bingshuo/hololake-system-architecture
Watch
1
0
Fork
You've already forked hololake-system-architecture
 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity

feat(enterprise): route four domains through lighthouse

Browse source
This commit is contained in:
冰朔 2026-08-16 20:27:52 +08:00
commit c058974bba
12 changed files with 707 additions and 20 deletions
Download patch file Download diff file Expand all files Collapse all files

41
deployment/enterprise-domain-bootstrap/enterprise-lighthouse/guanghu-enterprise-identity.nginx.conf Normal file
View file

@ -0,0 +1,41 @@
# Public, read-only identity resolution. The service returns only the projection
# needed for routing; credentials and private repository contents are never exposed.
location = /api/hololake/enterprise/identity/health {
limit_except GET { deny all; }
proxy_pass http://127.0.0.1:8032/health;
proxy_set_header Host $host;
proxy_read_timeout 15s;
}
location = /api/hololake/enterprise/resolve {
limit_except GET { deny all; }
proxy_pass http://127.0.0.1:8032/v1/resolve;
proxy_set_header Host $host;
proxy_read_timeout 15s;
}
# These three writes require the user's own Forgejo Basic authentication. Nginx
# does not terminate or persist the credential; the loopback service verifies it.
location = /api/hololake/enterprise/relationship-confirmations {
limit_except POST { deny all; }
proxy_pass http://127.0.0.1:8032/v1/relationship-confirmations;
proxy_set_header Host $host;
proxy_read_timeout 15s;
client_max_body_size 16k;
}
location = /api/hololake/enterprise/responsibility-receipts {
limit_except POST { deny all; }
proxy_pass http://127.0.0.1:8032/v1/responsibility-receipts;
proxy_set_header Host $host;
proxy_read_timeout 15s;
client_max_body_size 16k;
}
location = /api/hololake/enterprise/me/entry {
limit_except POST { deny all; }
proxy_pass http://127.0.0.1:8032/v1/me/entry;
proxy_set_header Host $host;
proxy_read_timeout 15s;
client_max_body_size 16k;
}