Route BIM viewer through NodeDC platform

infra/authentik/bootstrap-dev.py

@@ -26,6 +26,7 @@ GROUP_SPECS = [
     ("nodedc:launcher:user", False),
     ("nodedc:taskmanager:admin", False),
     ("nodedc:taskmanager:user", False),
+    ("nodedc:bim:access", False),
 ]
 
 APP_SPECS = [

infra/reverse-proxy/Caddyfile

@@ -45,3 +45,11 @@ http://{$TASK_DOMAIN:task.local.nodedc} {
 		header_up X-Forwarded-For {remote_host}
 	}
 }
+
+http://{$BIM_DOMAIN:bim.local.nodedc} {
+	reverse_proxy {$LOCAL_BIM_VIEWER_UPSTREAM:host.docker.internal:8080} {
+		header_up Host {host}
+		header_up X-Forwarded-Proto {scheme}
+		header_up X-Forwarded-For {remote_host}
+	}
+}

infra/reverse-proxy/Caddyfile.staging

@@ -14,6 +14,10 @@ http://{$TASK_DOMAIN} {
 	redir https://{host}{uri} permanent
 }
 
+http://{$BIM_DOMAIN} {
+	redir https://{host}{uri} permanent
+}
+
 {$AUTH_DOMAIN} {
 	header {
 		Strict-Transport-Security "max-age=31536000; includeSubDomains"
@@ -55,3 +59,15 @@ http://{$TASK_DOMAIN} {
 		header_up X-Forwarded-For {remote_host}
 	}
 }
+
+{$BIM_DOMAIN} {
+	header {
+		Strict-Transport-Security "max-age=31536000; includeSubDomains"
+	}
+
+	reverse_proxy {$STAGING_BIM_VIEWER_UPSTREAM} {
+		header_up Host {host}
+		header_up X-Forwarded-Proto {scheme}
+		header_up X-Forwarded-For {remote_host}
+	}
+}

infra/synology/Caddyfile.http

@@ -48,6 +48,16 @@ http://{$TASK_DOMAIN} {
 	}
 }
 
+http://{$BIM_DOMAIN:bim.nodedc.ru} {
+	reverse_proxy {$SYNOLOGY_BIM_VIEWER_UPSTREAM:ndc-beam-viewer:8080} {
+		header_up Host {http.request.host}
+		header_up X-Forwarded-Host {http.request.host}
+		header_up X-Forwarded-Proto {scheme}
+		header_up X-Forwarded-Port {$NODEDC_PUBLIC_HTTP_PORT}
+		header_up X-Forwarded-For {remote_host}
+	}
+}
+
 http://id.nodedc.ru {
 	@auth_admin path /if/admin /if/admin/*
 	respond @auth_admin 404