Allow users to access the internet (controlled endpoints)

[asalic]

Use nginx as a reverse proxy with a CONNECT plugin for TLS/SSL forwarding (like https://github.com/chobits/ngx_http_proxy_connect_module) and allowing only get requests to public repos such as docker, pip, maven etc.

Conf in nginx to filter http verbs should be like:

location /application {
    proxy_pass http://<host>;
    limit_except POST {
        deny all;
    }
}

## Below three pages should be served with GET & POST
location ~ ^/application/(RegisterServet|pd|LoginServlet)$ {
    proxy_pass http://<host>;
}