Sergey Antropoff
777926487b
initial QEMU slice, backed by imported contracts for majors 6–9. - Implement durable handlers for access/auth, cluster, LXC, storage, HA, firewall, Ceph, SDN, ACME, notifications, pools, mapping, and node ops - Serve an interactive Web UI with catalog browsing, demo seed controls, and OpenAPI/help surfaces - Bundle PVE 6.4-15, 7.4-16, and 8.4.5 contract revisions alongside 9.2.3 - Support in-memory runtime contract Apply (POST /ui/api/contract/apply) so /version and /api2 routes follow the selected major until restart - Expand seed profiles (including demo-cluster), migrations 007–008, TLS gateway config, Compose/Makefile tooling, and compatibility evidence - Tighten .gitignore for macOS, hidden directories (.*/), and local secrets
25 lines
758 B
Plaintext
25 lines
758 B
Plaintext
# Development HTTPS gateway for proxmoxer and other TLS clients.
|
|
# Upstream hostnames are resolved at request time via Docker embedded DNS.
|
|
|
|
server {
|
|
listen 8443 ssl;
|
|
server_name _;
|
|
|
|
ssl_certificate /etc/nginx/tls/server.crt;
|
|
ssl_certificate_key /etc/nginx/tls/server.key;
|
|
ssl_protocols TLSv1.2 TLSv1.3;
|
|
|
|
resolver 127.0.0.11 valid=10s ipv6=off;
|
|
|
|
location / {
|
|
set $upstream simulator:8006;
|
|
proxy_pass http://$upstream;
|
|
proxy_http_version 1.1;
|
|
proxy_set_header Host $host;
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
proxy_set_header X-Forwarded-Proto https;
|
|
proxy_set_header X-Request-ID $request_id;
|
|
}
|
|
}
|