💥 add all the files

This commit is contained in:
2024-06-19 13:48:53 +01:00
commit 0ce409bcce
161 changed files with 3616 additions and 0 deletions
@@ -0,0 +1,45 @@
upstream bitwarden_backend {
# BITWARDEN SERVER DOCKER
# server 192.168.88.50:8080;
# NEW BITWARDEN SERVER kubernetes
server bitwarden-self-host-web.bitwarden-helm.svc:5000;
#bitwarden-self-host-admin.bitwarden.svc
# OLD BITWARDEN SERVER
# server 192.168.6.147;
server 1.1.1.1 backup;
}
server {
server_name bitwarden.tryton.geeraert.eu www.bitwarden.tryton.geeraert.eu;
location / {
proxy_pass http://bitwarden_backend;
}
listen 443 ssl; # managed by Certbot
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
}
server {
if ($host = www.bitwarden.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
if ($host = bitwarden.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
server_name www.bitwarden.tryton.geeraert.eu bitwarden.tryton.geeraert.eu;
listen 80;
return 404; # managed by Certbot
}
@@ -0,0 +1,44 @@
upstream bitwarden_backend {
# BITWARDEN SERVER DOCKER
server 192.168.88.50:8080;
# OLD BITWARDEN SERVER
# server 192.168.6.147;
server 1.1.1.1 backup;
}
server {
server_name bitwarden.tryton.geeraert.eu www.bitwarden.tryton.geeraert.eu;
location / {
proxy_pass http://bitwarden_backend;
}
location /.well-known/acme-challenge/ {
root /var/www/certbot;
}
listen 443 ssl; # managed by Certbot
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
}
server {
if ($host = www.bitwarden.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
if ($host = bitwarden.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
server_name www.bitwarden.tryton.geeraert.eu bitwarden.tryton.geeraert.eu;
listen 80;
return 404; # managed by Certbot
}
@@ -0,0 +1,76 @@
upstream bitwarden_kube_backend {
# BITWARDEN SERVER DOCKER
# server 192.168.88.50:8080;
# NEW BITWARDEN SERVER kubernetes
# server bitwarden-self-host-web.bitwarden-helm.svc:5000;
server nginx.bitwarden.svc:8080;
#bitwarden-self-host-admin.bitwarden-helm.svc
# OLD BITWARDEN SERVER
# server 192.168.6.147;
# server 1.1.1.1 backup;
}
server {
server_name bitwarden.tryton.geeraert.eu www.bitwarden.tryton.geeraert.eu;
location / {
proxy_pass http://bitwarden_kube_backend;
}
# location /api/ {
# proxy_pass http://bitwarden-self-host-api.bitwarden-helm.svc:5000;
#proxy_pass http://10.106.163.98:5000;
# }
# location /attachments/ {
# proxy_pass http://bitwarden-self-host-api.bitwarden-helm.svc:5000;
# }
# location /icons/ {
# proxy_pass http://bitwarden-self-host-icons.bitwarden-helm.svc:5000;
# }
# location /notifications/ {
# proxy_pass http://bitwarden-self-host-notifications.bitwarden-helm.svc:5000;
# }
# location /events/ {
# proxy_pass http://bitwarden-self-host-events.bitwarden-helm.svc:5000;
# }
# location /scim/ {
# proxy_pass http://bitwarden-self-host-scim.bitwarden-helm.svc:5000;
# }
# location /sso/ {
# proxy_pass http://bitwarden-self-host-sso.bitwarden-helm.svc:5000;
# }
# location /identity/ {
# proxy_pass http://bitwarden-self-host-identity.bitwarden-helm.svc:5000;
# }
# location /admin/ {
# proxy_pass http://bitwarden-self-host-admin.bitwarden-helm.svc:5000;
# }
location /.well-known/acme-challenge/ {
root /var/www/certbot;
}
listen 443 ssl; # managed by Certbot
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
}
server {
if ($host = www.bitwarden.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
if ($host = bitwarden.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
server_name www.bitwarden.tryton.geeraert.eu bitwarden.tryton.geeraert.eu;
listen 80;
return 404; # managed by Certbot
}
+40
View File
@@ -0,0 +1,40 @@
upstream bookstack_backend {
server webserver.bookstack.svc;
server 1.1.1.1 backup;
}
server {
server_name bookstack.tryton.geeraert.eu www.bookstack.tryton.geeraert.eu;
location / {
proxy_pass http://bookstack_backend;
}
location /.well-known/acme-challenge/ {
root /var/www/certbot;
}
listen 443 ssl; # managed by Certbot
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
}
server {
if ($host = www.bookstack.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
if ($host = bookstack.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
server_name www.bookstack.tryton.geeraert.eu bookstack.tryton.geeraert.eu;
listen 80;
return 404; # managed by Certbot
}
+17
View File
@@ -0,0 +1,17 @@
upstream camera_backend {
server 192.168.88.36;
server 1.1.1.1 backup;
}
server {
server_name camera.tryton.geeraert.eu www.camera.tryton.geeraert.eu;
location / {
proxy_pass http://camera_backend;
}
location /.well-known/acme-challenge/ {
root /var/www/certbot;
}
listen 80 ;
}
+1
View File
@@ -0,0 +1 @@
+18
View File
@@ -0,0 +1,18 @@
upstream echo_backend {
server echo-server.echo-server.svc:80;
#server 192.168.88.52:8080;
server 1.1.1.1 backup;
}
server {
server_name echo.tryton.geeraert.eu www.echo.tryton.geeraert.eu;
location / {
proxy_pass http://echo_backend;
}
location /.well-known/acme-challenge/ {
root /var/www/certbot;
}
listen 80 ;
}
+17
View File
@@ -0,0 +1,17 @@
upstream esp-home_backend {
server 192.168.88.50:6052;
server 1.1.1.1 backup;
}
server {
server_name esp-home.tryton.geeraert.eu www.esp-home.tryton.geeraert.eu;
location / {
proxy_pass http://esp-home_backend;
}
location /.well-known/acme-challenge/ {
root /var/www/certbot;
}
listen 80 ;
}
+48
View File
@@ -0,0 +1,48 @@
map $http_upgrade $connection_upgrade {
default upgrade;
'' close;
}
upstream firefox_backend {
server 192.168.88.52:32487;
server 1.1.1.1 backup;
}
server {
server_name firefox.tryton.geeraert.eu www.firefox.tryton.geeraert.eu;
location / {
proxy_pass https://firefox_backend;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $connection_upgrade;
proxy_set_header Host $host;
}
location /.well-known/acme-challenge/ {
root /var/www/certbot;
}
listen 443 ssl; # managed by Certbot
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
}
server {
if ($host = www.firefox.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
if ($host = firefox.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
server_name www.firefox.tryton.geeraert.eu firefox.tryton.geeraert.eu;
listen 80;
return 404; # managed by Certbot
}
+49
View File
@@ -0,0 +1,49 @@
upstream gitlab_backend {
#k8s pod
server webserver.gitlab.svc:443;
#server gitlab-nginx-ingress-controller.gitlab.svc;
#server gitlab-kas.gitlab.svc:8150;
#docker pod
#server 192.168.88.50:4887;
server 1.1.1.1 backup;
}
server {
server_name gitlab.tryton.geeraert.eu www.gitlab.tryton.geeraert.eu;
location / {
proxy_pass https://gitlab_backend;
proxy_set_header Upgrade $http_upgrade;
# proxy_set_header Connection "upgrade";
proxy_http_version 1.1;
}
location /.well-known/acme-challenge/ {
root /var/www/certbot;
}
listen 443 ssl; # managed by Certbot
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
proxy_request_buffering off;
#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
}
server {
if ($host = www.gitlab.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
if ($host = gitlab.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
server_name www.gitlab.tryton.geeraert.eu gitlab.tryton.geeraert.eu;
listen 80;
return 404; # managed by Certbot
}
@@ -0,0 +1,46 @@
upstream homeassistant_backend {
## docker server
# server 192.168.88.50:8123;
## K8S server
server homeassistant.homeassistant.svc:8123;
#server 192.168.88.52:30009;
server 1.1.1.1 backup;
}
server {
server_name homeassistant.tryton.geeraert.eu www.homeassistant.tryton.geeraert.eu;
location / {
proxy_pass http://homeassistant_backend;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
}
location /.well-known/acme-challenge/ {
root /var/www/certbot;
}
listen 443 ssl; # managed by Certbot
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
}
server {
if ($host = www.homeassistant.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
if ($host = homeassistant.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
server_name www.homeassistant.tryton.geeraert.eu homeassistant.tryton.geeraert.eu;
listen 80;
return 404; # managed by Certbot
}
@@ -0,0 +1,17 @@
upstream machinemanager_backend {
server 192.168.88.50:9050;
server 1.1.1.1 backup;
}
server {
server_name machinemanager.tryton.geeraert.eu www.machinemanager.tryton.geeraert.eu;
location / {
proxy_pass http://machinemanager_backend;
}
location /.well-known/acme-challenge/ {
root /var/www/certbot;
}
listen 80 ;
}
+17
View File
@@ -0,0 +1,17 @@
upstream mediawiki_backend {
server 192.168.49.2:30002;
server 1.1.1.1 backup;
}
server {
server_name mediawiki.tryton.geeraert.eu www.mediawiki.tryton.geeraert.eu;
location / {
proxy_pass http://mediawiki_backend;
}
location /.well-known/acme-challenge/ {
root /var/www/certbot;
}
listen 80 ;
}
+43
View File
@@ -0,0 +1,43 @@
upstream netdata_backend {
#kube server
server netdata-agent.netdata.svc:19999;
#old server
#server 192.168.88.50:19999;
server 1.1.1.1 backup;
}
server {
server_name netdata.tryton.geeraert.eu www.netdata.tryton.geeraert.eu;
location / {
proxy_pass http://netdata_backend;
}
location /.well-known/acme-challenge/ {
root /var/www/certbot;
}
listen 443 ssl; # managed by Certbot
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
}
server {
if ($host = www.netdata.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
if ($host = netdata.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
server_name www.netdata.tryton.geeraert.eu netdata.tryton.geeraert.eu;
listen 80;
return 404; # managed by Certbot
}
+81
View File
@@ -0,0 +1,81 @@
upstream nextcloud_backend {
# server 192.168.88.43; #IP of old tryton server (physical server)
# server 192.168.88.50:6456; #IP of the docker nextcloud install
server webserver.nextcloud.svc; #using svc dns name
# server 192.168.88.52:31236; #IP of the kubernetes #
# server 1.1.1.1 backup;
}
server {
server_name nextcloud.tryton.geeraert.eu www.nextcloud.tryton.geeraert.eu;
location / {
proxy_pass http://nextcloud_backend/;
# proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
# proxy_set_header X-Forwarded-Port $server_port;
# proxy_set_header X-Forwarded-Scheme $scheme;
# proxy_set_header X-Forwarded-Proto $scheme;
# proxy_set_header X-Real-IP $remote_addr;
# proxy_set_header Accept-Encoding "";
# proxy_set_header Host $host;
# client_body_buffer_size 512k;
# proxy_read_timeout 86400s;
# client_max_body_size 0;
# Websocket
# proxy_http_version 1.1;
# proxy_set_header Upgrade $http_upgrade;
# proxy_set_header Connection $connection_upgrade;
# proxy_pass_request_headers on;
# proxy_no_cache $cookie_nocache $arg_nocache$arg_comment;
# proxy_no_cache $http_pragma $http_authorization;
# proxy_cache_bypass $cookie_nocache $arg_nocache $arg_comment;
# proxy_cache_bypass $http_pragma $http_authorization;
# proxy_set_header HTTP_AUTHORIZATION $http_authorization;
}
location /.well-known/acme-challenge/ {
root /var/www/certbot;
}
location /.well-known/carddav {
return 301 $scheme://$host/remote.php/dav;
}
location /.well-known/caldav {
return 301 $scheme://$host/remote.php/dav;
}
location = /health {
default_type text/html;
return 200 "<!DOCTYPE html><h2>health check</h2>\n";
}
listen 443 ssl; # managed by Certbot
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
}
server {
if ($host = www.nextcloud.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
if ($host = nextcloud.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
server_name www.nextcloud.tryton.geeraert.eu nextcloud.tryton.geeraert.eu;
listen 80;
return 404; # managed by Certbot
}
@@ -0,0 +1,38 @@
upstream nextcloud_backend {
server 192.168.6.20;
server 1.1.1.1 backup;
}
server {
server_name nextcloud.tryton.geeraert.eu www.nextcloud.tryton.geeraert.eu;
location / {
proxy_pass http://nextcloud_backend;
}
location /.well-known/acme-challenge/ {
root /var/www/certbot;
}
listen 443 ssl; # managed by Certbot
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem; # managed by Certbot
# managed by Certbot
}
server {
if ($host = www.nextcloud.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
if ($host = nextcloud.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
server_name www.nextcloud.tryton.geeraert.eu nextcloud.tryton.geeraert.eu;
listen 80;
return 404; # managed by Certbot
}
+17
View File
@@ -0,0 +1,17 @@
upstream octoprint_backend {
server 192.168.1.28:5000;
server 1.1.1.1 backup;
}
server {
server_name octoprint.tryton.geeraert.eu www.octoprint.tryton.geeraert.eu;
location / {
proxy_pass http://octoprint_backend;
}
location /.well-known/acme-challenge/ {
root /var/www/certbot;
}
listen 80 ;
}
+21
View File
@@ -0,0 +1,21 @@
upstream onitama_backend {
server onitama.onitama.svc;
#kube server
#server 192.168.88.52:30007;
#docker server
#server 192.168.88.50:6780;
server 1.1.1.1 backup;
}
server {
server_name onitama.tryton.geeraert.eu www.onitama.tryton.geeraert.eu;
location / {
proxy_pass http://onitama_backend;
}
location /.well-known/acme-challenge/ {
root /var/www/certbot;
}
listen 80 ;
}
@@ -0,0 +1,40 @@
upstream opentrashmail_backend {
server opentrashmail.opentrashmail.svc;
server 1.1.1.1 backup;
}
server {
server_name opentrashmail.tryton.geeraert.eu www.opentrashmail.tryton.geeraert.eu;
location / {
proxy_pass http://opentrashmail_backend;
}
location /.well-known/acme-challenge/ {
root /var/www/certbot;
}
listen 443 ssl; # managed by Certbot
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
}
server {
if ($host = www.opentrashmail.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
if ($host = opentrashmail.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
server_name www.opentrashmail.tryton.geeraert.eu opentrashmail.tryton.geeraert.eu;
listen 80;
return 404; # managed by Certbot
}
@@ -0,0 +1,43 @@
upstream paperless-kube_backend {
#docker pod
server 192.168.88.50:4887;
#k8s pod
#server webserver.paperless.svc:8000;
server 1.1.1.1 backup;
}
server {
server_name paperless-docker.tryton.geeraert.eu www.paperless-docker.tryton.geeraert.eu;
location / {
proxy_pass http://paperless-kube_backend;
}
location /.well-known/acme-challenge/ {
root /var/www/certbot;
}
listen 443 ssl; # managed by Certbot
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
}
server {
if ($host = www.paperless-kube.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
if ($host = paperless-kube.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
server_name www.paperless-kube.tryton.geeraert.eu paperless-kube.tryton.geeraert.eu;
listen 80;
return 404; # managed by Certbot
}
+43
View File
@@ -0,0 +1,43 @@
upstream paperless_backend {
#k8s pod
server webserver.paperless.svc:8000;
#docker pod
#server 192.168.88.50:4887;
server 1.1.1.1 backup;
}
server {
server_name paperless.tryton.geeraert.eu www.paperless.tryton.geeraert.eu;
location / {
proxy_pass http://paperless_backend;
}
location /.well-known/acme-challenge/ {
root /var/www/certbot;
}
listen 443 ssl; # managed by Certbot
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
}
server {
if ($host = www.paperless.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
if ($host = paperless.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
server_name www.paperless.tryton.geeraert.eu paperless.tryton.geeraert.eu;
listen 80;
return 404; # managed by Certbot
}
+17
View File
@@ -0,0 +1,17 @@
upstream pihole_backend {
server 172.16.0.60:8081;
server 1.1.1.1 backup;
}
server {
server_name pihole.tryton.geeraert.eu www.pihole.tryton.geeraert.eu;
location / {
proxy_pass http://pihole_backend;
}
location /.well-known/acme-challenge/ {
root /var/www/certbot;
}
listen 80 ;
}
+41
View File
@@ -0,0 +1,41 @@
upstream portainer_backend {
server portainer.portainer.svc;
# server 192.168.88.50:9000;
server 1.1.1.1 backup;
}
server {
server_name portainer.tryton.geeraert.eu www.portainer.tryton.geeraert.eu;
location / {
proxy_pass http://portainer_backend;
}
location /.well-known/acme-challenge/ {
root /var/www/certbot;
}
listen 443 ssl; # managed by Certbot
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
}
server {
if ($host = www.portainer.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
if ($host = portainer.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
server_name www.portainer.tryton.geeraert.eu portainer.tryton.geeraert.eu;
listen 80;
return 404; # managed by Certbot
}
@@ -0,0 +1,40 @@
upstream portainer_backend {
server localhost:9000;
server 1.1.1.1 backup;
}
server {
server_name portainer.tryton.geeraert.eu www.portainer.tryton.geeraert.eu;
location / {
proxy_pass http://portainer_backend;
}
location /.well-known/acme-challenge/ {
root /var/www/certbot;
}
listen 443 ssl; # managed by Certbot
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
# managed by Certbot
# managed by Certbot
}
server {
if ($host = www.portainer.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
if ($host = portainer.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
server_name www.portainer.tryton.geeraert.eu portainer.tryton.geeraert.eu;
listen 80;
return 404; # managed by Certbot
}
+45
View File
@@ -0,0 +1,45 @@
upstream prowlarr_backend {
server prowlarr.servarr.svc;
# server 192.168.88.52:31884;
# server 1.1.1.1 ;
#backup;
}
server {
server_name prowlarr.tryton.geeraert.eu www.prowlarr.tryton.geeraert.eu;
location / {
proxy_pass http://prowlarr_backend;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $connection_upgrade;
}
location /.well-known/acme-challenge/ {
root /var/www/certbot;
}
listen 443 ssl; # managed by Certbot
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
}
server {
if ($host = www.prowlarr.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
if ($host = prowlarr.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
server_name www.prowlarr.tryton.geeraert.eu prowlarr.tryton.geeraert.eu;
listen 80;
return 404; # managed by Certbot
}
@@ -0,0 +1,40 @@
upstream proxmox_backend {
server 192.168.6.2:8006;
server 1.1.1.1 backup;
}
server {
server_name proxmox.tryton.geeraert.eu www.proxmox.tryton.geeraert.eu;
location / {
proxy_pass https://proxmox_backend;
}
location /.well-known/acme-challenge/ {
root /var/www/certbot;
}
listen 443 ssl; # managed by Certbot
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
# managed by Certbot
# managed by Certbot
}
server {
if ($host = www.proxmox.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
if ($host = proxmox.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
server_name www.proxmox.tryton.geeraert.eu proxmox.tryton.geeraert.eu;
listen 80;
return 404; # managed by Certbot
}
@@ -0,0 +1,41 @@
upstream qbittorrent_backend {
server qbittorrent.servarr.svc:8080;
# server 192.168.88.52:30302;
server 1.1.1.1 backup;
}
server {
server_name qbittorrent.tryton.geeraert.eu www.qbittorrent.tryton.geeraert.eu;
location / {
proxy_pass http://qbittorrent_backend;
}
location /.well-known/acme-challenge/ {
root /var/www/certbot;
}
listen 443 ssl; # managed by Certbot
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
}
server {
if ($host = www.qbittorrent.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
if ($host = qbittorrent.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
server_name www.qbittorrent.tryton.geeraert.eu qbittorrent.tryton.geeraert.eu;
listen 80;
return 404; # managed by Certbot
}
+45
View File
@@ -0,0 +1,45 @@
upstream radarr_backend {
server radarr.servarr.svc;
# server 192.168.88.50:7878;
server 192.168.88.52:31084;
server 1.1.1.1 backup;
}
server {
server_name radarr.tryton.geeraert.eu www.radarr.tryton.geeraert.eu;
location / {
proxy_pass http://radarr_backend;
}
location /.well-known/acme-challenge/ {
root /var/www/certbot;
}
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $http_connection;
listen 443 ssl; # managed by Certbot
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
}
server {
if ($host = www.radarr.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
if ($host = radarr.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
server_name www.radarr.tryton.geeraert.eu radarr.tryton.geeraert.eu;
listen 80;
return 404; # managed by Certbot
}
+19
View File
@@ -0,0 +1,19 @@
upstream reverse_proxy_backend {
server 192.168.88.50:8888;
server 1.1.1.1 backup;
}
server {
server_name reverse.tryton.geeraert.eu www.reverse.tryton.geeraert.eu;
location / {
proxy_pass http://reverse_proxy_backend;
auth_basic "Restricted Content";
auth_basic_user_file /var/www/authentication/htpasswd;
}
location /.well-known/acme-challenge/ {
root /var/www/certbot;
}
listen 80 ;
}
+40
View File
@@ -0,0 +1,40 @@
upstream router_backend {
server 192.168.88.1;
server 1.1.1.1 backup;
}
server {
server_name router.tryton.geeraert.eu www.router.tryton.geeraert.eu;
location / {
proxy_pass http://router_backend;
}
location /.well-known/acme-challenge/ {
root /var/www/certbot;
}
listen 443 ssl; # managed by Certbot
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
}
server {
if ($host = www.router.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
if ($host = router.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
server_name www.router.tryton.geeraert.eu router.tryton.geeraert.eu;
listen 80;
return 404; # managed by Certbot
}
+42
View File
@@ -0,0 +1,42 @@
upstream sickchill_backend {
server sickchill.servarr.svc;
# server 192.168.88.52:30865;
# server 192.168.88.50:8081;
server 1.1.1.1 backup;
}
server {
server_name sickchill.tryton.geeraert.eu www.sickchill.tryton.geeraert.eu;
location / {
proxy_pass http://sickchill_backend;
}
location /.well-known/acme-challenge/ {
root /var/www/certbot;
}
listen 443 ssl; # managed by Certbot
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
}
server {
if ($host = www.sickchill.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
if ($host = sickchill.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
server_name www.sickchill.tryton.geeraert.eu sickchill.tryton.geeraert.eu;
listen 80;
return 404; # managed by Certbot
}
@@ -0,0 +1,40 @@
upstream app_backend {
server 10.0.0.3:7777;
server 1.1.1.1 backup;
}
server {
server_name app.tryton.geeraert.eu www.app.tryton.geeraert.eu;
location / {
proxy_pass http://app_backend;
}
location /.well-known/acme-challenge/ {
root /var/www/certbot;
}
listen 443 ssl; # managed by Certbot
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
}
server {
if ($host = www.app.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
if ($host = app.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
server_name www.app.tryton.geeraert.eu app.tryton.geeraert.eu;
listen 80;
return 404; # managed by Certbot
}
+41
View File
@@ -0,0 +1,41 @@
upstream sonarr_backend {
server sonarr.servarr.svc;
# server 192.168.88.52:9080;
server 1.1.1.1 backup;
}
server {
server_name sonarr.tryton.geeraert.eu www.sonarr.tryton.geeraert.eu;
location / {
proxy_pass http://sonarr_backend;
}
location /.well-known/acme-challenge/ {
root /var/www/certbot;
}
listen 443 ssl; # managed by Certbot
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
}
server {
if ($host = www.sonarr.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
if ($host = sonarr.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
server_name www.sonarr.tryton.geeraert.eu sonarr.tryton.geeraert.eu;
listen 80;
return 404; # managed by Certbot
}
@@ -0,0 +1,40 @@
upstream transmission_backend {
server 192.168.88.52:31091;
server 1.1.1.1 backup;
}
server {
server_name transmission.tryton.geeraert.eu www.transmission.tryton.geeraert.eu;
location / {
proxy_pass http://transmission_backend;
}
location /.well-known/acme-challenge/ {
root /var/www/certbot;
}
listen 443 ssl; # managed by Certbot
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
}
server {
if ($host = www.transmission.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
if ($host = transmission.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
server_name www.transmission.tryton.geeraert.eu transmission.tryton.geeraert.eu;
listen 80;
return 404; # managed by Certbot
}
+40
View File
@@ -0,0 +1,40 @@
upstream unifi-inform_backend {
server 192.168.88.50:8082;
server 1.1.1.1 backup;
}
server {
server_name unifi-inform.tryton.geeraert.eu www.unifi-inform.tryton.geeraert.eu;
location / {
proxy_pass http://unifi-inform_backend;
}
location /.well-known/acme-challenge/ {
root /var/www/certbot;
}
listen 443 ssl; # managed by Certbot
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
}
server {
if ($host = www.unifi-inform.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
if ($host = unifi-inform.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
server_name www.unifi-inform.tryton.geeraert.eu unifi-inform.tryton.geeraert.eu;
listen 80;
return 404; # managed by Certbot
}
+40
View File
@@ -0,0 +1,40 @@
upstream unifi_controller_backend {
server 192.168.88.52:31043;
server 1.1.1.1 backup;
}
server {
server_name unifi.tryton.geeraert.eu www.unifi.tryton.geeraert.eu;
location / {
proxy_pass https://unifi_controller_backend;
}
location /.well-known/acme-challenge/ {
root /var/www/certbot;
}
listen 443 ssl; # managed by Certbot
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
}
server {
if ($host = www.unifi.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
if ($host = unifi.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
server_name www.unifi.tryton.geeraert.eu unifi.tryton.geeraert.eu;
listen 80;
return 404; # managed by Certbot
}
+12
View File
@@ -0,0 +1,12 @@
server {
server_name watchower.tryton.geeraert.eu www.watchower.tryton.geeraert.eu;
location / {
proxy_pass http://192.168.88.50:53682/auth?state=9erJkbDsEOg-Lh0mkQZe3Q;
}
location /.well-known/acme-challenge/ {
root /var/www/certbot;
}
listen 80 ;
}