Реализована интеграция с СМС провайдером

codebase/backend/nginx/docker-compose.yml

@@ -12,11 +12,12 @@ services:
       NGINX_HSTS_MAX_AGE: ${NGINX_HSTS_MAX_AGE:-0}
       NGINX_CLIENT_MAX_BODY_SIZE: ${NGINX_CLIENT_MAX_BODY_SIZE:-8m}
       NGINX_RATE_LIMIT_API: ${NGINX_RATE_LIMIT_API:-60r/m}
-      NGINX_RATE_LIMIT_AUTH: ${NGINX_RATE_LIMIT_AUTH:-10r/m}
+      NGINX_RATE_LIMIT_AUTH: ${NGINX_RATE_LIMIT_AUTH:-60r/m}
       NGINX_RATE_LIMIT_PUBLIC: ${NGINX_RATE_LIMIT_PUBLIC:-60r/m}
       NGINX_RATE_LIMIT_POLLING: ${NGINX_RATE_LIMIT_POLLING:-60r/m}
       NGINX_RATE_LIMIT_DOWNLOADS: ${NGINX_RATE_LIMIT_DOWNLOADS:-30r/m}
       NGINX_RATE_LIMIT_BITRIX: ${NGINX_RATE_LIMIT_BITRIX:-120r/m}
+      NGINX_RATE_LIMIT_SMS_CALLBACK: ${NGINX_RATE_LIMIT_SMS_CALLBACK:-120r/m}
       NGINX_RATE_LIMIT_WS: ${NGINX_RATE_LIMIT_WS:-30r/m}
       NGINX_MESSAGE_READ_TIMEOUT_SEC: ${NGINX_MESSAGE_READ_TIMEOUT_SEC:-330}
       FRONTEND_DEV_PROXY_ENABLED: ${FRONTEND_DEV_PROXY_ENABLED:-false}
@@ -37,6 +38,7 @@ services:
       frontend-static: {condition: service_completed_successfully}
       api-backend: {condition: service_healthy}
       keycloak: {condition: service_healthy}
+      sms-service: {condition: service_healthy}
       bitrix-local-app: {condition: service_healthy}
       bitrix-sync: {condition: service_healthy}
     healthcheck:

codebase/backend/nginx/nginx.conf.template

@@ -50,6 +50,7 @@ http {
     limit_req_zone $polling_key zone=polling:10m rate=${NGINX_RATE_LIMIT_POLLING};
     limit_req_zone $binary_remote_addr zone=downloads:10m rate=${NGINX_RATE_LIMIT_DOWNLOADS};
     limit_req_zone $binary_remote_addr zone=bitrix_callbacks:10m rate=${NGINX_RATE_LIMIT_BITRIX};
+    limit_req_zone $binary_remote_addr zone=sms_callbacks:10m rate=${NGINX_RATE_LIMIT_SMS_CALLBACK};
     limit_req_zone $binary_remote_addr zone=ws_connect:10m rate=${NGINX_RATE_LIMIT_WS};
     limit_conn_zone $binary_remote_addr zone=connections:10m;
 
@@ -61,6 +62,7 @@ http {
 
     upstream api_backend { server api-backend:8000; keepalive 32; }
     upstream keycloak_upstream { server keycloak:8080; keepalive 16; }
+    upstream sms_service_upstream { server sms-service:8080; keepalive 8; }
     upstream bitrix_local { server bitrix-local-app:8080; keepalive 16; }
     upstream bitrix_sync_upstream { server bitrix-sync:8080; keepalive 8; }
     upstream frontend_dev { server ${EXPO_DEV_SERVER_HOSTPORT}; keepalive 8; }

codebase/backend/nginx/scripts/entrypoint.sh

@@ -1,7 +1,7 @@
 #!/bin/sh
 set -eu
 
-required="PUBLIC_HOST NGINX_RATE_LIMIT_API NGINX_RATE_LIMIT_AUTH NGINX_RATE_LIMIT_PUBLIC NGINX_RATE_LIMIT_POLLING NGINX_RATE_LIMIT_DOWNLOADS NGINX_RATE_LIMIT_BITRIX NGINX_RATE_LIMIT_WS NGINX_CLIENT_MAX_BODY_SIZE NGINX_MESSAGE_READ_TIMEOUT_SEC"
+required="PUBLIC_HOST NGINX_RATE_LIMIT_API NGINX_RATE_LIMIT_AUTH NGINX_RATE_LIMIT_PUBLIC NGINX_RATE_LIMIT_POLLING NGINX_RATE_LIMIT_DOWNLOADS NGINX_RATE_LIMIT_BITRIX NGINX_RATE_LIMIT_SMS_CALLBACK NGINX_RATE_LIMIT_WS NGINX_CLIENT_MAX_BODY_SIZE NGINX_MESSAGE_READ_TIMEOUT_SEC"
 for name in $required; do
   eval "value=\${$name:-}"
   if [ -z "$value" ]; then
@@ -24,7 +24,7 @@ if [ "${FRONTEND_DEV_PROXY_ENABLED:-false}" = "true" ] \
 fi
 
 umask 027
-common_vars='${NGINX_RATE_LIMIT_API} ${NGINX_RATE_LIMIT_AUTH} ${NGINX_RATE_LIMIT_PUBLIC} ${NGINX_RATE_LIMIT_POLLING} ${NGINX_RATE_LIMIT_DOWNLOADS} ${NGINX_RATE_LIMIT_BITRIX} ${NGINX_RATE_LIMIT_WS} ${NGINX_CLIENT_MAX_BODY_SIZE} ${EXPO_DEV_SERVER_HOSTPORT}'
+common_vars='${NGINX_RATE_LIMIT_API} ${NGINX_RATE_LIMIT_AUTH} ${NGINX_RATE_LIMIT_PUBLIC} ${NGINX_RATE_LIMIT_POLLING} ${NGINX_RATE_LIMIT_DOWNLOADS} ${NGINX_RATE_LIMIT_BITRIX} ${NGINX_RATE_LIMIT_SMS_CALLBACK} ${NGINX_RATE_LIMIT_WS} ${NGINX_CLIENT_MAX_BODY_SIZE} ${EXPO_DEV_SERVER_HOSTPORT}'
 site_vars='${PUBLIC_HOST} ${NGINX_TLS_CERTIFICATE} ${NGINX_TLS_CERTIFICATE_KEY} ${NGINX_MESSAGE_READ_TIMEOUT_SEC} ${BITRIX_FRAME_ANCESTORS}'
 security_vars='${NGINX_HSTS_MAX_AGE} ${S3_CONNECT_SRC}'
 

codebase/backend/nginx/templates/site-tls.conf.template

@@ -120,6 +120,20 @@ server {
         proxy_pass http://keycloak_upstream;
     }
 
+    location = /callbacks/idgtl/sms {
+        if ($request_method != POST) { return 405; }
+        allow 185.203.96.7;
+        deny all;
+        limit_req zone=sms_callbacks burst=30 nodelay;
+        client_max_body_size 256k;
+        proxy_buffering off;
+        proxy_cache off;
+        include /etc/nginx/snippets/proxy-common.conf;
+        proxy_read_timeout 15s;
+        proxy_pass http://sms_service_upstream;
+    }
+    location ^~ /callbacks/idgtl/ { return 404; }
+
     location = /bitrix/handler {
         limit_req zone=bitrix_callbacks burst=60 nodelay;
         include /etc/nginx/snippets/proxy-common.conf;