.devcontainer/proxy/http.conf

# research portal (5173)
server {
    listen              5173 ssl;
    if ($scheme != "https") {
        return 301 https://$host$request_uri;
    }
    http2 on;
    server_name         airavata.host;
    ssl_certificate     /vault/server.crt;
    ssl_certificate_key /vault/server.key;
    location / {
        proxy_pass         http://portals:5173;
        proxy_set_header   Host               $host;
        proxy_set_header   X-Real-IP          $remote_addr;
        proxy_set_header   X-Forwarded-For    $proxy_add_x_forwarded_for;
        proxy_set_header   X-Forwarded-Proto  $scheme;
        proxy_set_header   X-Forwarded-Port   $server_port;
        proxy_redirect     default;
    }
}

# php portal (8008)
server {
    listen              8008 ssl;
    if ($scheme != "https") {
        return 301 https://$host$request_uri;
    }
    http2 on;
    server_name         airavata.host;
    ssl_certificate     /vault/server.crt;
    ssl_certificate_key /vault/server.key;
    location / {
        proxy_pass         http://portals:8008;
        proxy_set_header   Host               $host;
        proxy_set_header   X-Real-IP          $remote_addr;
        proxy_set_header   X-Forwarded-For    $proxy_add_x_forwarded_for;
        proxy_set_header   X-Forwarded-Proto  $scheme;
        proxy_set_header   X-Forwarded-Port   $server_port;
        proxy_redirect     default;
    }
}

# django portal (8009)
server {
    listen              8009 ssl;
    if ($scheme != "https") {
        return 301 https://$host$request_uri;
    }
    http2 on;
    server_name         airavata.host;
    ssl_certificate     /vault/server.crt;
    ssl_certificate_key /vault/server.key;
    location / {
        proxy_pass         http://portals:8009;
        proxy_set_header   Host               $host;
        proxy_set_header   X-Real-IP          $remote_addr;
        proxy_set_header   X-Forwarded-For    $proxy_add_x_forwarded_for;
        proxy_set_header   X-Forwarded-Proto  $scheme;
        proxy_set_header   X-Forwarded-Port   $server_port;
        proxy_redirect     default;
    }
}

# keycloak (8443)
server {
    listen              8443 ssl;
    if ($scheme != "https") {
        return 301 https://$host$request_uri;
    }
    http2 on;
    server_name         airavata.host;
    ssl_certificate     /vault/server.crt;
    ssl_certificate_key /vault/server.key;
    location / {
        proxy_pass         http://keycloak:18080;
        proxy_set_header   Host               $host;
        proxy_set_header   X-Real-IP          $remote_addr;
        proxy_set_header   X-Forwarded-For    $proxy_add_x_forwarded_for;
        proxy_set_header   X-Forwarded-Proto  $scheme;
        proxy_set_header   X-Forwarded-Port   $server_port;
        proxy_redirect     default;
    }
}

# jupyterhub (20000)
server {
    listen              20000 ssl;
    if ($scheme != "https") {
        return 301 https://$host$request_uri;
    }
    http2 on;
    server_name         airavata.host;
    ssl_certificate     /vault/server.crt;
    ssl_certificate_key /vault/server.key;
    location / {
        proxy_pass         http://jupyterhub:20000;
        proxy_set_header   Host               $host;
        proxy_set_header   X-Real-IP          $remote_addr;
        proxy_set_header   X-Forwarded-For    $proxy_add_x_forwarded_for;
        proxy_set_header   X-Forwarded-Proto  $scheme;
        proxy_set_header   X-Forwarded-Port   $server_port;
        proxy_redirect     default;
    }
}