pi-ux-ce/Reverse_proxy_Nginx
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

✨ upgrade terraform files to prevent giutlab webui issues

Browse Source
This commit is contained in:
pi-ux-ce
2024-07-29 08:52:22 +01:00
parent 09c4d35c29
commit 0f6eb95f20
13 changed files with 166 additions and 194 deletions
Download Patch File Download Diff File Expand all files Collapse all files
conf.d/bitwarden.tryton.geeraert.eu.conf
+1 -5
View File
@@ -11,19 +11,15 @@ server {
server_name bitwarden.tryton.geeraert.eu www.bitwarden.tryton.geeraert.eu;
location / {
proxy_pass http://bitwarden_backend;
proxy_set_header Upgrade $http_upgrade;
}
location /.well-known/acme-challenge/ {
root /var/www/certbot;
}
http2 on;
ssl_protocols TLSv1.2;
listen 443 ssl;
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
conf.d/bookstack.tryton.geeraert.eu.conf
Regular → Executable
+1 -4
View File
@@ -11,6 +11,7 @@ server {
server_name bookstack.tryton.geeraert.eu www.bookstack.tryton.geeraert.eu;
location / {
proxy_pass http://bookstack_backend;
proxy_set_header Upgrade $http_upgrade;
location ~* \.(html|css|jpg|gif|ico|js)$ {
proxy_cache cache;
@@ -25,10 +26,6 @@ server {
root /var/www/certbot;
}
listen 443 ssl;
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
conf.d/django.tryton.geeraert.eu.conf
Regular → Executable
+1 -5
View File
@@ -11,6 +11,7 @@ server {
server_name django.tryton.geeraert.eu www.django.tryton.geeraert.eu;
location / {
proxy_pass http://django_backend;
proxy_set_header Upgrade $http_upgrade;
location ~* \.(html|css|jpg|gif|ico|js)$ {
proxy_cache cache;
@@ -25,13 +26,8 @@ server {
root /var/www/certbot;
}
http2 on;
ssl_protocols TLSv1.2;
listen 443 ssl;
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
conf.d/echo.tryton.geeraert.eu.conf
Regular → Executable
+1 -5
View File
@@ -11,6 +11,7 @@ server {
server_name echo.tryton.geeraert.eu www.echo.tryton.geeraert.eu;
location / {
proxy_pass http://echo_backend;
proxy_set_header Upgrade $http_upgrade;
location ~* \.(html|css|jpg|gif|ico|js)$ {
proxy_cache cache;
@@ -25,13 +26,8 @@ server {
root /var/www/certbot;
}
http2 on;
ssl_protocols TLSv1.2;
listen 443 ssl;
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
conf.d/gitlab.tryton.geeraert.eu.conf
+5 -11
View File
@@ -3,7 +3,7 @@
############################################
upstream gitlab_backend {
server webserver.gitlab.svc;
server webserver.gitlab.svc:443;
server 1.1.1.1 backup;
}
@@ -11,13 +11,14 @@ server {
server_name gitlab.tryton.geeraert.eu www.gitlab.tryton.geeraert.eu;
location / {
proxy_pass https://gitlab_backend;
proxy_set_header Upgrade $http_upgrade;
location ~* \.(html|css|jpg|gif|ico|js)$ {
proxy_cache cache;
proxy_cache_key $host$uri$is_args$args;
proxy_cache_valid 200 301 302 30m;
expires 30m;
proxy_pass https://gitlab_backend;
proxy_pass http://gitlab_backend;
}
}
@@ -25,18 +26,11 @@ server {
root /var/www/certbot;
}
client_max_body_size 20m;
proxy_request_buffering off;
client_max_body_size 20m;
proxy_request_buffering off;
http2 on;
ssl_protocols TLSv1.2;
listen 443 ssl;
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
conf.d/keycloak.tryton.geeraert.eu.conf
Regular → Executable
+2 -6
View File
@@ -11,22 +11,18 @@ server {
server_name keycloak.tryton.geeraert.eu www.keycloak.tryton.geeraert.eu;
location / {
proxy_pass http://keycloak_backend;
proxy_set_header Upgrade $http_upgrade;
}
location /.well-known/acme-challenge/ {
root /var/www/certbot;
}
set_real_ip_from 0.0.0.0/0;
real_ip_header X-Real-IP;
real_ip_recursive on;
listen 443 ssl;
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
conf.d/nextcloud.tryton.geeraert.eu.conf
+2 -7
View File
@@ -11,6 +11,7 @@ server {
server_name nextcloud.tryton.geeraert.eu www.nextcloud.tryton.geeraert.eu;
location / {
proxy_pass http://nextcloud_backend;
proxy_set_header Upgrade $http_upgrade;
location ~* \.(html|css|jpg|gif|ico|js)$ {
proxy_cache cache;
@@ -25,8 +26,7 @@ server {
root /var/www/certbot;
}
location /.well-known/carddav {
return 301 $scheme://$host/remote.php/dav;
@@ -41,13 +41,8 @@ server {
return 200 "<!DOCTYPE html><h2>health check</h2>\n";
}
http2 on;
ssl_protocols TLSv1.2;
listen 443 ssl;
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
conf.d/sonarr.tryton.geeraert.eu.conf
+1 -4
View File
@@ -11,16 +11,13 @@ server {
server_name sonarr.tryton.geeraert.eu www.sonarr.tryton.geeraert.eu;
location / {
proxy_pass http://sonarr_backend;
proxy_set_header Upgrade $http_upgrade;
}
location /.well-known/acme-challenge/ {
root /var/www/certbot;
}
listen 443 ssl;
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;