diff --git a/Nginx.kube.yaml b/Nginx.kube.yaml index af14bf4..58ef594 100644 --- a/Nginx.kube.yaml +++ b/Nginx.kube.yaml @@ -51,10 +51,10 @@ spec: mountPath: /etc/nginx/geoip.d/ - name: blacklisted-memory-volume mountPath: /etc/nginx/blacklisted.memory.d/ + - name: reverse-proxy-ssl mountPath: /etc/nginx/ssl/ - - name: reverse-proxy-ssl-root - mountPath: /etc/nginx/sslroot/ + - mountPath: /etc/nginx/ name: nginx-configfile - name: proxy-cache-path-volume @@ -108,10 +108,10 @@ spec: - name: reverse-proxy-log persistentVolumeClaim: claimName: reverse-proxy-log +# - name: reverse-proxy-ssl +# hostPath: +# path: /opt/kubernetes/Reverse_proxy_Nginx/certbot/conf/ - name: reverse-proxy-ssl - hostPath: - path: /opt/kubernetes/Reverse_proxy_Nginx/certbot/conf/ - - name: reverse-proxy-ssl-root persistentVolumeClaim: claimName: reverse-proxy-ssl - name: nginx-configfile diff --git a/nginx-config.configmap.yaml b/nginx-config.configmap.yaml index c903e9d..7feb5d1 100644 --- a/nginx-config.configmap.yaml +++ b/nginx-config.configmap.yaml @@ -22,8 +22,8 @@ data: blocked_fmt '$http_host \\t $remote_addr - [$time_local] '\n\t\t'Blocked Country: $geoip2_data_country_iso_code '\n '\"$request\" $status';\n\n\tlog_format deny_style 'deny $remote_addr; #$geoip2_data_city_name $geoip2_data_country_name';\n\n\tserver - {\n\tlisten 80;\n listen 443 default ssl;\n\tssl_certificate /etc/nginx/ssl/live/default.tryton.geeraert.eu/fullchain.pem; - # managed by$\n ssl_certificate_key /etc/nginx/ssl/live/default.tryton.geeraert.eu/privkey.pem; + {\n\tlisten 80;\n listen 443 default ssl;\n\tssl_certificate /etc/nginx/ssl/live/geeraert.eu/fullchain.pem; + # managed by$\n ssl_certificate_key /etc/nginx/ssl/live/geeraert.eu/privkey.pem; # managed $\n location / {\n proxy_pass http://1.1.1.1;\n \ proxy_redirect off;\n proxy_set_header Host $host;\n \ proxy_set_header X-Real-IP $remote_addr;\n proxy_set_header diff --git a/nginx.conf b/nginx.conf index 12bc9d2..83ffd28 100755 --- a/nginx.conf +++ b/nginx.conf @@ -41,8 +41,8 @@ http { server { listen 80; listen 443 default ssl; - ssl_certificate /etc/nginx/ssl/live/default.tryton.geeraert.eu/fullchain.pem; # managed by$ - ssl_certificate_key /etc/nginx/ssl/live/default.tryton.geeraert.eu/privkey.pem; # managed $ + ssl_certificate /etc/nginx/ssl/live/geeraert.eu/fullchain.pem; # managed by$ + ssl_certificate_key /etc/nginx/ssl/live/geeraert.eu/privkey.pem; # managed $ location / { proxy_pass http://1.1.1.1; proxy_redirect off; diff --git a/terraform/nginx_config.tftpl b/terraform/nginx_config.tftpl index 560b10f..f3a6893 100644 --- a/terraform/nginx_config.tftpl +++ b/terraform/nginx_config.tftpl @@ -163,8 +163,8 @@ server { listen 80; %{~ endif ~} - ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem; - ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem; + ssl_certificate /etc/nginx/ssl/live/geeraert.eu/fullchain.pem; + ssl_certificate_key /etc/nginx/ssl/live/geeraert.eu/privkey.pem; diff --git a/terraform/terraform.tfstate b/terraform/terraform.tfstate index ad9aa6e..1d4a6e5 100644 --- a/terraform/terraform.tfstate +++ b/terraform/terraform.tfstate @@ -1,7 +1,7 @@ { "version": 4, "terraform_version": "1.14.4", - "serial": 1623, + "serial": 1625, "lineage": "a36de74c-83f8-01fe-0504-92c54a21d49e", "outputs": { "Nginx_status": { @@ -21,32 +21,32 @@ "attributes": { "binary_data": {}, "data": { - "bitwarden.conf": "############################################\n# config file for bitwarden\n############################################\n\nupstream bitwarden_backend {\n server bitwarden-nginx-svc.bitwarden.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name bitwarden.tryton.geeraert.eu www.bitwarden.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://bitwarden_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.bitwarden.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = bitwarden.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.bitwarden.tryton.geeraert.eu bitwarden.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for bitwarden\n############################################\n\nupstream bitwarden_backend_root {\n server bitwarden-nginx-svc.bitwarden.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name bitwarden.geeraert.eu www.bitwarden.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://bitwarden_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.bitwarden.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = bitwarden.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.bitwarden.geeraert.eu bitwarden.geeraert.eu ;\n listen 80;\n return 404;\n\n}", - "django-testing.conf": "############################################\n# config file for django-testing\n############################################\n\nupstream django-testing_backend {\n server django-testing-svc.django-testing.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name django-testing.tryton.geeraert.eu www.django-testing.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://django-testing_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://django-testing_backend;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.django-testing.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = django-testing.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.django-testing.tryton.geeraert.eu django-testing.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for django-testing\n############################################\n\nupstream django-testing_backend_root {\n server django-testing-svc.django-testing.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name django-testing.geeraert.eu www.django-testing.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://django-testing_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://django-testing_backend_root;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.django-testing.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = django-testing.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.django-testing.geeraert.eu django-testing.geeraert.eu ;\n listen 80;\n return 404;\n\n}", - "django.conf": "############################################\n# config file for django\n############################################\n\nupstream django_backend {\n server django-svc.django:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name django.tryton.geeraert.eu www.django.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://django_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://django_backend;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.django.tryton.geeraert.eu django.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for django\n############################################\n\nupstream django_backend_root {\n server django-svc.django:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name django.geeraert.eu www.django.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://django_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://django_backend_root;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.django.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = django.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.django.geeraert.eu django.geeraert.eu ;\n listen 80;\n return 404;\n\n}", - "gitea.conf": "############################################\n# config file for gitea\n############################################\n\nupstream gitea_backend {\n server webserver.gitea.svc:3000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name gitea.tryton.geeraert.eu www.gitea.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://gitea_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.gitea.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = gitea.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.gitea.tryton.geeraert.eu gitea.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for gitea\n############################################\n\nupstream gitea_backend_root {\n server webserver.gitea.svc:3000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name gitea.geeraert.eu www.gitea.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://gitea_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.gitea.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = gitea.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.gitea.geeraert.eu gitea.geeraert.eu ;\n listen 80;\n return 404;\n\n}", - "immich.conf": "############################################\n# config file for immich\n############################################\n\nupstream immich_backend {\n server immich-svc.immich.svc:2283;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name immich.tryton.geeraert.eu www.immich.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://immich_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n proxy_set_header X-Forwarded-Proto $scheme;\n proxy_read_timeout 60000s;\n\n\n #adding websocket , usefull for reverse proxy\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_cache_bypass $http_upgrade;\n #end of working\n\n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.immich.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = immich.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.immich.tryton.geeraert.eu immich.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for immich\n############################################\n\nupstream immich_backend_root {\n server immich-svc.immich.svc:2283;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name immich.geeraert.eu www.immich.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://immich_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n proxy_set_header X-Forwarded-Proto $scheme;\n proxy_read_timeout 60000s;\n\n\n #adding websocket , usefull for reverse proxy\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_cache_bypass $http_upgrade;\n #end of working\n\n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.immich.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = immich.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.immich.geeraert.eu immich.geeraert.eu ;\n listen 80;\n return 404;\n\n}", - "jellyfin.conf": "############################################\n# config file for jellyfin\n############################################\n\nupstream jellyfin_backend {\n server jellyfin-svc.jellyfin.svc:8096;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name jellyfin.tryton.geeraert.eu www.jellyfin.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://jellyfin_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.jellyfin.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = jellyfin.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.jellyfin.tryton.geeraert.eu jellyfin.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for jellyfin\n############################################\n\nupstream jellyfin_backend_root {\n server jellyfin-svc.jellyfin.svc:8096;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name jellyfin.geeraert.eu www.jellyfin.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://jellyfin_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.jellyfin.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = jellyfin.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.jellyfin.geeraert.eu jellyfin.geeraert.eu ;\n listen 80;\n return 404;\n\n}", - "job-testing.conf": "############################################\n# config file for job-testing\n############################################\n\nupstream job-testing_backend {\n server django-testing-svc.django-testing.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name job-testing.tryton.geeraert.eu www.job-testing.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://job-testing_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://job-testing_backend;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.job-testing.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = job-testing.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.job-testing.tryton.geeraert.eu job-testing.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for job-testing\n############################################\n\nupstream job-testing_backend_root {\n server django-testing-svc.django-testing.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name job-testing.geeraert.eu www.job-testing.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://job-testing_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://job-testing_backend_root;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.job-testing.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = job-testing.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.job-testing.geeraert.eu job-testing.geeraert.eu ;\n listen 80;\n return 404;\n\n}", - "nextcloud.conf": "############################################\n# config file for nextcloud\n############################################\n\nupstream nextcloud_backend {\n server webserver.nextcloud.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name nextcloud.tryton.geeraert.eu www.nextcloud.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://nextcloud_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://nextcloud_backend;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n location /.well-known/carddav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location /.well-known/caldav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location = /health {\n default_type text/html;\n return 200 \"\u003c!DOCTYPE html\u003e\u003ch2\u003ehealth check\u003c/h2\u003e\\n\";\n }\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.nextcloud.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = nextcloud.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.nextcloud.tryton.geeraert.eu nextcloud.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for nextcloud\n############################################\n\nupstream nextcloud_backend_root {\n server webserver.nextcloud.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name nextcloud.geeraert.eu www.nextcloud.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://nextcloud_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://nextcloud_backend_root;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n location /.well-known/carddav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location /.well-known/caldav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location = /health {\n default_type text/html;\n return 200 \"\u003c!DOCTYPE html\u003e\u003ch2\u003ehealth check\u003c/h2\u003e\\n\";\n }\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.nextcloud.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = nextcloud.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.nextcloud.geeraert.eu nextcloud.geeraert.eu ;\n listen 80;\n return 404;\n\n}", - "octoprint.conf": "############################################\n# config file for octoprint\n############################################\n\nupstream octoprint_backend {\n server 192.168.1.28:5000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name octoprint.tryton.geeraert.eu www.octoprint.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://octoprint_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.octoprint.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = octoprint.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.octoprint.tryton.geeraert.eu octoprint.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for octoprint\n############################################\n\nupstream octoprint_backend_root {\n server 192.168.1.28:5000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name octoprint.geeraert.eu www.octoprint.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://octoprint_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.octoprint.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = octoprint.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.octoprint.geeraert.eu octoprint.geeraert.eu ;\n listen 80;\n return 404;\n\n}", - "openmediavault.conf": "############################################\n# config file for openmediavault\n############################################\n\nupstream openmediavault_backend {\n server 192.168.88.29;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name openmediavault.tryton.geeraert.eu www.openmediavault.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://openmediavault_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.openmediavault.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = openmediavault.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.openmediavault.tryton.geeraert.eu openmediavault.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for openmediavault\n############################################\n\nupstream openmediavault_backend_root {\n server 192.168.88.29;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name openmediavault.geeraert.eu www.openmediavault.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://openmediavault_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.openmediavault.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = openmediavault.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.openmediavault.geeraert.eu openmediavault.geeraert.eu ;\n listen 80;\n return 404;\n\n}", - "paperless.conf": "############################################\n# config file for paperless\n############################################\n\nupstream paperless_backend {\n server paperless-svc.paperless.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name paperless.tryton.geeraert.eu www.paperless.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://paperless_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.paperless.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = paperless.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.paperless.tryton.geeraert.eu paperless.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for paperless\n############################################\n\nupstream paperless_backend_root {\n server paperless-svc.paperless.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name paperless.geeraert.eu www.paperless.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://paperless_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.paperless.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = paperless.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.paperless.geeraert.eu paperless.geeraert.eu ;\n listen 80;\n return 404;\n\n}", - "pihole.conf": "############################################\n# config file for pihole\n############################################\n\nupstream pihole_backend {\n server web.piholenew.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name pihole.tryton.geeraert.eu www.pihole.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://pihole_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.pihole.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = pihole.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.pihole.tryton.geeraert.eu pihole.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for pihole\n############################################\n\nupstream pihole_backend_root {\n server web.piholenew.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name pihole.geeraert.eu www.pihole.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://pihole_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.pihole.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = pihole.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.pihole.geeraert.eu pihole.geeraert.eu ;\n listen 80;\n return 404;\n\n}", - "portainer.conf": "############################################\n# config file for portainer\n############################################\n\nupstream portainer_backend {\n server portainer.portainer.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name portainer.tryton.geeraert.eu www.portainer.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://portainer_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.portainer.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = portainer.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.portainer.tryton.geeraert.eu portainer.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for portainer\n############################################\n\nupstream portainer_backend_root {\n server portainer.portainer.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name portainer.geeraert.eu www.portainer.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://portainer_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.portainer.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = portainer.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.portainer.geeraert.eu portainer.geeraert.eu ;\n listen 80;\n return 404;\n\n}", - "prowlarr.conf": "############################################\n# config file for prowlarr\n############################################\n\nupstream prowlarr_backend {\n server prowlarr-svc.servarr.svc:9696;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name prowlarr.tryton.geeraert.eu www.prowlarr.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://prowlarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.prowlarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = prowlarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.prowlarr.tryton.geeraert.eu prowlarr.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for prowlarr\n############################################\n\nupstream prowlarr_backend_root {\n server prowlarr-svc.servarr.svc:9696;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name prowlarr.geeraert.eu www.prowlarr.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://prowlarr_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.prowlarr.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = prowlarr.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.prowlarr.geeraert.eu prowlarr.geeraert.eu ;\n listen 80;\n return 404;\n\n}", - "qbittorrent.conf": "############################################\n# config file for qbittorrent\n############################################\n\nupstream qbittorrent_backend {\n server qbittorrent-svc.servarr.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name qbittorrent.tryton.geeraert.eu www.qbittorrent.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://qbittorrent_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.qbittorrent.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = qbittorrent.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.qbittorrent.tryton.geeraert.eu qbittorrent.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for qbittorrent\n############################################\n\nupstream qbittorrent_backend_root {\n server qbittorrent-svc.servarr.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name qbittorrent.geeraert.eu www.qbittorrent.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://qbittorrent_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.qbittorrent.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = qbittorrent.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.qbittorrent.geeraert.eu qbittorrent.geeraert.eu ;\n listen 80;\n return 404;\n\n}", - "radarr.conf": "############################################\n# config file for radarr\n############################################\n\nupstream radarr_backend {\n server radarr-svc.servarr.svc:7878;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name radarr.tryton.geeraert.eu www.radarr.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://radarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.radarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = radarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.radarr.tryton.geeraert.eu radarr.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for radarr\n############################################\n\nupstream radarr_backend_root {\n server radarr-svc.servarr.svc:7878;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name radarr.geeraert.eu www.radarr.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://radarr_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.radarr.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = radarr.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.radarr.geeraert.eu radarr.geeraert.eu ;\n listen 80;\n return 404;\n\n}", - "redirect-testing.conf": "############################################\n# config file for redirect-testing\n############################################\n\nupstream redirect-testing_backend {\n server django-testing-svc.django-testing.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name redirect-testing.tryton.geeraert.eu www.redirect-testing.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://redirect-testing_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://redirect-testing_backend;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.redirect-testing.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = redirect-testing.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.redirect-testing.tryton.geeraert.eu redirect-testing.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for redirect-testing\n############################################\n\nupstream redirect-testing_backend_root {\n server django-testing-svc.django-testing.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name redirect-testing.geeraert.eu www.redirect-testing.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://redirect-testing_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://redirect-testing_backend_root;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.redirect-testing.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = redirect-testing.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.redirect-testing.geeraert.eu redirect-testing.geeraert.eu ;\n listen 80;\n return 404;\n\n}", - "redirect.conf": "############################################\n# config file for redirect\n############################################\n\nupstream redirect_backend {\n server django-svc.django:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name redirect.tryton.geeraert.eu www.redirect.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://redirect_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://redirect_backend;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.redirect.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = redirect.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.redirect.tryton.geeraert.eu redirect.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for redirect\n############################################\n\nupstream redirect_backend_root {\n server django-svc.django:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name redirect.geeraert.eu www.redirect.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://redirect_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://redirect_backend_root;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.redirect.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = redirect.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.redirect.geeraert.eu redirect.geeraert.eu ;\n listen 80;\n return 404;\n\n}", - "reverse.conf": "############################################\n# config file for reverse\n############################################\n\nupstream reverse_backend {\n server django-svc.django:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name reverse.tryton.geeraert.eu www.reverse.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://reverse_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://reverse_backend;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.reverse.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = reverse.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.reverse.tryton.geeraert.eu reverse.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for reverse\n############################################\n\nupstream reverse_backend_root {\n server django-svc.django:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name reverse.geeraert.eu www.reverse.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://reverse_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://reverse_backend_root;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.reverse.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = reverse.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.reverse.geeraert.eu reverse.geeraert.eu ;\n listen 80;\n return 404;\n\n}", - "router.conf": "############################################\n# config file for router\n############################################\n\nupstream router_backend {\n server 192.168.88.1;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name router.tryton.geeraert.eu www.router.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://router_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n auth_basic \"Administrator’s Area\";\n auth_basic_user_file /authentication-htpasswd/.htpasswd;\n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.router.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = router.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.router.tryton.geeraert.eu router.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for router\n############################################\n\nupstream router_backend_root {\n server 192.168.88.1;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name router.geeraert.eu www.router.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://router_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n auth_basic \"Administrator’s Area\";\n auth_basic_user_file /authentication-htpasswd/.htpasswd;\n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.router.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = router.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.router.geeraert.eu router.geeraert.eu ;\n listen 80;\n return 404;\n\n}", - "sonarr.conf": "############################################\n# config file for sonarr\n############################################\n\nupstream sonarr_backend {\n server sonarr-svc.servarr.svc:8989;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name sonarr.tryton.geeraert.eu www.sonarr.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://sonarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.sonarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = sonarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.sonarr.tryton.geeraert.eu sonarr.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for sonarr\n############################################\n\nupstream sonarr_backend_root {\n server sonarr-svc.servarr.svc:8989;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name sonarr.geeraert.eu www.sonarr.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://sonarr_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.sonarr.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = sonarr.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.sonarr.geeraert.eu sonarr.geeraert.eu ;\n listen 80;\n return 404;\n\n}", - "stash.conf": "############################################\n# config file for stash\n############################################\n\nupstream stash_backend {\n server stash-svc.stash.svc:9999;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name stash.tryton.geeraert.eu www.stash.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://stash_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n #don't use this as this needs to be run as root or have the CAP_NET_RAW capability) to bind to a non-local IP address.\n #Because the backend thinks the request is coming directly from the client, it will try to send the response directly back to that client IP. To prevent this (which would break the connection), you must force the response back through the NGINX server.\n #proxy_bind $remote_addr transparent;\n\n##used to be working\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n proxy_set_header X-Forwarded-Proto $scheme;\n proxy_read_timeout 60000s;\n #working\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_cache_bypass $http_upgrade;\n #end of working\n\n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.stash.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = stash.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.stash.tryton.geeraert.eu stash.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for stash\n############################################\n\nupstream stash_backend_root {\n server stash-svc.stash.svc:9999;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name stash.geeraert.eu www.stash.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://stash_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n #don't use this as this needs to be run as root or have the CAP_NET_RAW capability) to bind to a non-local IP address.\n #Because the backend thinks the request is coming directly from the client, it will try to send the response directly back to that client IP. To prevent this (which would break the connection), you must force the response back through the NGINX server.\n #proxy_bind $remote_addr transparent;\n\n##used to be working\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n proxy_set_header X-Forwarded-Proto $scheme;\n proxy_read_timeout 60000s;\n #working\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_cache_bypass $http_upgrade;\n #end of working\n\n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.stash.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = stash.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.stash.geeraert.eu stash.geeraert.eu ;\n listen 80;\n return 404;\n\n}", - "synology.conf": "############################################\n# config file for synology\n############################################\n\nupstream synology_backend {\n server 192.168.88.39:5000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name synology.tryton.geeraert.eu www.synology.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://synology_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.synology.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = synology.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.synology.tryton.geeraert.eu synology.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for synology\n############################################\n\nupstream synology_backend_root {\n server 192.168.88.39:5000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name synology.geeraert.eu www.synology.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://synology_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.synology.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = synology.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.synology.geeraert.eu synology.geeraert.eu ;\n listen 80;\n return 404;\n\n}", - "unifi-inform.conf": "############################################\n# config file for unifi-inform\n############################################\n\nupstream unifi-inform_backend {\n server 192.168.88.50:8082;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name unifi-inform.tryton.geeraert.eu www.unifi-inform.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://unifi-inform_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.unifi-inform.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = unifi-inform.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.unifi-inform.tryton.geeraert.eu unifi-inform.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for unifi-inform\n############################################\n\nupstream unifi-inform_backend_root {\n server 192.168.88.50:8082;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name unifi-inform.geeraert.eu www.unifi-inform.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://unifi-inform_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.unifi-inform.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = unifi-inform.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.unifi-inform.geeraert.eu unifi-inform.geeraert.eu ;\n listen 80;\n return 404;\n\n}", - "unifi.conf": "############################################\n# config file for unifi\n############################################\n\nupstream unifi_backend {\n server 192.168.88.244:8443;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name unifi.tryton.geeraert.eu www.unifi.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass https://unifi_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.unifi.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = unifi.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.unifi.tryton.geeraert.eu unifi.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for unifi\n############################################\n\nupstream unifi_backend_root {\n server 192.168.88.244:8443;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name unifi.geeraert.eu www.unifi.geeraert.eu;\n\t\n\n location / {\n proxy_pass https://unifi_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.unifi.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = unifi.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.unifi.geeraert.eu unifi.geeraert.eu ;\n listen 80;\n return 404;\n\n}", - "wikijs.conf": "############################################\n# config file for wikijs\n############################################\n\nupstream wikijs_backend {\n server wikijs-svc.wikijs.svc:3000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name wikijs.tryton.geeraert.eu www.wikijs.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://wikijs_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\tclient_max_body_size 20m;\n proxy_request_buffering off;\n\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.wikijs.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = wikijs.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.wikijs.tryton.geeraert.eu wikijs.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for wikijs\n############################################\n\nupstream wikijs_backend_root {\n server wikijs-svc.wikijs.svc:3000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name wikijs.geeraert.eu www.wikijs.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://wikijs_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\tclient_max_body_size 20m;\n proxy_request_buffering off;\n\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.wikijs.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = wikijs.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.wikijs.geeraert.eu wikijs.geeraert.eu ;\n listen 80;\n return 404;\n\n}" + "bitwarden.conf": "############################################\n# config file for bitwarden\n############################################\n\nupstream bitwarden_backend {\n server bitwarden-nginx-svc.bitwarden.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name bitwarden.tryton.geeraert.eu www.bitwarden.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://bitwarden_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.bitwarden.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = bitwarden.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.bitwarden.tryton.geeraert.eu bitwarden.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for bitwarden\n############################################\n\nupstream bitwarden_backend_root {\n server bitwarden-nginx-svc.bitwarden.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name bitwarden.geeraert.eu www.bitwarden.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://bitwarden_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.bitwarden.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = bitwarden.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.bitwarden.geeraert.eu bitwarden.geeraert.eu ;\n listen 80;\n return 404;\n\n}", + "django-testing.conf": "############################################\n# config file for django-testing\n############################################\n\nupstream django-testing_backend {\n server django-testing-svc.django-testing.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name django-testing.tryton.geeraert.eu www.django-testing.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://django-testing_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://django-testing_backend;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.django-testing.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = django-testing.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.django-testing.tryton.geeraert.eu django-testing.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for django-testing\n############################################\n\nupstream django-testing_backend_root {\n server django-testing-svc.django-testing.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name django-testing.geeraert.eu www.django-testing.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://django-testing_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://django-testing_backend_root;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.django-testing.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = django-testing.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.django-testing.geeraert.eu django-testing.geeraert.eu ;\n listen 80;\n return 404;\n\n}", + "django.conf": "############################################\n# config file for django\n############################################\n\nupstream django_backend {\n server django-svc.django:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name django.tryton.geeraert.eu www.django.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://django_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://django_backend;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.django.tryton.geeraert.eu django.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for django\n############################################\n\nupstream django_backend_root {\n server django-svc.django:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name django.geeraert.eu www.django.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://django_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://django_backend_root;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.django.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = django.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.django.geeraert.eu django.geeraert.eu ;\n listen 80;\n return 404;\n\n}", + "gitea.conf": "############################################\n# config file for gitea\n############################################\n\nupstream gitea_backend {\n server webserver.gitea.svc:3000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name gitea.tryton.geeraert.eu www.gitea.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://gitea_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.gitea.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = gitea.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.gitea.tryton.geeraert.eu gitea.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for gitea\n############################################\n\nupstream gitea_backend_root {\n server webserver.gitea.svc:3000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name gitea.geeraert.eu www.gitea.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://gitea_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.gitea.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = gitea.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.gitea.geeraert.eu gitea.geeraert.eu ;\n listen 80;\n return 404;\n\n}", + "immich.conf": "############################################\n# config file for immich\n############################################\n\nupstream immich_backend {\n server immich-svc.immich.svc:2283;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name immich.tryton.geeraert.eu www.immich.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://immich_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n proxy_set_header X-Forwarded-Proto $scheme;\n proxy_read_timeout 60000s;\n\n\n #adding websocket , usefull for reverse proxy\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_cache_bypass $http_upgrade;\n #end of working\n\n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.immich.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = immich.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.immich.tryton.geeraert.eu immich.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for immich\n############################################\n\nupstream immich_backend_root {\n server immich-svc.immich.svc:2283;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name immich.geeraert.eu www.immich.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://immich_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n proxy_set_header X-Forwarded-Proto $scheme;\n proxy_read_timeout 60000s;\n\n\n #adding websocket , usefull for reverse proxy\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_cache_bypass $http_upgrade;\n #end of working\n\n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.immich.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = immich.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.immich.geeraert.eu immich.geeraert.eu ;\n listen 80;\n return 404;\n\n}", + "jellyfin.conf": "############################################\n# config file for jellyfin\n############################################\n\nupstream jellyfin_backend {\n server jellyfin-svc.jellyfin.svc:8096;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name jellyfin.tryton.geeraert.eu www.jellyfin.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://jellyfin_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.jellyfin.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = jellyfin.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.jellyfin.tryton.geeraert.eu jellyfin.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for jellyfin\n############################################\n\nupstream jellyfin_backend_root {\n server jellyfin-svc.jellyfin.svc:8096;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name jellyfin.geeraert.eu www.jellyfin.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://jellyfin_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.jellyfin.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = jellyfin.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.jellyfin.geeraert.eu jellyfin.geeraert.eu ;\n listen 80;\n return 404;\n\n}", + "job-testing.conf": "############################################\n# config file for job-testing\n############################################\n\nupstream job-testing_backend {\n server django-testing-svc.django-testing.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name job-testing.tryton.geeraert.eu www.job-testing.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://job-testing_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://job-testing_backend;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.job-testing.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = job-testing.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.job-testing.tryton.geeraert.eu job-testing.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for job-testing\n############################################\n\nupstream job-testing_backend_root {\n server django-testing-svc.django-testing.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name job-testing.geeraert.eu www.job-testing.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://job-testing_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://job-testing_backend_root;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.job-testing.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = job-testing.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.job-testing.geeraert.eu job-testing.geeraert.eu ;\n listen 80;\n return 404;\n\n}", + "nextcloud.conf": "############################################\n# config file for nextcloud\n############################################\n\nupstream nextcloud_backend {\n server webserver.nextcloud.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name nextcloud.tryton.geeraert.eu www.nextcloud.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://nextcloud_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://nextcloud_backend;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n location /.well-known/carddav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location /.well-known/caldav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location = /health {\n default_type text/html;\n return 200 \"\u003c!DOCTYPE html\u003e\u003ch2\u003ehealth check\u003c/h2\u003e\\n\";\n }\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.nextcloud.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = nextcloud.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.nextcloud.tryton.geeraert.eu nextcloud.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for nextcloud\n############################################\n\nupstream nextcloud_backend_root {\n server webserver.nextcloud.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name nextcloud.geeraert.eu www.nextcloud.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://nextcloud_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://nextcloud_backend_root;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n location /.well-known/carddav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location /.well-known/caldav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location = /health {\n default_type text/html;\n return 200 \"\u003c!DOCTYPE html\u003e\u003ch2\u003ehealth check\u003c/h2\u003e\\n\";\n }\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.nextcloud.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = nextcloud.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.nextcloud.geeraert.eu nextcloud.geeraert.eu ;\n listen 80;\n return 404;\n\n}", + "octoprint.conf": "############################################\n# config file for octoprint\n############################################\n\nupstream octoprint_backend {\n server 192.168.1.28:5000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name octoprint.tryton.geeraert.eu www.octoprint.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://octoprint_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.octoprint.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = octoprint.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.octoprint.tryton.geeraert.eu octoprint.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for octoprint\n############################################\n\nupstream octoprint_backend_root {\n server 192.168.1.28:5000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name octoprint.geeraert.eu www.octoprint.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://octoprint_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.octoprint.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = octoprint.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.octoprint.geeraert.eu octoprint.geeraert.eu ;\n listen 80;\n return 404;\n\n}", + "openmediavault.conf": "############################################\n# config file for openmediavault\n############################################\n\nupstream openmediavault_backend {\n server 192.168.88.29;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name openmediavault.tryton.geeraert.eu www.openmediavault.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://openmediavault_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.openmediavault.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = openmediavault.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.openmediavault.tryton.geeraert.eu openmediavault.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for openmediavault\n############################################\n\nupstream openmediavault_backend_root {\n server 192.168.88.29;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name openmediavault.geeraert.eu www.openmediavault.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://openmediavault_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.openmediavault.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = openmediavault.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.openmediavault.geeraert.eu openmediavault.geeraert.eu ;\n listen 80;\n return 404;\n\n}", + "paperless.conf": "############################################\n# config file for paperless\n############################################\n\nupstream paperless_backend {\n server paperless-svc.paperless.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name paperless.tryton.geeraert.eu www.paperless.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://paperless_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.paperless.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = paperless.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.paperless.tryton.geeraert.eu paperless.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for paperless\n############################################\n\nupstream paperless_backend_root {\n server paperless-svc.paperless.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name paperless.geeraert.eu www.paperless.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://paperless_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.paperless.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = paperless.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.paperless.geeraert.eu paperless.geeraert.eu ;\n listen 80;\n return 404;\n\n}", + "pihole.conf": "############################################\n# config file for pihole\n############################################\n\nupstream pihole_backend {\n server web.piholenew.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name pihole.tryton.geeraert.eu www.pihole.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://pihole_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.pihole.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = pihole.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.pihole.tryton.geeraert.eu pihole.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for pihole\n############################################\n\nupstream pihole_backend_root {\n server web.piholenew.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name pihole.geeraert.eu www.pihole.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://pihole_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.pihole.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = pihole.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.pihole.geeraert.eu pihole.geeraert.eu ;\n listen 80;\n return 404;\n\n}", + "portainer.conf": "############################################\n# config file for portainer\n############################################\n\nupstream portainer_backend {\n server portainer.portainer.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name portainer.tryton.geeraert.eu www.portainer.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://portainer_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.portainer.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = portainer.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.portainer.tryton.geeraert.eu portainer.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for portainer\n############################################\n\nupstream portainer_backend_root {\n server portainer.portainer.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name portainer.geeraert.eu www.portainer.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://portainer_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.portainer.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = portainer.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.portainer.geeraert.eu portainer.geeraert.eu ;\n listen 80;\n return 404;\n\n}", + "prowlarr.conf": "############################################\n# config file for prowlarr\n############################################\n\nupstream prowlarr_backend {\n server prowlarr-svc.servarr.svc:9696;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name prowlarr.tryton.geeraert.eu www.prowlarr.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://prowlarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.prowlarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = prowlarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.prowlarr.tryton.geeraert.eu prowlarr.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for prowlarr\n############################################\n\nupstream prowlarr_backend_root {\n server prowlarr-svc.servarr.svc:9696;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name prowlarr.geeraert.eu www.prowlarr.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://prowlarr_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.prowlarr.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = prowlarr.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.prowlarr.geeraert.eu prowlarr.geeraert.eu ;\n listen 80;\n return 404;\n\n}", + "qbittorrent.conf": "############################################\n# config file for qbittorrent\n############################################\n\nupstream qbittorrent_backend {\n server qbittorrent-svc.servarr.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name qbittorrent.tryton.geeraert.eu www.qbittorrent.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://qbittorrent_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.qbittorrent.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = qbittorrent.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.qbittorrent.tryton.geeraert.eu qbittorrent.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for qbittorrent\n############################################\n\nupstream qbittorrent_backend_root {\n server qbittorrent-svc.servarr.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name qbittorrent.geeraert.eu www.qbittorrent.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://qbittorrent_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.qbittorrent.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = qbittorrent.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.qbittorrent.geeraert.eu qbittorrent.geeraert.eu ;\n listen 80;\n return 404;\n\n}", + "radarr.conf": "############################################\n# config file for radarr\n############################################\n\nupstream radarr_backend {\n server radarr-svc.servarr.svc:7878;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name radarr.tryton.geeraert.eu www.radarr.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://radarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.radarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = radarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.radarr.tryton.geeraert.eu radarr.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for radarr\n############################################\n\nupstream radarr_backend_root {\n server radarr-svc.servarr.svc:7878;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name radarr.geeraert.eu www.radarr.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://radarr_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.radarr.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = radarr.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.radarr.geeraert.eu radarr.geeraert.eu ;\n listen 80;\n return 404;\n\n}", + "redirect-testing.conf": "############################################\n# config file for redirect-testing\n############################################\n\nupstream redirect-testing_backend {\n server django-testing-svc.django-testing.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name redirect-testing.tryton.geeraert.eu www.redirect-testing.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://redirect-testing_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://redirect-testing_backend;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.redirect-testing.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = redirect-testing.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.redirect-testing.tryton.geeraert.eu redirect-testing.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for redirect-testing\n############################################\n\nupstream redirect-testing_backend_root {\n server django-testing-svc.django-testing.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name redirect-testing.geeraert.eu www.redirect-testing.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://redirect-testing_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://redirect-testing_backend_root;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.redirect-testing.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = redirect-testing.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.redirect-testing.geeraert.eu redirect-testing.geeraert.eu ;\n listen 80;\n return 404;\n\n}", + "redirect.conf": "############################################\n# config file for redirect\n############################################\n\nupstream redirect_backend {\n server django-svc.django:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name redirect.tryton.geeraert.eu www.redirect.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://redirect_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://redirect_backend;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.redirect.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = redirect.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.redirect.tryton.geeraert.eu redirect.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for redirect\n############################################\n\nupstream redirect_backend_root {\n server django-svc.django:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name redirect.geeraert.eu www.redirect.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://redirect_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://redirect_backend_root;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.redirect.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = redirect.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.redirect.geeraert.eu redirect.geeraert.eu ;\n listen 80;\n return 404;\n\n}", + "reverse.conf": "############################################\n# config file for reverse\n############################################\n\nupstream reverse_backend {\n server django-svc.django:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name reverse.tryton.geeraert.eu www.reverse.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://reverse_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://reverse_backend;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.reverse.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = reverse.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.reverse.tryton.geeraert.eu reverse.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for reverse\n############################################\n\nupstream reverse_backend_root {\n server django-svc.django:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name reverse.geeraert.eu www.reverse.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://reverse_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://reverse_backend_root;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.reverse.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = reverse.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.reverse.geeraert.eu reverse.geeraert.eu ;\n listen 80;\n return 404;\n\n}", + "router.conf": "############################################\n# config file for router\n############################################\n\nupstream router_backend {\n server 192.168.88.1;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name router.tryton.geeraert.eu www.router.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://router_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n auth_basic \"Administrator’s Area\";\n auth_basic_user_file /authentication-htpasswd/.htpasswd;\n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.router.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = router.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.router.tryton.geeraert.eu router.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for router\n############################################\n\nupstream router_backend_root {\n server 192.168.88.1;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name router.geeraert.eu www.router.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://router_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n auth_basic \"Administrator’s Area\";\n auth_basic_user_file /authentication-htpasswd/.htpasswd;\n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.router.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = router.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.router.geeraert.eu router.geeraert.eu ;\n listen 80;\n return 404;\n\n}", + "sonarr.conf": "############################################\n# config file for sonarr\n############################################\n\nupstream sonarr_backend {\n server sonarr-svc.servarr.svc:8989;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name sonarr.tryton.geeraert.eu www.sonarr.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://sonarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.sonarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = sonarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.sonarr.tryton.geeraert.eu sonarr.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for sonarr\n############################################\n\nupstream sonarr_backend_root {\n server sonarr-svc.servarr.svc:8989;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name sonarr.geeraert.eu www.sonarr.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://sonarr_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.sonarr.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = sonarr.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.sonarr.geeraert.eu sonarr.geeraert.eu ;\n listen 80;\n return 404;\n\n}", + "stash.conf": "############################################\n# config file for stash\n############################################\n\nupstream stash_backend {\n server stash-svc.stash.svc:9999;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name stash.tryton.geeraert.eu www.stash.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://stash_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n #don't use this as this needs to be run as root or have the CAP_NET_RAW capability) to bind to a non-local IP address.\n #Because the backend thinks the request is coming directly from the client, it will try to send the response directly back to that client IP. To prevent this (which would break the connection), you must force the response back through the NGINX server.\n #proxy_bind $remote_addr transparent;\n\n##used to be working\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n proxy_set_header X-Forwarded-Proto $scheme;\n proxy_read_timeout 60000s;\n #working\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_cache_bypass $http_upgrade;\n #end of working\n\n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.stash.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = stash.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.stash.tryton.geeraert.eu stash.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for stash\n############################################\n\nupstream stash_backend_root {\n server stash-svc.stash.svc:9999;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name stash.geeraert.eu www.stash.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://stash_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n #don't use this as this needs to be run as root or have the CAP_NET_RAW capability) to bind to a non-local IP address.\n #Because the backend thinks the request is coming directly from the client, it will try to send the response directly back to that client IP. To prevent this (which would break the connection), you must force the response back through the NGINX server.\n #proxy_bind $remote_addr transparent;\n\n##used to be working\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n proxy_set_header X-Forwarded-Proto $scheme;\n proxy_read_timeout 60000s;\n #working\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_cache_bypass $http_upgrade;\n #end of working\n\n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.stash.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = stash.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.stash.geeraert.eu stash.geeraert.eu ;\n listen 80;\n return 404;\n\n}", + "synology.conf": "############################################\n# config file for synology\n############################################\n\nupstream synology_backend {\n server 192.168.88.39:5000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name synology.tryton.geeraert.eu www.synology.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://synology_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.synology.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = synology.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.synology.tryton.geeraert.eu synology.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for synology\n############################################\n\nupstream synology_backend_root {\n server 192.168.88.39:5000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name synology.geeraert.eu www.synology.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://synology_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.synology.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = synology.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.synology.geeraert.eu synology.geeraert.eu ;\n listen 80;\n return 404;\n\n}", + "unifi-inform.conf": "############################################\n# config file for unifi-inform\n############################################\n\nupstream unifi-inform_backend {\n server 192.168.88.50:8082;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name unifi-inform.tryton.geeraert.eu www.unifi-inform.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://unifi-inform_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.unifi-inform.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = unifi-inform.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.unifi-inform.tryton.geeraert.eu unifi-inform.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for unifi-inform\n############################################\n\nupstream unifi-inform_backend_root {\n server 192.168.88.50:8082;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name unifi-inform.geeraert.eu www.unifi-inform.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://unifi-inform_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.unifi-inform.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = unifi-inform.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.unifi-inform.geeraert.eu unifi-inform.geeraert.eu ;\n listen 80;\n return 404;\n\n}", + "unifi.conf": "############################################\n# config file for unifi\n############################################\n\nupstream unifi_backend {\n server 192.168.88.244:8443;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name unifi.tryton.geeraert.eu www.unifi.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass https://unifi_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.unifi.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = unifi.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.unifi.tryton.geeraert.eu unifi.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for unifi\n############################################\n\nupstream unifi_backend_root {\n server 192.168.88.244:8443;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name unifi.geeraert.eu www.unifi.geeraert.eu;\n\t\n\n location / {\n proxy_pass https://unifi_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.unifi.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = unifi.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.unifi.geeraert.eu unifi.geeraert.eu ;\n listen 80;\n return 404;\n\n}", + "wikijs.conf": "############################################\n# config file for wikijs\n############################################\n\nupstream wikijs_backend {\n server wikijs-svc.wikijs.svc:3000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name wikijs.tryton.geeraert.eu www.wikijs.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://wikijs_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\tclient_max_body_size 20m;\n proxy_request_buffering off;\n\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.wikijs.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = wikijs.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.wikijs.tryton.geeraert.eu wikijs.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for wikijs\n############################################\n\nupstream wikijs_backend_root {\n server wikijs-svc.wikijs.svc:3000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name wikijs.geeraert.eu www.wikijs.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://wikijs_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\tclient_max_body_size 20m;\n proxy_request_buffering off;\n\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.wikijs.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = wikijs.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.wikijs.geeraert.eu wikijs.geeraert.eu ;\n listen 80;\n return 404;\n\n}" }, "id": "reverse-proxy/sites-terraform", "immutable": false, @@ -60,7 +60,7 @@ "labels": {}, "name": "sites-terraform", "namespace": "reverse-proxy", - "resource_version": "279632581", + "resource_version": "279635313", "uid": "08aa2108-9dce-4e67-b000-4dc7fbd1c23e" } ] diff --git a/terraform/terraform.tfstate.backup b/terraform/terraform.tfstate.backup index 641875e..ad9aa6e 100644 --- a/terraform/terraform.tfstate.backup +++ b/terraform/terraform.tfstate.backup @@ -1,7 +1,7 @@ { "version": 4, "terraform_version": "1.14.4", - "serial": 1621, + "serial": 1623, "lineage": "a36de74c-83f8-01fe-0504-92c54a21d49e", "outputs": { "Nginx_status": { @@ -21,32 +21,32 @@ "attributes": { "binary_data": {}, "data": { - "bitwarden.conf": "############################################\n# config file for bitwarden\n############################################\n\nupstream bitwarden_backend {\n server bitwarden-nginx-svc.bitwarden.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name bitwarden.tryton.geeraert.eu www.bitwarden.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://bitwarden_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.bitwarden.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = bitwarden.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.bitwarden.tryton.geeraert.eu bitwarden.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for bitwarden\n############################################\n\nupstream bitwarden_backend_root {\n server bitwarden-nginx-svc.bitwarden.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name bitwarden.geeraert.eu www.bitwarden.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://bitwarden_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem\n\n\n\n}\nserver {\n if ($host = www.bitwarden.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = bitwarden.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.bitwarden.geeraert.eu bitwarden.geeraert.eu ;\n listen 80;\n return 404;\n\n}", - "django-testing.conf": "############################################\n# config file for django-testing\n############################################\n\nupstream django-testing_backend {\n server django-testing-svc.django-testing.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name django-testing.tryton.geeraert.eu www.django-testing.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://django-testing_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://django-testing_backend;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.django-testing.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = django-testing.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.django-testing.tryton.geeraert.eu django-testing.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for django-testing\n############################################\n\nupstream django-testing_backend_root {\n server django-testing-svc.django-testing.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name django-testing.geeraert.eu www.django-testing.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://django-testing_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://django-testing_backend_root;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem\n\n\n\n}\nserver {\n if ($host = www.django-testing.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = django-testing.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.django-testing.geeraert.eu django-testing.geeraert.eu ;\n listen 80;\n return 404;\n\n}", - "django.conf": "############################################\n# config file for django\n############################################\n\nupstream django_backend {\n server django-svc.django:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name django.tryton.geeraert.eu www.django.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://django_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://django_backend;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.django.tryton.geeraert.eu django.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for django\n############################################\n\nupstream django_backend_root {\n server django-svc.django:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name django.geeraert.eu www.django.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://django_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://django_backend_root;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem\n\n\n\n}\nserver {\n if ($host = www.django.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = django.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.django.geeraert.eu django.geeraert.eu ;\n listen 80;\n return 404;\n\n}", - "gitea.conf": "############################################\n# config file for gitea\n############################################\n\nupstream gitea_backend {\n server webserver.gitea.svc:3000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name gitea.tryton.geeraert.eu www.gitea.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://gitea_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.gitea.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = gitea.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.gitea.tryton.geeraert.eu gitea.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for gitea\n############################################\n\nupstream gitea_backend_root {\n server webserver.gitea.svc:3000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name gitea.geeraert.eu www.gitea.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://gitea_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem\n\n\n\n}\nserver {\n if ($host = www.gitea.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = gitea.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.gitea.geeraert.eu gitea.geeraert.eu ;\n listen 80;\n return 404;\n\n}", - "immich.conf": "############################################\n# config file for immich\n############################################\n\nupstream immich_backend {\n server immich-svc.immich.svc:2283;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name immich.tryton.geeraert.eu www.immich.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://immich_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n proxy_set_header X-Forwarded-Proto $scheme;\n proxy_read_timeout 60000s;\n\n\n #adding websocket , usefull for reverse proxy\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_cache_bypass $http_upgrade;\n #end of working\n\n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.immich.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = immich.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.immich.tryton.geeraert.eu immich.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for immich\n############################################\n\nupstream immich_backend_root {\n server immich-svc.immich.svc:2283;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name immich.geeraert.eu www.immich.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://immich_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n proxy_set_header X-Forwarded-Proto $scheme;\n proxy_read_timeout 60000s;\n\n\n #adding websocket , usefull for reverse proxy\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_cache_bypass $http_upgrade;\n #end of working\n\n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem\n\n\n\n}\nserver {\n if ($host = www.immich.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = immich.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.immich.geeraert.eu immich.geeraert.eu ;\n listen 80;\n return 404;\n\n}", - "jellyfin.conf": "############################################\n# config file for jellyfin\n############################################\n\nupstream jellyfin_backend {\n server jellyfin-svc.jellyfin.svc:8096;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name jellyfin.tryton.geeraert.eu www.jellyfin.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://jellyfin_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.jellyfin.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = jellyfin.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.jellyfin.tryton.geeraert.eu jellyfin.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for jellyfin\n############################################\n\nupstream jellyfin_backend_root {\n server jellyfin-svc.jellyfin.svc:8096;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name jellyfin.geeraert.eu www.jellyfin.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://jellyfin_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem\n\n\n\n}\nserver {\n if ($host = www.jellyfin.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = jellyfin.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.jellyfin.geeraert.eu jellyfin.geeraert.eu ;\n listen 80;\n return 404;\n\n}", - "job-testing.conf": "############################################\n# config file for job-testing\n############################################\n\nupstream job-testing_backend {\n server django-testing-svc.django-testing.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name job-testing.tryton.geeraert.eu www.job-testing.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://job-testing_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://job-testing_backend;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.job-testing.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = job-testing.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.job-testing.tryton.geeraert.eu job-testing.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for job-testing\n############################################\n\nupstream job-testing_backend_root {\n server django-testing-svc.django-testing.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name job-testing.geeraert.eu www.job-testing.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://job-testing_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://job-testing_backend_root;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem\n\n\n\n}\nserver {\n if ($host = www.job-testing.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = job-testing.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.job-testing.geeraert.eu job-testing.geeraert.eu ;\n listen 80;\n return 404;\n\n}", - "nextcloud.conf": "############################################\n# config file for nextcloud\n############################################\n\nupstream nextcloud_backend {\n server webserver.nextcloud.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name nextcloud.tryton.geeraert.eu www.nextcloud.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://nextcloud_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://nextcloud_backend;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n location /.well-known/carddav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location /.well-known/caldav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location = /health {\n default_type text/html;\n return 200 \"\u003c!DOCTYPE html\u003e\u003ch2\u003ehealth check\u003c/h2\u003e\\n\";\n }\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.nextcloud.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = nextcloud.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.nextcloud.tryton.geeraert.eu nextcloud.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for nextcloud\n############################################\n\nupstream nextcloud_backend_root {\n server webserver.nextcloud.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name nextcloud.geeraert.eu www.nextcloud.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://nextcloud_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://nextcloud_backend_root;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n location /.well-known/carddav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location /.well-known/caldav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location = /health {\n default_type text/html;\n return 200 \"\u003c!DOCTYPE html\u003e\u003ch2\u003ehealth check\u003c/h2\u003e\\n\";\n }\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem\n\n\n\n}\nserver {\n if ($host = www.nextcloud.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = nextcloud.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.nextcloud.geeraert.eu nextcloud.geeraert.eu ;\n listen 80;\n return 404;\n\n}", - "octoprint.conf": "############################################\n# config file for octoprint\n############################################\n\nupstream octoprint_backend {\n server 192.168.1.28:5000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name octoprint.tryton.geeraert.eu www.octoprint.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://octoprint_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.octoprint.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = octoprint.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.octoprint.tryton.geeraert.eu octoprint.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for octoprint\n############################################\n\nupstream octoprint_backend_root {\n server 192.168.1.28:5000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name octoprint.geeraert.eu www.octoprint.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://octoprint_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem\n\n\n\n}\nserver {\n if ($host = www.octoprint.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = octoprint.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.octoprint.geeraert.eu octoprint.geeraert.eu ;\n listen 80;\n return 404;\n\n}", - "openmediavault.conf": "############################################\n# config file for openmediavault\n############################################\n\nupstream openmediavault_backend {\n server 192.168.88.29;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name openmediavault.tryton.geeraert.eu www.openmediavault.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://openmediavault_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.openmediavault.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = openmediavault.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.openmediavault.tryton.geeraert.eu openmediavault.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for openmediavault\n############################################\n\nupstream openmediavault_backend_root {\n server 192.168.88.29;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name openmediavault.geeraert.eu www.openmediavault.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://openmediavault_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem\n\n\n\n}\nserver {\n if ($host = www.openmediavault.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = openmediavault.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.openmediavault.geeraert.eu openmediavault.geeraert.eu ;\n listen 80;\n return 404;\n\n}", - "paperless.conf": "############################################\n# config file for paperless\n############################################\n\nupstream paperless_backend {\n server paperless-svc.paperless.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name paperless.tryton.geeraert.eu www.paperless.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://paperless_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.paperless.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = paperless.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.paperless.tryton.geeraert.eu paperless.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for paperless\n############################################\n\nupstream paperless_backend_root {\n server paperless-svc.paperless.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name paperless.geeraert.eu www.paperless.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://paperless_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem\n\n\n\n}\nserver {\n if ($host = www.paperless.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = paperless.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.paperless.geeraert.eu paperless.geeraert.eu ;\n listen 80;\n return 404;\n\n}", - "pihole.conf": "############################################\n# config file for pihole\n############################################\n\nupstream pihole_backend {\n server web.piholenew.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name pihole.tryton.geeraert.eu www.pihole.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://pihole_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.pihole.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = pihole.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.pihole.tryton.geeraert.eu pihole.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for pihole\n############################################\n\nupstream pihole_backend_root {\n server web.piholenew.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name pihole.geeraert.eu www.pihole.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://pihole_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem\n\n\n\n}\nserver {\n if ($host = www.pihole.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = pihole.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.pihole.geeraert.eu pihole.geeraert.eu ;\n listen 80;\n return 404;\n\n}", - "portainer.conf": "############################################\n# config file for portainer\n############################################\n\nupstream portainer_backend {\n server portainer.portainer.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name portainer.tryton.geeraert.eu www.portainer.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://portainer_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.portainer.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = portainer.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.portainer.tryton.geeraert.eu portainer.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for portainer\n############################################\n\nupstream portainer_backend_root {\n server portainer.portainer.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name portainer.geeraert.eu www.portainer.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://portainer_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem\n\n\n\n}\nserver {\n if ($host = www.portainer.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = portainer.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.portainer.geeraert.eu portainer.geeraert.eu ;\n listen 80;\n return 404;\n\n}", - "prowlarr.conf": "############################################\n# config file for prowlarr\n############################################\n\nupstream prowlarr_backend {\n server prowlarr-svc.servarr.svc:9696;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name prowlarr.tryton.geeraert.eu www.prowlarr.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://prowlarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.prowlarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = prowlarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.prowlarr.tryton.geeraert.eu prowlarr.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for prowlarr\n############################################\n\nupstream prowlarr_backend_root {\n server prowlarr-svc.servarr.svc:9696;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name prowlarr.geeraert.eu www.prowlarr.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://prowlarr_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem\n\n\n\n}\nserver {\n if ($host = www.prowlarr.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = prowlarr.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.prowlarr.geeraert.eu prowlarr.geeraert.eu ;\n listen 80;\n return 404;\n\n}", - "qbittorrent.conf": "############################################\n# config file for qbittorrent\n############################################\n\nupstream qbittorrent_backend {\n server qbittorrent-svc.servarr.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name qbittorrent.tryton.geeraert.eu www.qbittorrent.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://qbittorrent_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.qbittorrent.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = qbittorrent.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.qbittorrent.tryton.geeraert.eu qbittorrent.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for qbittorrent\n############################################\n\nupstream qbittorrent_backend_root {\n server qbittorrent-svc.servarr.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name qbittorrent.geeraert.eu www.qbittorrent.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://qbittorrent_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem\n\n\n\n}\nserver {\n if ($host = www.qbittorrent.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = qbittorrent.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.qbittorrent.geeraert.eu qbittorrent.geeraert.eu ;\n listen 80;\n return 404;\n\n}", - "radarr.conf": "############################################\n# config file for radarr\n############################################\n\nupstream radarr_backend {\n server radarr-svc.servarr.svc:7878;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name radarr.tryton.geeraert.eu www.radarr.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://radarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.radarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = radarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.radarr.tryton.geeraert.eu radarr.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for radarr\n############################################\n\nupstream radarr_backend_root {\n server radarr-svc.servarr.svc:7878;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name radarr.geeraert.eu www.radarr.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://radarr_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem\n\n\n\n}\nserver {\n if ($host = www.radarr.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = radarr.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.radarr.geeraert.eu radarr.geeraert.eu ;\n listen 80;\n return 404;\n\n}", - "redirect-testing.conf": "############################################\n# config file for redirect-testing\n############################################\n\nupstream redirect-testing_backend {\n server django-testing-svc.django-testing.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name redirect-testing.tryton.geeraert.eu www.redirect-testing.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://redirect-testing_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://redirect-testing_backend;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.redirect-testing.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = redirect-testing.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.redirect-testing.tryton.geeraert.eu redirect-testing.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for redirect-testing\n############################################\n\nupstream redirect-testing_backend_root {\n server django-testing-svc.django-testing.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name redirect-testing.geeraert.eu www.redirect-testing.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://redirect-testing_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://redirect-testing_backend_root;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem\n\n\n\n}\nserver {\n if ($host = www.redirect-testing.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = redirect-testing.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.redirect-testing.geeraert.eu redirect-testing.geeraert.eu ;\n listen 80;\n return 404;\n\n}", - "redirect.conf": "############################################\n# config file for redirect\n############################################\n\nupstream redirect_backend {\n server django-svc.django:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name redirect.tryton.geeraert.eu www.redirect.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://redirect_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://redirect_backend;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.redirect.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = redirect.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.redirect.tryton.geeraert.eu redirect.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for redirect\n############################################\n\nupstream redirect_backend_root {\n server django-svc.django:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name redirect.geeraert.eu www.redirect.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://redirect_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://redirect_backend_root;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem\n\n\n\n}\nserver {\n if ($host = www.redirect.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = redirect.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.redirect.geeraert.eu redirect.geeraert.eu ;\n listen 80;\n return 404;\n\n}", - "reverse.conf": "############################################\n# config file for reverse\n############################################\n\nupstream reverse_backend {\n server django-svc.django:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name reverse.tryton.geeraert.eu www.reverse.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://reverse_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://reverse_backend;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.reverse.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = reverse.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.reverse.tryton.geeraert.eu reverse.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for reverse\n############################################\n\nupstream reverse_backend_root {\n server django-svc.django:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name reverse.geeraert.eu www.reverse.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://reverse_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://reverse_backend_root;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem\n\n\n\n}\nserver {\n if ($host = www.reverse.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = reverse.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.reverse.geeraert.eu reverse.geeraert.eu ;\n listen 80;\n return 404;\n\n}", - "router.conf": "############################################\n# config file for router\n############################################\n\nupstream router_backend {\n server 192.168.88.1;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name router.tryton.geeraert.eu www.router.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://router_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n auth_basic \"Administrator’s Area\";\n auth_basic_user_file /authentication-htpasswd/.htpasswd;\n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.router.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = router.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.router.tryton.geeraert.eu router.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for router\n############################################\n\nupstream router_backend_root {\n server 192.168.88.1;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name router.geeraert.eu www.router.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://router_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n auth_basic \"Administrator’s Area\";\n auth_basic_user_file /authentication-htpasswd/.htpasswd;\n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem\n\n\n\n}\nserver {\n if ($host = www.router.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = router.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.router.geeraert.eu router.geeraert.eu ;\n listen 80;\n return 404;\n\n}", - "sonarr.conf": "############################################\n# config file for sonarr\n############################################\n\nupstream sonarr_backend {\n server sonarr-svc.servarr.svc:8989;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name sonarr.tryton.geeraert.eu www.sonarr.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://sonarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.sonarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = sonarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.sonarr.tryton.geeraert.eu sonarr.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for sonarr\n############################################\n\nupstream sonarr_backend_root {\n server sonarr-svc.servarr.svc:8989;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name sonarr.geeraert.eu www.sonarr.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://sonarr_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem\n\n\n\n}\nserver {\n if ($host = www.sonarr.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = sonarr.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.sonarr.geeraert.eu sonarr.geeraert.eu ;\n listen 80;\n return 404;\n\n}", - "stash.conf": "############################################\n# config file for stash\n############################################\n\nupstream stash_backend {\n server stash-svc.stash.svc:9999;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name stash.tryton.geeraert.eu www.stash.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://stash_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n #don't use this as this needs to be run as root or have the CAP_NET_RAW capability) to bind to a non-local IP address.\n #Because the backend thinks the request is coming directly from the client, it will try to send the response directly back to that client IP. To prevent this (which would break the connection), you must force the response back through the NGINX server.\n #proxy_bind $remote_addr transparent;\n\n##used to be working\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n proxy_set_header X-Forwarded-Proto $scheme;\n proxy_read_timeout 60000s;\n #working\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_cache_bypass $http_upgrade;\n #end of working\n\n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.stash.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = stash.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.stash.tryton.geeraert.eu stash.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for stash\n############################################\n\nupstream stash_backend_root {\n server stash-svc.stash.svc:9999;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name stash.geeraert.eu www.stash.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://stash_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n #don't use this as this needs to be run as root or have the CAP_NET_RAW capability) to bind to a non-local IP address.\n #Because the backend thinks the request is coming directly from the client, it will try to send the response directly back to that client IP. To prevent this (which would break the connection), you must force the response back through the NGINX server.\n #proxy_bind $remote_addr transparent;\n\n##used to be working\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n proxy_set_header X-Forwarded-Proto $scheme;\n proxy_read_timeout 60000s;\n #working\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_cache_bypass $http_upgrade;\n #end of working\n\n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem\n\n\n\n}\nserver {\n if ($host = www.stash.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = stash.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.stash.geeraert.eu stash.geeraert.eu ;\n listen 80;\n return 404;\n\n}", - "synology.conf": "############################################\n# config file for synology\n############################################\n\nupstream synology_backend {\n server 192.168.88.39:5000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name synology.tryton.geeraert.eu www.synology.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://synology_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.synology.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = synology.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.synology.tryton.geeraert.eu synology.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for synology\n############################################\n\nupstream synology_backend_root {\n server 192.168.88.39:5000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name synology.geeraert.eu www.synology.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://synology_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem\n\n\n\n}\nserver {\n if ($host = www.synology.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = synology.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.synology.geeraert.eu synology.geeraert.eu ;\n listen 80;\n return 404;\n\n}", - "unifi-inform.conf": "############################################\n# config file for unifi-inform\n############################################\n\nupstream unifi-inform_backend {\n server 192.168.88.50:8082;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name unifi-inform.tryton.geeraert.eu www.unifi-inform.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://unifi-inform_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.unifi-inform.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = unifi-inform.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.unifi-inform.tryton.geeraert.eu unifi-inform.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for unifi-inform\n############################################\n\nupstream unifi-inform_backend_root {\n server 192.168.88.50:8082;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name unifi-inform.geeraert.eu www.unifi-inform.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://unifi-inform_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem\n\n\n\n}\nserver {\n if ($host = www.unifi-inform.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = unifi-inform.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.unifi-inform.geeraert.eu unifi-inform.geeraert.eu ;\n listen 80;\n return 404;\n\n}", - "unifi.conf": "############################################\n# config file for unifi\n############################################\n\nupstream unifi_backend {\n server 192.168.88.244:8443;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name unifi.tryton.geeraert.eu www.unifi.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass https://unifi_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.unifi.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = unifi.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.unifi.tryton.geeraert.eu unifi.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for unifi\n############################################\n\nupstream unifi_backend_root {\n server 192.168.88.244:8443;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name unifi.geeraert.eu www.unifi.geeraert.eu;\n\t\n\n location / {\n proxy_pass https://unifi_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem\n\n\n\n}\nserver {\n if ($host = www.unifi.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = unifi.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.unifi.geeraert.eu unifi.geeraert.eu ;\n listen 80;\n return 404;\n\n}", - "wikijs.conf": "############################################\n# config file for wikijs\n############################################\n\nupstream wikijs_backend {\n server wikijs-svc.wikijs.svc:3000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name wikijs.tryton.geeraert.eu www.wikijs.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://wikijs_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\tclient_max_body_size 20m;\n proxy_request_buffering off;\n\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.wikijs.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = wikijs.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.wikijs.tryton.geeraert.eu wikijs.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for wikijs\n############################################\n\nupstream wikijs_backend_root {\n server wikijs-svc.wikijs.svc:3000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name wikijs.geeraert.eu www.wikijs.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://wikijs_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\tclient_max_body_size 20m;\n proxy_request_buffering off;\n\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem\n\n\n\n}\nserver {\n if ($host = www.wikijs.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = wikijs.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.wikijs.geeraert.eu wikijs.geeraert.eu ;\n listen 80;\n return 404;\n\n}" + "bitwarden.conf": "############################################\n# config file for bitwarden\n############################################\n\nupstream bitwarden_backend {\n server bitwarden-nginx-svc.bitwarden.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name bitwarden.tryton.geeraert.eu www.bitwarden.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://bitwarden_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.bitwarden.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = bitwarden.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.bitwarden.tryton.geeraert.eu bitwarden.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for bitwarden\n############################################\n\nupstream bitwarden_backend_root {\n server bitwarden-nginx-svc.bitwarden.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name bitwarden.geeraert.eu www.bitwarden.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://bitwarden_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.bitwarden.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = bitwarden.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.bitwarden.geeraert.eu bitwarden.geeraert.eu ;\n listen 80;\n return 404;\n\n}", + "django-testing.conf": "############################################\n# config file for django-testing\n############################################\n\nupstream django-testing_backend {\n server django-testing-svc.django-testing.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name django-testing.tryton.geeraert.eu www.django-testing.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://django-testing_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://django-testing_backend;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.django-testing.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = django-testing.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.django-testing.tryton.geeraert.eu django-testing.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for django-testing\n############################################\n\nupstream django-testing_backend_root {\n server django-testing-svc.django-testing.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name django-testing.geeraert.eu www.django-testing.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://django-testing_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://django-testing_backend_root;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.django-testing.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = django-testing.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.django-testing.geeraert.eu django-testing.geeraert.eu ;\n listen 80;\n return 404;\n\n}", + "django.conf": "############################################\n# config file for django\n############################################\n\nupstream django_backend {\n server django-svc.django:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name django.tryton.geeraert.eu www.django.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://django_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://django_backend;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.django.tryton.geeraert.eu django.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for django\n############################################\n\nupstream django_backend_root {\n server django-svc.django:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name django.geeraert.eu www.django.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://django_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://django_backend_root;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.django.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = django.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.django.geeraert.eu django.geeraert.eu ;\n listen 80;\n return 404;\n\n}", + "gitea.conf": "############################################\n# config file for gitea\n############################################\n\nupstream gitea_backend {\n server webserver.gitea.svc:3000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name gitea.tryton.geeraert.eu www.gitea.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://gitea_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.gitea.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = gitea.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.gitea.tryton.geeraert.eu gitea.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for gitea\n############################################\n\nupstream gitea_backend_root {\n server webserver.gitea.svc:3000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name gitea.geeraert.eu www.gitea.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://gitea_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.gitea.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = gitea.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.gitea.geeraert.eu gitea.geeraert.eu ;\n listen 80;\n return 404;\n\n}", + "immich.conf": "############################################\n# config file for immich\n############################################\n\nupstream immich_backend {\n server immich-svc.immich.svc:2283;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name immich.tryton.geeraert.eu www.immich.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://immich_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n proxy_set_header X-Forwarded-Proto $scheme;\n proxy_read_timeout 60000s;\n\n\n #adding websocket , usefull for reverse proxy\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_cache_bypass $http_upgrade;\n #end of working\n\n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.immich.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = immich.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.immich.tryton.geeraert.eu immich.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for immich\n############################################\n\nupstream immich_backend_root {\n server immich-svc.immich.svc:2283;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name immich.geeraert.eu www.immich.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://immich_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n proxy_set_header X-Forwarded-Proto $scheme;\n proxy_read_timeout 60000s;\n\n\n #adding websocket , usefull for reverse proxy\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_cache_bypass $http_upgrade;\n #end of working\n\n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.immich.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = immich.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.immich.geeraert.eu immich.geeraert.eu ;\n listen 80;\n return 404;\n\n}", + "jellyfin.conf": "############################################\n# config file for jellyfin\n############################################\n\nupstream jellyfin_backend {\n server jellyfin-svc.jellyfin.svc:8096;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name jellyfin.tryton.geeraert.eu www.jellyfin.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://jellyfin_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.jellyfin.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = jellyfin.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.jellyfin.tryton.geeraert.eu jellyfin.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for jellyfin\n############################################\n\nupstream jellyfin_backend_root {\n server jellyfin-svc.jellyfin.svc:8096;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name jellyfin.geeraert.eu www.jellyfin.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://jellyfin_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.jellyfin.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = jellyfin.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.jellyfin.geeraert.eu jellyfin.geeraert.eu ;\n listen 80;\n return 404;\n\n}", + "job-testing.conf": "############################################\n# config file for job-testing\n############################################\n\nupstream job-testing_backend {\n server django-testing-svc.django-testing.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name job-testing.tryton.geeraert.eu www.job-testing.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://job-testing_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://job-testing_backend;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.job-testing.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = job-testing.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.job-testing.tryton.geeraert.eu job-testing.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for job-testing\n############################################\n\nupstream job-testing_backend_root {\n server django-testing-svc.django-testing.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name job-testing.geeraert.eu www.job-testing.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://job-testing_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://job-testing_backend_root;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.job-testing.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = job-testing.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.job-testing.geeraert.eu job-testing.geeraert.eu ;\n listen 80;\n return 404;\n\n}", + "nextcloud.conf": "############################################\n# config file for nextcloud\n############################################\n\nupstream nextcloud_backend {\n server webserver.nextcloud.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name nextcloud.tryton.geeraert.eu www.nextcloud.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://nextcloud_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://nextcloud_backend;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n location /.well-known/carddav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location /.well-known/caldav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location = /health {\n default_type text/html;\n return 200 \"\u003c!DOCTYPE html\u003e\u003ch2\u003ehealth check\u003c/h2\u003e\\n\";\n }\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.nextcloud.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = nextcloud.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.nextcloud.tryton.geeraert.eu nextcloud.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for nextcloud\n############################################\n\nupstream nextcloud_backend_root {\n server webserver.nextcloud.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name nextcloud.geeraert.eu www.nextcloud.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://nextcloud_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://nextcloud_backend_root;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n location /.well-known/carddav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location /.well-known/caldav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location = /health {\n default_type text/html;\n return 200 \"\u003c!DOCTYPE html\u003e\u003ch2\u003ehealth check\u003c/h2\u003e\\n\";\n }\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.nextcloud.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = nextcloud.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.nextcloud.geeraert.eu nextcloud.geeraert.eu ;\n listen 80;\n return 404;\n\n}", + "octoprint.conf": "############################################\n# config file for octoprint\n############################################\n\nupstream octoprint_backend {\n server 192.168.1.28:5000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name octoprint.tryton.geeraert.eu www.octoprint.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://octoprint_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.octoprint.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = octoprint.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.octoprint.tryton.geeraert.eu octoprint.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for octoprint\n############################################\n\nupstream octoprint_backend_root {\n server 192.168.1.28:5000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name octoprint.geeraert.eu www.octoprint.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://octoprint_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.octoprint.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = octoprint.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.octoprint.geeraert.eu octoprint.geeraert.eu ;\n listen 80;\n return 404;\n\n}", + "openmediavault.conf": "############################################\n# config file for openmediavault\n############################################\n\nupstream openmediavault_backend {\n server 192.168.88.29;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name openmediavault.tryton.geeraert.eu www.openmediavault.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://openmediavault_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.openmediavault.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = openmediavault.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.openmediavault.tryton.geeraert.eu openmediavault.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for openmediavault\n############################################\n\nupstream openmediavault_backend_root {\n server 192.168.88.29;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name openmediavault.geeraert.eu www.openmediavault.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://openmediavault_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.openmediavault.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = openmediavault.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.openmediavault.geeraert.eu openmediavault.geeraert.eu ;\n listen 80;\n return 404;\n\n}", + "paperless.conf": "############################################\n# config file for paperless\n############################################\n\nupstream paperless_backend {\n server paperless-svc.paperless.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name paperless.tryton.geeraert.eu www.paperless.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://paperless_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.paperless.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = paperless.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.paperless.tryton.geeraert.eu paperless.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for paperless\n############################################\n\nupstream paperless_backend_root {\n server paperless-svc.paperless.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name paperless.geeraert.eu www.paperless.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://paperless_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.paperless.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = paperless.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.paperless.geeraert.eu paperless.geeraert.eu ;\n listen 80;\n return 404;\n\n}", + "pihole.conf": "############################################\n# config file for pihole\n############################################\n\nupstream pihole_backend {\n server web.piholenew.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name pihole.tryton.geeraert.eu www.pihole.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://pihole_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.pihole.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = pihole.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.pihole.tryton.geeraert.eu pihole.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for pihole\n############################################\n\nupstream pihole_backend_root {\n server web.piholenew.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name pihole.geeraert.eu www.pihole.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://pihole_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.pihole.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = pihole.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.pihole.geeraert.eu pihole.geeraert.eu ;\n listen 80;\n return 404;\n\n}", + "portainer.conf": "############################################\n# config file for portainer\n############################################\n\nupstream portainer_backend {\n server portainer.portainer.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name portainer.tryton.geeraert.eu www.portainer.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://portainer_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.portainer.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = portainer.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.portainer.tryton.geeraert.eu portainer.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for portainer\n############################################\n\nupstream portainer_backend_root {\n server portainer.portainer.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name portainer.geeraert.eu www.portainer.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://portainer_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.portainer.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = portainer.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.portainer.geeraert.eu portainer.geeraert.eu ;\n listen 80;\n return 404;\n\n}", + "prowlarr.conf": "############################################\n# config file for prowlarr\n############################################\n\nupstream prowlarr_backend {\n server prowlarr-svc.servarr.svc:9696;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name prowlarr.tryton.geeraert.eu www.prowlarr.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://prowlarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.prowlarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = prowlarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.prowlarr.tryton.geeraert.eu prowlarr.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for prowlarr\n############################################\n\nupstream prowlarr_backend_root {\n server prowlarr-svc.servarr.svc:9696;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name prowlarr.geeraert.eu www.prowlarr.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://prowlarr_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.prowlarr.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = prowlarr.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.prowlarr.geeraert.eu prowlarr.geeraert.eu ;\n listen 80;\n return 404;\n\n}", + "qbittorrent.conf": "############################################\n# config file for qbittorrent\n############################################\n\nupstream qbittorrent_backend {\n server qbittorrent-svc.servarr.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name qbittorrent.tryton.geeraert.eu www.qbittorrent.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://qbittorrent_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.qbittorrent.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = qbittorrent.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.qbittorrent.tryton.geeraert.eu qbittorrent.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for qbittorrent\n############################################\n\nupstream qbittorrent_backend_root {\n server qbittorrent-svc.servarr.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name qbittorrent.geeraert.eu www.qbittorrent.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://qbittorrent_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.qbittorrent.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = qbittorrent.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.qbittorrent.geeraert.eu qbittorrent.geeraert.eu ;\n listen 80;\n return 404;\n\n}", + "radarr.conf": "############################################\n# config file for radarr\n############################################\n\nupstream radarr_backend {\n server radarr-svc.servarr.svc:7878;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name radarr.tryton.geeraert.eu www.radarr.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://radarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.radarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = radarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.radarr.tryton.geeraert.eu radarr.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for radarr\n############################################\n\nupstream radarr_backend_root {\n server radarr-svc.servarr.svc:7878;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name radarr.geeraert.eu www.radarr.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://radarr_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.radarr.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = radarr.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.radarr.geeraert.eu radarr.geeraert.eu ;\n listen 80;\n return 404;\n\n}", + "redirect-testing.conf": "############################################\n# config file for redirect-testing\n############################################\n\nupstream redirect-testing_backend {\n server django-testing-svc.django-testing.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name redirect-testing.tryton.geeraert.eu www.redirect-testing.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://redirect-testing_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://redirect-testing_backend;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.redirect-testing.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = redirect-testing.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.redirect-testing.tryton.geeraert.eu redirect-testing.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for redirect-testing\n############################################\n\nupstream redirect-testing_backend_root {\n server django-testing-svc.django-testing.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name redirect-testing.geeraert.eu www.redirect-testing.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://redirect-testing_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://redirect-testing_backend_root;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.redirect-testing.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = redirect-testing.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.redirect-testing.geeraert.eu redirect-testing.geeraert.eu ;\n listen 80;\n return 404;\n\n}", + "redirect.conf": "############################################\n# config file for redirect\n############################################\n\nupstream redirect_backend {\n server django-svc.django:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name redirect.tryton.geeraert.eu www.redirect.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://redirect_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://redirect_backend;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.redirect.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = redirect.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.redirect.tryton.geeraert.eu redirect.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for redirect\n############################################\n\nupstream redirect_backend_root {\n server django-svc.django:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name redirect.geeraert.eu www.redirect.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://redirect_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://redirect_backend_root;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.redirect.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = redirect.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.redirect.geeraert.eu redirect.geeraert.eu ;\n listen 80;\n return 404;\n\n}", + "reverse.conf": "############################################\n# config file for reverse\n############################################\n\nupstream reverse_backend {\n server django-svc.django:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name reverse.tryton.geeraert.eu www.reverse.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://reverse_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://reverse_backend;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.reverse.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = reverse.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.reverse.tryton.geeraert.eu reverse.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for reverse\n############################################\n\nupstream reverse_backend_root {\n server django-svc.django:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name reverse.geeraert.eu www.reverse.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://reverse_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://reverse_backend_root;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.reverse.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = reverse.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.reverse.geeraert.eu reverse.geeraert.eu ;\n listen 80;\n return 404;\n\n}", + "router.conf": "############################################\n# config file for router\n############################################\n\nupstream router_backend {\n server 192.168.88.1;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name router.tryton.geeraert.eu www.router.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://router_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n auth_basic \"Administrator’s Area\";\n auth_basic_user_file /authentication-htpasswd/.htpasswd;\n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.router.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = router.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.router.tryton.geeraert.eu router.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for router\n############################################\n\nupstream router_backend_root {\n server 192.168.88.1;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name router.geeraert.eu www.router.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://router_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n auth_basic \"Administrator’s Area\";\n auth_basic_user_file /authentication-htpasswd/.htpasswd;\n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.router.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = router.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.router.geeraert.eu router.geeraert.eu ;\n listen 80;\n return 404;\n\n}", + "sonarr.conf": "############################################\n# config file for sonarr\n############################################\n\nupstream sonarr_backend {\n server sonarr-svc.servarr.svc:8989;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name sonarr.tryton.geeraert.eu www.sonarr.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://sonarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.sonarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = sonarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.sonarr.tryton.geeraert.eu sonarr.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for sonarr\n############################################\n\nupstream sonarr_backend_root {\n server sonarr-svc.servarr.svc:8989;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name sonarr.geeraert.eu www.sonarr.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://sonarr_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.sonarr.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = sonarr.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.sonarr.geeraert.eu sonarr.geeraert.eu ;\n listen 80;\n return 404;\n\n}", + "stash.conf": "############################################\n# config file for stash\n############################################\n\nupstream stash_backend {\n server stash-svc.stash.svc:9999;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name stash.tryton.geeraert.eu www.stash.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://stash_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n #don't use this as this needs to be run as root or have the CAP_NET_RAW capability) to bind to a non-local IP address.\n #Because the backend thinks the request is coming directly from the client, it will try to send the response directly back to that client IP. To prevent this (which would break the connection), you must force the response back through the NGINX server.\n #proxy_bind $remote_addr transparent;\n\n##used to be working\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n proxy_set_header X-Forwarded-Proto $scheme;\n proxy_read_timeout 60000s;\n #working\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_cache_bypass $http_upgrade;\n #end of working\n\n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.stash.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = stash.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.stash.tryton.geeraert.eu stash.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for stash\n############################################\n\nupstream stash_backend_root {\n server stash-svc.stash.svc:9999;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name stash.geeraert.eu www.stash.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://stash_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n #don't use this as this needs to be run as root or have the CAP_NET_RAW capability) to bind to a non-local IP address.\n #Because the backend thinks the request is coming directly from the client, it will try to send the response directly back to that client IP. To prevent this (which would break the connection), you must force the response back through the NGINX server.\n #proxy_bind $remote_addr transparent;\n\n##used to be working\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n proxy_set_header X-Forwarded-Proto $scheme;\n proxy_read_timeout 60000s;\n #working\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_cache_bypass $http_upgrade;\n #end of working\n\n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.stash.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = stash.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.stash.geeraert.eu stash.geeraert.eu ;\n listen 80;\n return 404;\n\n}", + "synology.conf": "############################################\n# config file for synology\n############################################\n\nupstream synology_backend {\n server 192.168.88.39:5000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name synology.tryton.geeraert.eu www.synology.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://synology_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.synology.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = synology.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.synology.tryton.geeraert.eu synology.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for synology\n############################################\n\nupstream synology_backend_root {\n server 192.168.88.39:5000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name synology.geeraert.eu www.synology.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://synology_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.synology.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = synology.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.synology.geeraert.eu synology.geeraert.eu ;\n listen 80;\n return 404;\n\n}", + "unifi-inform.conf": "############################################\n# config file for unifi-inform\n############################################\n\nupstream unifi-inform_backend {\n server 192.168.88.50:8082;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name unifi-inform.tryton.geeraert.eu www.unifi-inform.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://unifi-inform_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.unifi-inform.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = unifi-inform.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.unifi-inform.tryton.geeraert.eu unifi-inform.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for unifi-inform\n############################################\n\nupstream unifi-inform_backend_root {\n server 192.168.88.50:8082;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name unifi-inform.geeraert.eu www.unifi-inform.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://unifi-inform_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.unifi-inform.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = unifi-inform.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.unifi-inform.geeraert.eu unifi-inform.geeraert.eu ;\n listen 80;\n return 404;\n\n}", + "unifi.conf": "############################################\n# config file for unifi\n############################################\n\nupstream unifi_backend {\n server 192.168.88.244:8443;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name unifi.tryton.geeraert.eu www.unifi.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass https://unifi_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.unifi.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = unifi.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.unifi.tryton.geeraert.eu unifi.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for unifi\n############################################\n\nupstream unifi_backend_root {\n server 192.168.88.244:8443;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name unifi.geeraert.eu www.unifi.geeraert.eu;\n\t\n\n location / {\n proxy_pass https://unifi_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.unifi.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = unifi.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.unifi.geeraert.eu unifi.geeraert.eu ;\n listen 80;\n return 404;\n\n}", + "wikijs.conf": "############################################\n# config file for wikijs\n############################################\n\nupstream wikijs_backend {\n server wikijs-svc.wikijs.svc:3000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name wikijs.tryton.geeraert.eu www.wikijs.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://wikijs_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\tclient_max_body_size 20m;\n proxy_request_buffering off;\n\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.wikijs.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = wikijs.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.wikijs.tryton.geeraert.eu wikijs.tryton.geeraert.eu ;\n listen 80;\n return 404;\n\n}############################################\n# config file for wikijs\n############################################\n\nupstream wikijs_backend_root {\n server wikijs-svc.wikijs.svc:3000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name wikijs.geeraert.eu www.wikijs.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://wikijs_backend_root;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\tclient_max_body_size 20m;\n proxy_request_buffering off;\n\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/sslroot/live/geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/sslroot/live/geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.wikijs.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = wikijs.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n server_name www.wikijs.geeraert.eu wikijs.geeraert.eu ;\n listen 80;\n return 404;\n\n}" }, "id": "reverse-proxy/sites-terraform", "immutable": false, @@ -60,7 +60,7 @@ "labels": {}, "name": "sites-terraform", "namespace": "reverse-proxy", - "resource_version": "279632318", + "resource_version": "279632581", "uid": "08aa2108-9dce-4e67-b000-4dc7fbd1c23e" } ]