Proto $scheme;
52
 
53
            # Preflight response
54
            if ($request_method = OPTIONS ) {
55
                add_header 'Access-Control-Allow-Origin' '*' always;
56
                add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS' always;
57
                add_header 'Access-Control-Allow-Headers' 'Origin, Content-Type, Accept, Authorization' always;
58
                add_header 'Content-Length' 0;
59
                add_header 'Content-Type' 'text/plain';
60
                return 204;
61
            }
62
 
63
            # CORS headers
64
            add_header 'Access-Control-Allow-Origin' '*' always;
65
            add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS' always;
66
            add_header 'Access-Control-Allow-Headers' 'Origin, Content-Type, Accept, Authorization' always;
67
        }
68
 
69
        # Konfigurasi untuk msf-mgmt
70
        location /api/msf_mgmt/ {
71
            proxy_pass https://revo.besmart.id;  # Ganti dengan port aplikasi msf-iam
72
            proxy_ssl_verify off;
73
 
74
            proxy_ssl_server_name on;
75
            proxy_set_header Host revo.besmart.id;
76
            proxy_set_header X-Real-IP $remote_addr;
77
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
78
            proxy_set_header X-Forwarded-Proto $scheme;
79
 
80
            # Preflight response
81
            if ($request_method = OPTIONS ) {
82
                add_header 'Access-Control-Allow-Origin' '*' always;
83
                add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS' always;
84
                add_header 'Access-Control-Allow-Headers' 'Origin, Content-Type, Accept, Authorization' always;
85
                add_header 'Content-Length' 0;
86
                add_header 'Content-Type' 'text/plain';
87
                return 204;
88
            }
89
 
90
            # CORS headers
91
            add_header 'Access-Control-Allow-Origin' '*' always;
92
            add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS' always;
93
            add_header 'Access-Control-Allow-Headers' 'Origin, Content-Type, Accept, Authorization' always;
94
        }
95
 
96
        # Konfigurasi untuk msf-paging
97
        location /api/msf_paging/ {
98
            proxy_pass https://revo.besmart.id;  # Ganti dengan port aplikasi msf-paging
99
            proxy_ssl_verify off;
100
 
101
            proxy_ssl_server_name on;
102
            proxy_set_header Host revo.besmart.id;
103
            proxy_set_header X-Real-IP $remote_addr;
104
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
105
            proxy_set_header X-Forwarded-Proto $scheme;
106
 
107
            # Preflight response
108
            if ($request_method = OPTIONS ) {
109
                add_header 'Access-Control-Allow-Origin' '*' always;
110
                add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS' always;
111
                add_header 'Access-Control-Allow-Headers' 'Origin, Content-Type, Accept, Authorization' always;
112
                add_header 'Content-Length' 0;
113
                add_header 'Content-Type' 'text/plain';
114
                return 204;
115
            }
116
 
117
            # CORS headers
118
            add_header 'Access-Control-Allow-Origin' '*' always;
119
            add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS' always;
120
            add_header 'Access-Control-Allow-Headers' 'Origin, Content-Type, Accept, Authorization' always;
121
        }
122
 
123
        # Konfigurasi untuk msf-sandbox
124
        location /api/msf_sandbox/ {
125
            proxy_pass https://revo.besmart.id;  # Ganti dengan port aplikasi msf-sandbox
126
            proxy_ssl_verify off;
127
 
128
            proxy_ssl_server_name on;
129
            proxy_set_header Host revo.besmart.id;
130
            proxy_set_header X-Real-IP $remote_addr;
131
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
132
            proxy_set_header X-Forwarded-Proto $scheme;
133
 
134
            # Preflight response
135
            if ($request_method = OPTIONS ) {
136
                add_header 'Access-Control-Allow-Origin' '*' always;
137
                add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS' always;
138
                add_header 'Access-Control-Allow-Headers' 'Origin, Content-Type, Accept, Authorization' always;
139
                add_header 'Content-Length' 0;
140
                add_header 'Content-Type' 'text/plain';
141
                return 204;
142
            }
143
 
144
            # CORS headers
145
            add_header 'Access-Control-Allow-Origin' '*' always;
146
            add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS' always;
147
            add_header 'Access-Control-Allow-Headers' 'Origin, Content-Type, Accept, Authorization' always;
148
        }
149
 
150
        ###### MSP CONFIG
151
        # Konfigurasi untuk msp-revo-app
152
        location / {
153
            proxy_pass http://localhost:3000;  # Port aplikasi msp-revo-app
154
            proxy_set_header Host $host;
155
            proxy_set_header X-Real-IP $remote_addr;
156
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
157
            proxy_set_header X-Forwarded-Proto $scheme;
158
 
159
            # CORS headers
160
            add_header 'Access-Control-Allow-Origin' '*';
161
            add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS';
162
            add_header 'Access-Control-Allow-Headers' 'Origin, Content-Type, Accept';
163
        }
164
 
165
        # Konfigurasi untuk mfe-menu
166
        location /mfe/mainmenu {
167
            proxy_pass http://localhost:3011;  # Port aplikasi mfe-menu
168
            proxy_set_header Host $host;
169
            proxy_set_header X-Real-IP $remote_addr;
170
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
171
            proxy_set_header X-Forwarded-Proto $scheme;
172
 
173
            # CORS headers
174
            add_header 'Access-Control-Allow-Origin' '*';
175
            add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS';
176
            add_header 'Access-Control-Allow-Headers' 'Origin, Content-Type, Accept';
177
        }
178
 
179
        # Konfigurasi untuk mfe-content
180
        location /mfe/content {
181
            proxy_pass http://localhost:3021;  # Port aplikasi mfe-content
182
            proxy_set_header Host $host;
183
            proxy_set_header X-Real-IP $remote_addr;
184
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
185
            proxy_set_header X-Forwarded-Proto $scheme;
186
 
187
            # CORS headers
188
            add_header 'Access-Control-Allow-Origin' '*';
189
            add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS';
190
            add_header 'Access-Control-Allow-Headers' 'Origin, Content-Type, Accept';
191
        }
192
 
193
        # Konfigurasi untuk mfe-iam-evo
194
        location /mfe/iamevo {
195
            proxy_pass http://localhost:3031;  # Port aplikasi mfe-iam-evo
196
            proxy_set_header Host $host;
197
            proxy_set_header X-Real-IP $remote_addr;
198
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
199
            proxy_set_header X-Forwarded-Proto $scheme;
200
 
201
            # CORS headers
202
            add_header 'Access-Control-Allow-Origin' '*';
203
            add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS';
204
            add_header 'Access-Control-Allow-Headers' 'Origin, Content-Type, Accept';
205
        }
206
 
207
        # Konfigurasi untuk mfe-brms
208
        location /mfe/brms {
209
            proxy_pass http://localhost:3061;  # Port aplikasi mfe-brms
210
            proxy_set_header Host $host;
211
            proxy_set_header X-Real-IP $remote_addr;
212
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
213
            proxy_set_header X-Forwarded-Proto $scheme;
214
 
215
            # CORS headers
216
            add_header 'Access-Control-Allow-Origin' '*';
217
            add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS';
218
            add_header 'Access-Control-Allow-Headers' 'Origin, Content-Type, Accept';
219
        }
220
 
221
        # Konfigurasi untuk mfe-user-main
222
        location /mfe/usermgnt {
223
            proxy_pass http://localhost:3051;  # Port aplikasi mfe-user-main
224
            proxy_set_header Host $host;
225
            proxy_set_header X-Real-IP $remote_addr;
226
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
227
            proxy_set_header X-Forwarded-Proto $scheme;
228
 
229
            # CORS headers
230
            add_header 'Access-Control-Allow-Origin' '*';
231
            add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS';
232
            add_header 'Access-Control-Allow-Headers' 'Origin, Content-Type, Accept';
233
        }
234
 
235
        # Konfigurasi untuk hit ke BRMS (dynamic container name)
236
        location ~ ^/kie-server/services/rest/server/containers/instances/[^/]+ {
237
            proxy_pass http://45.32.114.128:8181;
238
            proxy_set_header Host $host;
239
            proxy_set_header X-Real-IP $remote_addr;
240
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
241
            proxy_set_header X-Forwarded-Proto $scheme;
242
 
243
            # CORS headers
244
            add_header 'Access-Control-Allow-Origin' '*';
245
            add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS';
246
            add_header 'Access-Control-Allow-Headers' 'Origin, Content-Type, Accept';
247
        }
248
 
249
    }
250
 
251
}