Nginx – redirect to a different localhost based on url nginx

dockerdocker-composenginxredirect

I'm using docker to create multiple containers and I'm trying to redirect calls coming to my website to the relevant container. for example, if someone tries to go to http://wavenapp.com/bot/test1/webhook then his request will be redirected to http://test1:1337/webhook

I tried the following code

server {
    listen 80;

    server_name wavenapp.com;

   location ~ ^/bot/(.*) {
             proxy_pass http://$1:1337;
             proxy_http_version 1.1;
             proxy_set_header Upgrade $http_upgrade;
             proxy_set_header Connection 'upgrade';
             proxy_set_header Host $host;
             proxy_cache_bypass $http_upgrade;
       }
}

but it's not working, I'm not very good with nginx and would appreciate any help that I can get. Thank you.

Best Answer

What you are trying to do is very dangerous. Letting the user specify the proxy_pass destination server is an open security hole waiting for abuse. For example, someone could request http://wavenapp.com/bot/www.facebook.com, and your server would happily proxy Facebook front page to your client.

I recommend that you configure a location block for all your proxy_pass targets and hard code the proxy_pass destination server.

location ~ ^/bot/test1/(.*) {
    proxy_pass http://test1:1337;
    proxy_http_version 1.1;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection 'upgrade';
    proxy_set_header Host $host;
    proxuy_cache_bypass $http_upgrade;
}

Correct way in new versions of nginx

Turn out my first answer to this question was correct at certain time, but it turned into another pitfall - to stay up to date please check Taxing rewrite pitfalls

I have been corrected by many SE users, so the credit goes to them, but more importantly, here is the correct code:

server {
       listen         80;
       server_name    my.domain.com;
       return         301 https://$server_name$request_uri;
}

server {
       listen         443 ssl;
       server_name    my.domain.com;
       # add Strict-Transport-Security to prevent man in the middle attacks
       add_header Strict-Transport-Security "max-age=31536000" always; 

       [....]
}

How to Force or Redirect to SSL in Nginx

According to nginx pitfalls, it's slightly better to omit the unnecessary capture, using $request_uri instead. In that case, append a question mark to prevent nginx from doubling any query args.

server {
    listen      80;
    server_name signup.mysite.com;
    rewrite     ^   https://$server_name$request_uri? permanent;
}

Best Answer

Related Solutions

NGINX Redirect – How to Rewrite All HTTP Requests to HTTPS While Maintaining Sub-Domain

Correct way in new versions of nginx

How to Force or Redirect to SSL in Nginx

Related Topic