Adds taiga app.

2026-06-19 21:33:26 +00:00
parent 1d57e26dae
commit a2852dab0a
22 changed files with 1015 additions and 0 deletions
--- a/taiga/versions/6/configmap-gateway.yaml
+++ b/taiga/versions/6/configmap-gateway.yaml
@@ -0,0 +1,82 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: taiga-gateway-config
+  namespace: {{ .namespace }}
+data:
+  taiga.conf: |
+    server {
+        listen 80 default_server;
+        client_max_body_size 100M;
+        charset utf-8;
+
+        # Frontend
+        location / {
+            proxy_pass http://taiga-front/;
+            proxy_pass_header Server;
+            proxy_set_header Host $http_host;
+            proxy_redirect off;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Scheme $scheme;
+        }
+
+        # API
+        location /api/ {
+            proxy_pass http://taiga-back:8000/api/;
+            proxy_pass_header Server;
+            proxy_set_header Host $http_host;
+            proxy_redirect off;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Scheme $scheme;
+        }
+
+        # Admin
+        location /admin/ {
+            proxy_pass http://taiga-back:8000/admin/;
+            proxy_pass_header Server;
+            proxy_set_header Host $http_host;
+            proxy_redirect off;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Scheme $scheme;
+        }
+
+        # Static files served directly from shared volume
+        location /static/ {
+            alias /taiga/static/;
+        }
+
+        # Protected media (internal only)
+        location /_protected/ {
+            internal;
+            alias /taiga/media/;
+            add_header Content-disposition "attachment";
+        }
+
+        # Unprotected exports
+        location /media/exports/ {
+            alias /taiga/media/exports/;
+            add_header Content-disposition "attachment";
+        }
+
+        # Media proxy (protected handler)
+        location /media/ {
+            proxy_set_header Host $http_host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Scheme $scheme;
+            proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_pass http://taiga-protected:8003/;
+            proxy_redirect off;
+        }
+
+        # WebSocket events
+        location /events {
+            proxy_pass http://taiga-events:8888/events;
+            proxy_http_version 1.1;
+            proxy_set_header Upgrade $http_upgrade;
+            proxy_set_header Connection "upgrade";
+            proxy_connect_timeout 7d;
+            proxy_send_timeout 7d;
+            proxy_read_timeout 7d;
+        }
+    }