first commit

deploy/nginx-active-push.conf

@@ -0,0 +1,47 @@
+# ActivePush - drop-in replacement for the Z-Push PHP-FPM locations.
+# Put these inside the existing `server { listen 443 ssl; ... }` block of the mail host.
+
+location = /Microsoft-Server-ActiveSync {
+    proxy_pass http://127.0.0.1:8081;
+    proxy_http_version 1.1;
+    proxy_set_header Connection "";
+    proxy_set_header Host $host;
+    proxy_set_header X-Forwarded-For $remote_addr;
+    proxy_set_header X-Forwarded-Proto $scheme;
+    # Ping/hanging Sync keep the request open up to ~59 minutes
+    proxy_read_timeout 3660s;
+    proxy_send_timeout 3660s;
+    proxy_buffering off;
+    proxy_request_buffering on;
+    client_max_body_size 64m;
+}
+
+# Health check for monitoring / load balancers (no authentication, no data).
+location = /activesync-healthz {
+    proxy_pass http://127.0.0.1:8081/healthz;
+    access_log off;
+}
+
+# The same three case variants previously routed to autodiscover.php
+location = /AutoDiscover/AutoDiscover.xml { include /etc/nginx/snippets/active-push-autodiscover.conf; }
+location = /Autodiscover/Autodiscover.xml { include /etc/nginx/snippets/active-push-autodiscover.conf; }
+location = /autodiscover/autodiscover.xml { include /etc/nginx/snippets/active-push-autodiscover.conf; }
+
+# --- /etc/nginx/snippets/active-push-autodiscover.conf -------------------------
+# proxy_pass http://127.0.0.1:8081;
+# proxy_set_header Host $host;
+# proxy_set_header X-Forwarded-For $remote_addr;
+# proxy_set_header X-Forwarded-Proto $scheme;
+# proxy_read_timeout 300s;
+# client_max_body_size 64k;
+
+# --- Optional: panel behind nginx with an extra auth layer ----------------------
+# location /active-push-admin/ {
+#     allow 10.0.0.0/8; deny all;
+#     proxy_pass http://127.0.0.1:9091/;
+#     proxy_set_header X-Forwarded-For $remote_addr;
+#     proxy_set_header X-Forwarded-Proto $scheme;
+#     proxy_buffering off;              # live event stream (SSE)
+# }
+# The panel uses absolute paths (/api, /app.js); a dedicated (sub)domain is simpler:
+# server { server_name push-admin.example.com; location / { proxy_pass http://127.0.0.1:9091; ... } }