test

Author: kuthiala

.github/workflows/nginx-sync.yml

@@ -0,0 +1,36 @@
+name: Sync NGINX Configs to Azure
+
+on:
+  push:
+    branches:
+      - master
+    paths:
+      - configs/**
+
+permissions:
+  id-token: write
+  contents: read
+
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository content
+        uses: actions/checkout@v4
+
+      - name: Azure Login (with service principal credentials)
+        run: |
+          az login --service-principal \
+            --username "${{ secrets.AZURE_CLIENT_ID }}" \
+            --password "${{ secrets.AZURE_CLIENT_SECRET }}" \
+            --tenant "${{ secrets.AZURE_TENANT_ID }}"
+
+      - name: Sync NGINX Config to Azure
+        uses: nginxinc/[email protected]
+        with:
+          subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }}
+          resource-group-name: ${{ secrets.AZURE_RESOURCE_GROUP_NAME }}
+          nginx-deployment-name: ${{ secrets.NGINX_DEPLOYMENT_NAME }}
+          nginx-config-directory-path: configs/
+          nginx-root-config-file: nginx.conf
+          transformed-nginx-config-directory-path: /etc/nginx/

configs/conf.d/proxy.conf

@@ -0,0 +1,9 @@
+proxy_set_header Host $host;
+proxy_set_header X-Real-IP $remote_addr;
+proxy_set_header X-Proxy-App app;
+proxy_set_header X-Git-App app;
+proxy_set_header Github-Run-Id 000000;
+proxy_buffering on;
+proxy_buffer_size 4k;
+proxy_buffers 8 8k;
+proxy_read_timeout 60s;

configs/nginx.conf

@@ -0,0 +1,35 @@
+http {
+    upstream app {
+        zone app 64k;
+        least_conn;
+        server 10.0.1.4:8000;
+    }
+
+    server {
+        listen 80;
+        server_name *.example.com;
+
+        location / {
+            include /etc/nginx/conf.d/proxy.conf;
+            proxy_pass http://app;
+            health_check;
+        }
+    }
+
+    server {
+        listen 443 ssl default_server;
+        # listen 443;
+        server_name example.com;
+        
+        ssl_certificate /etc/nginx/ssl/000000/my-cert.crt;
+        ssl_certificate_key /etc/nginx/ssl/000000/my-cert.key;
+
+        location / {
+            include /etc/nginx/conf.d/proxy.conf;
+            proxy_pass http://app;
+            health_check;
+        }
+    }
+}
+
+# Github sync