feat: add Linux server operational delivery assets

2026-09-11 05:52:26 +00:00
parent 409b64a2fb
commit c709b27e5e
12 changed files with 412 additions and 50 deletions
@@ -0,0 +1,42 @@
+# TLS terminator for the RVBox agent WebSocket. Do not add a JSON-RPC route:
+# its deliberately unauthenticated debug adapter is loopback-only by default.
+map $http_upgrade $rvbox_connection_upgrade {
+    default upgrade;
+    '' close;
+}
+
+upstream rvbox_agent {
+    server server:6899;
+}
+
+server {
+    listen 443 ssl;
+    server_name _;
+
+    ssl_certificate     /etc/nginx/tls/server.pem;
+    ssl_certificate_key /etc/nginx/tls/server-key.pem;
+    ssl_protocols TLSv1.2 TLSv1.3;
+
+    location = /v1/agent {
+        proxy_pass http://rvbox_agent;
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection $rvbox_connection_upgrade;
+        proxy_set_header Host $host;
+        proxy_read_timeout 75s;
+        proxy_send_timeout 15s;
+        proxy_buffering off;
+    }
+
+    location = /livez {
+        proxy_pass http://server:6901/livez;
+    }
+
+    location = /readyz {
+        proxy_pass http://server:6901/readyz;
+    }
+
+    location / {
+        return 404;
+    }
+}