nginx-values

extraVolumeMounts:
  - name: nginx-conf
    mountPath: /etc/nginx/conf.d
    readOnly: true
extraVolumes:
  - name: nginx-conf
    configMap:
      name: nginx-conf
service:
  type: LoadBalancer
nginxServerBlock: |-
  upstream fastcgi_backend {
      server   php-fpm:9000;
   }
  
  server {
      listen 80;
      set $MAGE_ROOT /var/www/html;
      set $MAGE_DEBUG_SHOW_ARGS 1;
  
  root $MAGE_ROOT/pub;
  
  index index.php;
  autoindex off;
  charset UTF-8;
  error_page 404 403 = /errors/404.php;
  #add_header "X-UA-Compatible" "IE=Edge";
  
  
  # Deny access to sensitive files
  location /.user.ini {
      deny all;
  }
  
  # PHP entry point for setup application
  location ~* ^/setup($|/) {
      root $MAGE_ROOT;
      location ~ ^/setup/index.php {
          fastcgi_pass   fastcgi_backend;
  
          fastcgi_param  PHP_FLAG  "session.auto_start=off \n suhosin.session.cryptua=off";
          fastcgi_param  PHP_VALUE "memory_limit=756M \n max_execution_time=600";
          fastcgi_read_timeout 600s;
          fastcgi_connect_timeout 600s;
  
          fastcgi_index  index.php;
          fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
          include        fastcgi_params;
      }
  
      location ~ ^/setup/(?!pub/). {
          deny all;
      }
  
      location ~ ^/setup/pub/ {
          add_header X-Frame-Options "SAMEORIGIN";
      }
  }
  
  # PHP entry point for update application
  location ~* ^/update($|/) {
      root $MAGE_ROOT;
  
      location ~ ^/update/index.php {
          fastcgi_split_path_info ^(/update/index.php)(/.+)$;
          fastcgi_pass   fastcgi_backend;
          fastcgi_index  index.php;
          fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
          fastcgi_param  PATH_INFO        $fastcgi_path_info;
          include        fastcgi_params;
      }
  
      # Deny everything but index.php
      location ~ ^/update/(?!pub/). {
          deny all;
      }
  
      location ~ ^/update/pub/ {
          add_header X-Frame-Options "SAMEORIGIN";
      }
  }
  
  location / {
      try_files $uri $uri/ /index.php$is_args$args;
  }
  
  location /pub/ {
      location ~ ^/pub/media/(downloadable|customer|import|theme_customization/.*\.xml) {
          deny all;
      }
      alias $MAGE_ROOT/pub/;
      add_header X-Frame-Options "SAMEORIGIN";
  }
  
  location /static/ {
      # Uncomment the following line in production mode
      # expires max;
  
      # Remove signature of the static files that is used to overcome the browser cache
      location ~ ^/static/version {
          rewrite ^/static/(version\d*/)?(.*)$ /static/$2 last;
      }
  
      location ~* \.(ico|jpg|jpeg|png|gif|svg|js|css|swf|eot|ttf|otf|woff|woff2|html|json)$ {
          add_header Cache-Control "public";
          add_header X-Frame-Options "SAMEORIGIN";
          expires +1y;
  
          if (!-f $request_filename) {
              rewrite ^/static/(version\d*/)?(.*)$ /static.php?resource=$2 last;
          }
      }
      location ~* \.(zip|gz|gzip|bz2|csv|xml)$ {
          add_header Cache-Control "no-store";
          add_header X-Frame-Options "SAMEORIGIN";
          expires    off;
  
          if (!-f $request_filename) {
             rewrite ^/static/(version\d*/)?(.*)$ /static.php?resource=$2 last;
          }
      }
      if (!-f $request_filename) {
          rewrite ^/static/(version\d*/)?(.*)$ /static.php?resource=$2 last;
      }
      add_header X-Frame-Options "SAMEORIGIN";
  }
  
  location /media/ {
      try_files $uri $uri/ /get.php$is_args$args;
  
      location ~ ^/media/theme_customization/.*\.xml {
          deny all;
      }
  
      location ~* \.(ico|jpg|jpeg|png|gif|svg|js|css|swf|eot|ttf|otf|woff|woff2)$ {
          add_header Cache-Control "public";
          add_header X-Frame-Options "SAMEORIGIN";
          expires +1y;
          try_files $uri $uri/ /get.php$is_args$args;
      }
      location ~* \.(zip|gz|gzip|bz2|csv|xml)$ {
          add_header Cache-Control "no-store";
          add_header X-Frame-Options "SAMEORIGIN";
          expires    off;
          try_files $uri $uri/ /get.php$is_args$args;
      }
      add_header X-Frame-Options "SAMEORIGIN";
  }
  
  location /media/customer/ {
      deny all;
  }
  
  location /media/downloadable/ {
      deny all;
  }
  
  location /media/import/ {
      deny all;
  }
  location /errors/ {
      location ~* \.xml$ {
          deny all;
      }
  }
  
  # PHP entry point for main application
  location ~ ^/(index|get|static|errors/report|errors/404|errors/503|health_check)\.php$ {
      try_files $uri =404;
      fastcgi_pass   fastcgi_backend;
      fastcgi_buffers 1024 4k;
  
      fastcgi_param  PHP_FLAG  "session.auto_start=off \n suhosin.session.cryptua=off";
      fastcgi_param  PHP_VALUE "memory_limit=756M \n max_execution_time=18000";
      fastcgi_read_timeout 600s;
      fastcgi_connect_timeout 600s;
  
      fastcgi_index  index.php;
      fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
      include        fastcgi_params;
  }
  
  gzip on;
  gzip_disable "msie6";
  
  gzip_comp_level 6;
  gzip_min_length 1100;
  gzip_buffers 16 8k;
  gzip_proxied any;
  gzip_types
      text/plain
      text/css
      text/js
      text/xml
      text/javascript
      application/javascript
      application/x-javascript
      application/json
      application/xml
      application/xml+rss
      image/svg+xml;
  gzip_vary on;
  
  # Banned locations (only reached if the earlier PHP entry point regexes don't match)
  location ~* (\.php$|\.phtml$|\.htaccess$|\.git) {
      deny all;
   }
  }
ingress:
  enabled: true
  pathType: Prefix
  hostname: www.myappkube.com
  annotations:
    kubernetes.io/ingress.class: nginx
  tls: false
  extraHosts: 
    - path: /*
      backend:
        serviceName: nginx
        servicePort: 80
extraVolumeMounts:
  - name: nginx-conf
    mountPath: /etc/nginx/conf.d
    readOnly: true
extraVolumes:
  - name: nginx-conf
    configMap:
      name: nginx-conf
service:
  type: LoadBalancer
  port: 80
  httpsPort: 443
  nodePorts:
    http: ""
    https: ""
  targetPort:
    http: http
    https: https
  loadBalancerIP: ""
  annotations: {}
  externalTrafficPolicy: Cluster