diff --git a/docs/infra-config/config.alloy b/docs/infra-config/config.alloy deleted file mode 100644 index bd3aedf9..00000000 --- a/docs/infra-config/config.alloy +++ /dev/null @@ -1,37 +0,0 @@ -livedebugging { - enabled = true -} - -logging { - level = "info" - format = "logfmt" -} - -local.file_match "spring_logs" { - path_targets = [{ __path__ = "/var/log/spring/*.log" }] // 서비스 로그 파일 경로 -} - -loki.source.file "spring_source" { - targets = local.file_match.spring_logs.targets // 위에서 정의한 로그 파일 경로 사용 - forward_to = [loki.process.spring_labels.receiver] // 읽은 로그를 처리 단계로 전달 -} - -loki.process "spring_labels" { - forward_to = [loki.write.grafana_loki.receiver] // 처리된 로그를 Loki로 전송 - - stage.static_labels { - values = { - service = "backend", - env = sys.env("ALLOY_ENV"), - } - } -} - -loki.write "grafana_loki" { - endpoint { - url = "http://monitor.solid-connection.com:3100/loki/api/v1/push" - tenant_id = "fake" // Loki 테넌트 ID (싱글 테넌시이기에 fake로 설정) - batch_wait = "1s" // 로그 배치 전송 대기 시간 - batch_size = "1MB" // 로그 배치 크기 - } -} diff --git a/docs/infra-config/nginx.dev.conf b/docs/infra-config/nginx.dev.conf deleted file mode 100644 index ae3a35a4..00000000 --- a/docs/infra-config/nginx.dev.conf +++ /dev/null @@ -1,50 +0,0 @@ -map $http_upgrade $connection_upgrade { - default upgrade; - '' keep-alive; -} - -server { - listen 80; - server_name api.stage.solid-connection.com; - -# http를 사용하는 경우 주석 해제 -# location / { -# proxy_pass http://solid-connection-server:8080; -# proxy_set_header Host $host; -# proxy_set_header X-Real-IP $remote_addr; -# proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; -# proxy_set_header X-Forwarded-Proto $scheme; -# } - - location / { - return 301 https://$host$request_uri; - } -} - -server { - listen 443 ssl; - server_name api.stage.solid-connection.com; - - ssl_certificate /etc/letsencrypt/live/api.stage.solid-connection.com/fullchain.pem; - ssl_certificate_key /etc/letsencrypt/live/api.stage.solid-connection.com/privkey.pem; - client_max_body_size 10M; - - ssl_protocols TLSv1.2 TLSv1.3; - ssl_prefer_server_ciphers on; # 클라이언트 보다 서버의 암호화 알고리즘을 우선하도록 설정 - ssl_ciphers "ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256"; - ssl_session_cache shared:SSL:10m; # SSL 세션 캐시 설정 - ssl_session_timeout 10m; - ssl_stapling on; # OCSP 스테이플링 활성화 - ssl_stapling_verify on; - - location / { - proxy_pass http://localhost:8080; - proxy_set_header Host $host; - proxy_set_header X-Real-IP $remote_addr; - proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; - proxy_set_header X-Forwarded-Proto $scheme; - proxy_http_version 1.1; - proxy_set_header Upgrade $http_upgrade; - proxy_set_header Connection $connection_upgrade; - } -} diff --git a/docs/infra-config/nginx.prod.conf b/docs/infra-config/nginx.prod.conf deleted file mode 100644 index ad0d8179..00000000 --- a/docs/infra-config/nginx.prod.conf +++ /dev/null @@ -1,41 +0,0 @@ -map $http_upgrade $connection_upgrade { - default upgrade; - '' keep-alive; -} - -server { - listen 80; - server_name api.solid-connection.com; - - location / { - return 301 https://$host$request_uri; - } -} - -server { - listen 443 ssl; - server_name api.solid-connection.com; - - ssl_certificate /etc/letsencrypt/live/api.solid-connection.com/fullchain.pem; - ssl_certificate_key /etc/letsencrypt/live/api.solid-connection.com/privkey.pem; - client_max_body_size 10M; - - ssl_protocols TLSv1.2 TLSv1.3; - ssl_prefer_server_ciphers on; # 클라이언트 보다 서버의 암호화 알고리즘을 우선하도록 설정 - ssl_ciphers "ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256"; - ssl_session_cache shared:SSL:10m; # SSL 세션 캐시 설정 - ssl_session_timeout 10m; - ssl_stapling on; # OCSP 스테이플링 활성화 - ssl_stapling_verify on; - - location / { - proxy_pass http://127.0.0.1:8080; - proxy_set_header Host $host; - proxy_set_header X-Real-IP $remote_addr; - proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; - proxy_set_header X-Forwarded-Proto $scheme; - proxy_http_version 1.1; - proxy_set_header Upgrade $http_upgrade; - proxy_set_header Connection $connection_upgrade; - } -}