https://github.com/cloud-gov/secureproxy-boshrelease
https://github.com/cloud-gov/secureproxy-boshrelease
Last synced: 6 months ago
JSON representation
- Host: GitHub
- URL: https://github.com/cloud-gov/secureproxy-boshrelease
- Owner: cloud-gov
- License: other
- Created: 2015-07-07T03:29:49.000Z (almost 11 years ago)
- Default Branch: main
- Last Pushed: 2025-07-15T21:47:15.000Z (12 months ago)
- Last Synced: 2025-07-16T20:34:55.675Z (12 months ago)
- Language: Perl
- Size: 143 KB
- Stars: 1
- Watchers: 16
- Forks: 4
- Open Issues: 5
-
Metadata Files:
- Readme: README.md
- Contributing: CONTRIBUTING.md
- License: LICENSE.md
- Codeowners: CODEOWNERS
- Security: SECURITY.md
Awesome Lists containing this project
README
# BOSH Release for cloud-gov Cloud Foundry Secure Proxy
This proxy adds an nginx layer on top of Cloud Foundry, proxying all requests made to the router.
nginx is configured to do the following:
- Add `X-Frame-Options`, `X-Content-Type-Options` and `Strict-Transport-Security` headers
- Redirect HTTP traffic to HTTPS
- Set limits on timeouts and body sizes
## Usage
To use this BOSH release, first upload it to your BOSH:
```shell
bosh target BOSH_HOST
git clone https://github.com/cloud-gov/cg-secureproxy-boshrelease.git
cd cg-secureproxy-boshrelease
bosh upload release releases/secureproxy/secureproxy-5.yml
```
Then add the properties to your manifest file, and add the secureproxy release to the releases section:
```yaml
properties:
...
secureproxy:
proxy_port: 85
listen_port: 80
releases:
- ...
- name: secureproxy
version: latest
```
Change the port the router runs on:
```yaml
properties:
...
router:
port: 85
```
Finally add the `secureproxy` template to your job:
```yaml
- instances: 1
name: router_z1
...
templates:
- ...
- name: secureproxy
release: secureproxy
```