30bda8c75d
* profile browser vnc support + fixes: - switch profile browser rendering to use VNC - frontend: add @novnc/novnc as dependency, create separate bundle novnc.js to load into vnc browser (to avoid loading from each container) - frontend: update proxy paths to proxy websocket, index page to crawler - frontend: allow browser profiles in all browsers, remove browser compatibility check - frontend: update webpack dev config, apply prettier - frontend: node version fix - backend: get vncpassword, build new URL for proxying to crawler iframe - backend: fix profile / crawl job pull policy from 'Always' -> 'Never', should use existing image for job - backend: fix kill signal to use bash -c to work with latest backend image - backend/chart: add 'profile_browser_timeout_seconds' to chart values to control how long profile browser to remain when idle (default to 60) - backend: remove utils.py, now using secret.token_hex() for random suffix Co-authored-by: sua yoo <sua@suayoo.com>
112 lines
3.1 KiB
Plaintext
112 lines
3.1 KiB
Plaintext
include ./resolvers/resolvers.conf;
|
|
|
|
server {
|
|
listen 80 default_server;
|
|
server_name _;
|
|
proxy_buffering off;
|
|
proxy_buffers 16 64k;
|
|
proxy_buffer_size 64k;
|
|
root /usr/share/nginx/html;
|
|
index index.html index.htm;
|
|
|
|
error_page 500 501 502 503 504 /50x.html;
|
|
|
|
merge_slashes off;
|
|
location = /50x.html {
|
|
root /usr/share/nginx/html;
|
|
}
|
|
|
|
# fallback to index for any page
|
|
error_page 404 /index.html;
|
|
|
|
location / {
|
|
root /usr/share/nginx/html;
|
|
index index.html index.htm;
|
|
}
|
|
|
|
# used in both k8s and docker: RWP_BASE_URL set in Dockerfile
|
|
location /replay/sw.js {
|
|
add_header Content-Type application/javascript;
|
|
return 200 'importScripts("${RWP_BASE_URL}sw.js");';
|
|
}
|
|
|
|
# used by docker only: k8s deployment handles /api directly via ingress
|
|
location /api/ {
|
|
proxy_pass http://${BACKEND_HOST}:8000;
|
|
proxy_set_header Host $http_host;
|
|
proxy_set_header X-Forwarded-Proto $scheme;
|
|
}
|
|
|
|
location ~* /watch/([^/]+)/([^/]+)/([^/]+)/ws {
|
|
set $archive $1;
|
|
set $crawl $2;
|
|
set $num $3;
|
|
set $auth_bearer $arg_auth_bearer;
|
|
set $svc_suffix "${CRAWLER_SVC_SUFFIX}";
|
|
set $fqdn_suffix "${CRAWLER_FQDN_SUFFIX}";
|
|
|
|
auth_request /access_check;
|
|
|
|
proxy_pass http://crawl-$crawl-$num$svc_suffix$fqdn_suffix:9037/ws;
|
|
proxy_set_header Host "localhost";
|
|
|
|
proxy_http_version 1.1;
|
|
proxy_set_header Upgrade $http_upgrade;
|
|
proxy_set_header Connection $http_connection;
|
|
}
|
|
|
|
location = /access_check {
|
|
internal;
|
|
proxy_pass http://${BACKEND_HOST}:8000/api/archives/$archive/crawls/$crawl/access?auth_bearer=$auth_bearer;
|
|
proxy_pass_request_body off;
|
|
proxy_set_header Content-Length "";
|
|
}
|
|
|
|
# redirect to bundled build of novnc
|
|
location ~* ^/browser/([^/]+)/core/rfb.js$ {
|
|
absolute_redirect off;
|
|
return 308 /js/novnc.js;
|
|
}
|
|
|
|
location ~* ^/browser/([^/]+)/ws$ {
|
|
set $browserid $1;
|
|
set $auth_bearer $arg_auth_bearer;
|
|
set $archive $arg_aid;
|
|
set $fqdn_suffix "${CRAWLER_FQDN_SUFFIX}";
|
|
|
|
auth_request /access_check_profiles;
|
|
|
|
proxy_pass http://browser-$browserid-0.browser-$browserid$fqdn_suffix:6080/websockify;
|
|
proxy_set_header Host "localhost";
|
|
|
|
proxy_send_timeout 10m;
|
|
proxy_read_timeout 10m;
|
|
|
|
proxy_http_version 1.1;
|
|
proxy_set_header Upgrade $http_upgrade;
|
|
proxy_set_header Connection $http_connection;
|
|
}
|
|
|
|
location ~* ^/browser/([^/]+)/$ {
|
|
set $browserid $1;
|
|
set $auth_bearer $arg_auth_bearer;
|
|
set $archive $arg_aid;
|
|
set $fqdn_suffix "${CRAWLER_FQDN_SUFFIX}";
|
|
|
|
auth_request /access_check_profiles;
|
|
|
|
proxy_pass http://browser-$browserid-0.browser-$browserid$fqdn_suffix:9223/vnc/;
|
|
proxy_set_header Host "localhost";
|
|
}
|
|
|
|
location = /access_check_profiles {
|
|
internal;
|
|
proxy_pass http://${BACKEND_HOST}:8000/api/archives/$archive/profiles/browser/$browserid/access?auth_bearer=$auth_bearer;
|
|
proxy_pass_request_body off;
|
|
proxy_set_header Content-Length "";
|
|
}
|
|
|
|
include ./includes/*.conf;
|
|
}
|
|
|