From 225b60b1fd68b182e27c661420097b522117478e Mon Sep 17 00:00:00 2001
From: pierre <pierre@geeraert.eu>
Date: Tue, 30 Jul 2024 15:52:47 +0100
Subject: [PATCH] file updated due to Terraform, purge some useles files as
 well

---
 conf.d/bitwarden.tryton.geeraert.eu.conf      |   2 +
 conf.d/bookstack.tryton.geeraert.eu.conf      |  10 +-
 conf.d/django.tryton.geeraert.eu.conf         |   2 +
 conf.d/echo.tryton.geeraert.eu.conf           |   2 +
 conf.d/gitlab.tryton.geeraert.eu.conf         |   1 +
 conf.d/homeassistant.tryton.geeraert.eu.conf  |  48 ++++----
 conf.d/keycloak.tryton.geeraert.eu.conf       |   1 +
 conf.d/nextcloud.tryton.geeraert.eu.conf      | 113 +++++++-----------
 conf.d/octoprint.tryton.geeraert.eu.conf      |  43 +++++--
 conf.d/onitama.tryton.geeraert.eu.conf        |  59 +++++----
 .../paperless-docker.tryton.geeraert.eu.conf  |  44 +++++++
 conf.d/paperless.tryton.geeraert.eu.conf      |  38 +++---
 conf.d/portainer.tryton.geeraert.eu.conf      |  45 +++----
 conf.d/prowlarr.tryton.geeraert.eu.conf       |  53 ++++----
 conf.d/qbittorrent.tryton.geeraert.eu.conf    |  45 +++----
 conf.d/radarr.tryton.geeraert.eu.conf         |  60 ++++------
 conf.d/router.tryton.geeraert.eu.conf         |   2 +
 conf.d/sickchill.tryton.geeraert.eu.conf      |  46 +++----
 conf.d/sonarr.tryton.geeraert.eu.conf         |   2 +
 conf.d/unifi-inform.tryton.geeraert.eu.conf   |  44 +++++++
 conf.d/unifi.tryton.geeraert.eu.conf          |  44 +++++++
 21 files changed, 426 insertions(+), 278 deletions(-)
 mode change 100755 => 100644 conf.d/bitwarden.tryton.geeraert.eu.conf
 mode change 100755 => 100644 conf.d/bookstack.tryton.geeraert.eu.conf
 mode change 100755 => 100644 conf.d/django.tryton.geeraert.eu.conf
 mode change 100755 => 100644 conf.d/echo.tryton.geeraert.eu.conf
 mode change 100755 => 100644 conf.d/gitlab.tryton.geeraert.eu.conf
 mode change 100755 => 100644 conf.d/keycloak.tryton.geeraert.eu.conf
 mode change 100755 => 100644 conf.d/nextcloud.tryton.geeraert.eu.conf
 create mode 100644 conf.d/paperless-docker.tryton.geeraert.eu.conf
 mode change 100755 => 100644 conf.d/paperless.tryton.geeraert.eu.conf
 mode change 100755 => 100644 conf.d/router.tryton.geeraert.eu.conf
 mode change 100755 => 100644 conf.d/sonarr.tryton.geeraert.eu.conf
 create mode 100644 conf.d/unifi-inform.tryton.geeraert.eu.conf
 create mode 100644 conf.d/unifi.tryton.geeraert.eu.conf

diff --git a/conf.d/bitwarden.tryton.geeraert.eu.conf b/conf.d/bitwarden.tryton.geeraert.eu.conf
old mode 100755
new mode 100644
index 8e4c61f..f6952a2
--- a/conf.d/bitwarden.tryton.geeraert.eu.conf
+++ b/conf.d/bitwarden.tryton.geeraert.eu.conf
@@ -12,6 +12,7 @@ server {
         location / {
                 proxy_pass http://bitwarden_backend;
                 proxy_set_header    Upgrade     $http_upgrade;
+		proxy_set_header Host $host;
 		
                 
         }
@@ -19,6 +20,7 @@ server {
                 root /var/www/certbot;
         }
 
+	
         http2 on;
         ssl_protocols TLSv1.2;
 
diff --git a/conf.d/bookstack.tryton.geeraert.eu.conf b/conf.d/bookstack.tryton.geeraert.eu.conf
old mode 100755
new mode 100644
index ff2572e..863ec25
--- a/conf.d/bookstack.tryton.geeraert.eu.conf
+++ b/conf.d/bookstack.tryton.geeraert.eu.conf
@@ -12,21 +12,15 @@ server {
         location / {
                 proxy_pass http://bookstack_backend;
                 proxy_set_header    Upgrade     $http_upgrade;
+		proxy_set_header Host $host;
 		
                 
-                location ~* \.(html|css|jpg|gif|ico|js)$ {
-	                proxy_cache          cache;
-	                proxy_cache_key      $host$uri$is_args$args;
-	                proxy_cache_valid    200 301 302 30m;
-	                expires              30m;
-	                proxy_pass  http://bookstack_backend;
-		}
-                
         }
         location /.well-known/acme-challenge/ {
                 root /var/www/certbot;
         }
 
+	
 
         listen 443 ssl;
         ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
diff --git a/conf.d/django.tryton.geeraert.eu.conf b/conf.d/django.tryton.geeraert.eu.conf
old mode 100755
new mode 100644
index 90fc690..849c099
--- a/conf.d/django.tryton.geeraert.eu.conf
+++ b/conf.d/django.tryton.geeraert.eu.conf
@@ -12,6 +12,7 @@ server {
         location / {
                 proxy_pass http://django_backend;
                 proxy_set_header    Upgrade     $http_upgrade;
+		proxy_set_header Host $host;
 		
                 
                 location ~* \.(html|css|jpg|gif|ico|js)$ {
@@ -27,6 +28,7 @@ server {
                 root /var/www/certbot;
         }
 
+	
         http2 on;
         ssl_protocols TLSv1.2;
 
diff --git a/conf.d/echo.tryton.geeraert.eu.conf b/conf.d/echo.tryton.geeraert.eu.conf
old mode 100755
new mode 100644
index d4ccb49..c3ead3a
--- a/conf.d/echo.tryton.geeraert.eu.conf
+++ b/conf.d/echo.tryton.geeraert.eu.conf
@@ -12,6 +12,7 @@ server {
         location / {
                 proxy_pass http://echo_backend;
                 proxy_set_header    Upgrade     $http_upgrade;
+		proxy_set_header Host $host;
 		
                 
                 location ~* \.(html|css|jpg|gif|ico|js)$ {
@@ -27,6 +28,7 @@ server {
                 root /var/www/certbot;
         }
 
+	
         http2 on;
         ssl_protocols TLSv1.2;
 
diff --git a/conf.d/gitlab.tryton.geeraert.eu.conf b/conf.d/gitlab.tryton.geeraert.eu.conf
old mode 100755
new mode 100644
index 3924e53..4943c71
--- a/conf.d/gitlab.tryton.geeraert.eu.conf
+++ b/conf.d/gitlab.tryton.geeraert.eu.conf
@@ -12,6 +12,7 @@ server {
         location / {
                 proxy_pass https://gitlab_backend;
                 proxy_set_header    Upgrade     $http_upgrade;
+		proxy_set_header Host $host;
 		
                 
                 location ~* \.(html|css|jpg|gif|ico|js)$ {
diff --git a/conf.d/homeassistant.tryton.geeraert.eu.conf b/conf.d/homeassistant.tryton.geeraert.eu.conf
index d29fbfc..7441be1 100644
--- a/conf.d/homeassistant.tryton.geeraert.eu.conf
+++ b/conf.d/homeassistant.tryton.geeraert.eu.conf
@@ -1,46 +1,44 @@
+############################################
+#       config file for homeassistant
+############################################
+
 upstream homeassistant_backend {
-## docker server
-#       server 192.168.88.50:8123;
-## K8S server
-	server homeassistant.homeassistant.svc:8123;
-	#server 192.168.88.52:30009;
-	server 1.1.1.1 backup;
+        server homeassistant.homeassistant.svc:8123;
+        server 1.1.1.1 backup;
     }
 
 server {
-	server_name homeassistant.tryton.geeraert.eu www.homeassistant.tryton.geeraert.eu;
+        server_name homeassistant.tryton.geeraert.eu www.homeassistant.tryton.geeraert.eu;
         location / {
-		proxy_pass http://homeassistant_backend;
+                proxy_pass http://homeassistant_backend;
                 proxy_set_header    Upgrade     $http_upgrade;
-                proxy_set_header    Connection  "upgrade";
+		proxy_set_header Host $host;
+		
+                
         }
         location /.well-known/acme-challenge/ {
-		root /var/www/certbot;
+                root /var/www/certbot;
         }
+
 	
-	listen 443 ssl; # managed by Certbot
+
+        listen 443 ssl;
         ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
         ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
-	#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
-	#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
-
 
 }
 server {
-    if ($host = www.homeassistant.tryton.geeraert.eu) {
-        return 301 https://$host$request_uri;
-    } # managed by Certbot
+        if ($host = www.homeassistant.tryton.geeraert.eu) {
+                return 301 https://$host$request_uri;
+        }
 
 
-    if ($host = homeassistant.tryton.geeraert.eu) {
-        return 301 https://$host$request_uri;
-    } # managed by Certbot
-
+        if ($host = homeassistant.tryton.geeraert.eu) {
+                return 301 https://$host$request_uri;
+        }
 
         server_name www.homeassistant.tryton.geeraert.eu homeassistant.tryton.geeraert.eu;
-    listen 80;
-    return 404; # managed by Certbot
+        listen 80;
+        return 404;
 
 }
-
-
diff --git a/conf.d/keycloak.tryton.geeraert.eu.conf b/conf.d/keycloak.tryton.geeraert.eu.conf
old mode 100755
new mode 100644
index 297e56c..9937b89
--- a/conf.d/keycloak.tryton.geeraert.eu.conf
+++ b/conf.d/keycloak.tryton.geeraert.eu.conf
@@ -12,6 +12,7 @@ server {
         location / {
                 proxy_pass http://keycloak_backend;
                 proxy_set_header    Upgrade     $http_upgrade;
+		proxy_set_header Host $host;
 		
                 
         }
diff --git a/conf.d/nextcloud.tryton.geeraert.eu.conf b/conf.d/nextcloud.tryton.geeraert.eu.conf
old mode 100755
new mode 100644
index 5af77ce..1b44622
--- a/conf.d/nextcloud.tryton.geeraert.eu.conf
+++ b/conf.d/nextcloud.tryton.geeraert.eu.conf
@@ -1,95 +1,68 @@
+############################################
+#       config file for nextcloud
+############################################
+
 upstream nextcloud_backend {
-#       server 192.168.88.43; #IP of old tryton server (physical server)
-#       server 192.168.88.50:6456; #IP of the docker nextcloud install
-	server webserver.nextcloud.svc; #using svc dns name	
-#	server 192.168.88.52:31236; #IP of the kubernetes #
-#	server 1.1.1.1 backup;
+        server webserver.nextcloud.svc;
+        server 1.1.1.1 backup;
     }
 
 server {
-	server_name nextcloud.tryton.geeraert.eu www.nextcloud.tryton.geeraert.eu;
+        server_name nextcloud.tryton.geeraert.eu www.nextcloud.tryton.geeraert.eu;
         location / {
-		proxy_pass http://nextcloud_backend/;
-		location ~* \.(html|css|jpg|gif|ico|js)$ {
-                        proxy_cache          cache;
-                        proxy_cache_key      $host$uri$is_args$args;
-                        proxy_cache_valid    200 301 302 30m;
-                        expires              30m;
-                        proxy_pass  http://nextcloud_backend;
-                 }
-
-
-#        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-#        proxy_set_header X-Forwarded-Port $server_port;
-#        proxy_set_header X-Forwarded-Scheme $scheme;
-#        proxy_set_header X-Forwarded-Proto $scheme;
-#        proxy_set_header X-Real-IP $remote_addr;
-#        proxy_set_header Accept-Encoding "";
-#        proxy_set_header Host $host;
-    
-#        client_body_buffer_size 512k;
-#        proxy_read_timeout 86400s;
-#        client_max_body_size 0;
-
-        # Websocket
- #       proxy_http_version 1.1;
- #       proxy_set_header Upgrade $http_upgrade;
- #       proxy_set_header Connection $connection_upgrade;
-
-
-
-#		proxy_pass_request_headers on;
-#		proxy_no_cache $cookie_nocache  $arg_nocache$arg_comment;
-#		proxy_no_cache $http_pragma     $http_authorization;
-#		proxy_cache_bypass $cookie_nocache $arg_nocache $arg_comment;
-#		proxy_cache_bypass $http_pragma $http_authorization;
-#		proxy_set_header HTTP_AUTHORIZATION $http_authorization;
-
+                proxy_pass http://nextcloud_backend;
+                proxy_set_header    Upgrade     $http_upgrade;
+		proxy_set_header Host $host;
+		
+                
+                location ~* \.(html|css|jpg|gif|ico|js)$ {
+	                proxy_cache          cache;
+	                proxy_cache_key      $host$uri$is_args$args;
+	                proxy_cache_valid    200 301 302 30m;
+	                expires              30m;
+	                proxy_pass  http://nextcloud_backend;
+		}
+                
         }
         location /.well-known/acme-challenge/ {
-		root /var/www/certbot;
+                root /var/www/certbot;
         }
-	location /.well-known/carddav {
-		return 301 $scheme://$host/remote.php/dav;
-	}
 
-	location /.well-known/caldav {
-		return 301 $scheme://$host/remote.php/dav;
-	}
+	
+
+        location /.well-known/carddav {
+                return 301 $scheme://$host/remote.php/dav;
+        }
+
+        location /.well-known/caldav {
+                return 301 $scheme://$host/remote.php/dav;
+        }
 
         location = /health {
-		default_type text/html;
+                default_type text/html;
                 return 200 "<!DOCTYPE html><h2>health check</h2>\n";
-        }	
+        }
 
-#	listen 443 ssl; # managed by Certbot
-	listen 443 ssl;
-	listen [::]:443 ssl;
-	http2 on;
-	ssl_protocols TLSv1.2;
+        http2 on;
+        ssl_protocols TLSv1.2;
 
+        listen 443 ssl;
         ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
         ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
-	#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
-	#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
-
 
 }
 server {
-    if ($host = www.nextcloud.tryton.geeraert.eu) {
-        return 301 https://$host$request_uri;
-    } # managed by Certbot
+        if ($host = www.nextcloud.tryton.geeraert.eu) {
+                return 301 https://$host$request_uri;
+        }
 
 
-    if ($host = nextcloud.tryton.geeraert.eu) {
-        return 301 https://$host$request_uri;
-    } # managed by Certbot
-
+        if ($host = nextcloud.tryton.geeraert.eu) {
+                return 301 https://$host$request_uri;
+        }
 
         server_name www.nextcloud.tryton.geeraert.eu nextcloud.tryton.geeraert.eu;
-    listen 80;
-    return 404; # managed by Certbot
+        listen 80;
+        return 404;
 
 }
-
-
diff --git a/conf.d/octoprint.tryton.geeraert.eu.conf b/conf.d/octoprint.tryton.geeraert.eu.conf
index 0602a1b..056a23a 100644
--- a/conf.d/octoprint.tryton.geeraert.eu.conf
+++ b/conf.d/octoprint.tryton.geeraert.eu.conf
@@ -1,17 +1,44 @@
+############################################
+#       config file for octoprint
+############################################
+
 upstream octoprint_backend {
-       server 192.168.1.28:5000;
-       server 1.1.1.1 backup;
+        server 192.168.1.28:5000;
+        server 1.1.1.1 backup;
     }
 
 server {
-	server_name octoprint.tryton.geeraert.eu www.octoprint.tryton.geeraert.eu;
+        server_name octoprint.tryton.geeraert.eu www.octoprint.tryton.geeraert.eu;
         location / {
-		proxy_pass http://octoprint_backend;
+                proxy_pass http://octoprint_backend;
+                proxy_set_header    Upgrade     $http_upgrade;
+		proxy_set_header Host $host;
+		
+                
         }
         location /.well-known/acme-challenge/ {
-		root /var/www/certbot;
+                root /var/www/certbot;
         }
-	
-	listen 80 ; 
-}
 
+	
+
+        listen 443 ssl;
+        ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
+        ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
+
+}
+server {
+        if ($host = www.octoprint.tryton.geeraert.eu) {
+                return 301 https://$host$request_uri;
+        }
+
+
+        if ($host = octoprint.tryton.geeraert.eu) {
+                return 301 https://$host$request_uri;
+        }
+
+        server_name www.octoprint.tryton.geeraert.eu octoprint.tryton.geeraert.eu;
+        listen 80;
+        return 404;
+
+}
diff --git a/conf.d/onitama.tryton.geeraert.eu.conf b/conf.d/onitama.tryton.geeraert.eu.conf
index e45d61f..8d8236f 100644
--- a/conf.d/onitama.tryton.geeraert.eu.conf
+++ b/conf.d/onitama.tryton.geeraert.eu.conf
@@ -1,33 +1,44 @@
+############################################
+#       config file for onitama
+############################################
+
 upstream onitama_backend {
-	server onitama.onitama.svc;
-	#kube server       
-	#server 192.168.88.52:30007;
-	#docker server
-	#server 192.168.88.50:6780;
-	server 1.1.1.1 backup;
+        server onitama.onitama.svc;
+        server 1.1.1.1 backup;
     }
 
 server {
-	server_name onitama.tryton.geeraert.eu www.onitama.tryton.geeraert.eu;
+        server_name onitama.tryton.geeraert.eu www.onitama.tryton.geeraert.eu;
         location / {
-#		auth_request /auth;
-#		auth_request_set $auth_status $upstream_status;
-#		error_page 401 = @handle_unauthorized;
-		proxy_pass http://onitama_backend;
+                proxy_pass http://onitama_backend;
+                proxy_set_header    Upgrade     $http_upgrade;
+		proxy_set_header Host $host;
+		
+                
         }
-#        location /auth {
-#                proxy_ssl_server_name on;
-#                proxy_pass  https://keycloak.tryton.geeraert.eu/realms/tryton/protocol/openid-connect/userinfo;
-#                proxy_pass_request_body off;
-#                proxy_set_header Content-Length "";
-#                proxy_set_header X-Original-URI $request_uri;
- #       }
-
-
         location /.well-known/acme-challenge/ {
-		root /var/www/certbot;
+                root /var/www/certbot;
         }
-	
-	listen 80 ; 
-}
 
+	
+
+        listen 443 ssl;
+        ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
+        ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
+
+}
+server {
+        if ($host = www.onitama.tryton.geeraert.eu) {
+                return 301 https://$host$request_uri;
+        }
+
+
+        if ($host = onitama.tryton.geeraert.eu) {
+                return 301 https://$host$request_uri;
+        }
+
+        server_name www.onitama.tryton.geeraert.eu onitama.tryton.geeraert.eu;
+        listen 80;
+        return 404;
+
+}
diff --git a/conf.d/paperless-docker.tryton.geeraert.eu.conf b/conf.d/paperless-docker.tryton.geeraert.eu.conf
new file mode 100644
index 0000000..bf3c2a6
--- /dev/null
+++ b/conf.d/paperless-docker.tryton.geeraert.eu.conf
@@ -0,0 +1,44 @@
+############################################
+#       config file for paperless-docker
+############################################
+
+upstream paperless-docker_backend {
+        server 192.168.88.50:4887;
+        server 1.1.1.1 backup;
+    }
+
+server {
+        server_name paperless-docker.tryton.geeraert.eu www.paperless-docker.tryton.geeraert.eu;
+        location / {
+                proxy_pass http://paperless-docker_backend;
+                proxy_set_header    Upgrade     $http_upgrade;
+		proxy_set_header Host $host;
+		
+                
+        }
+        location /.well-known/acme-challenge/ {
+                root /var/www/certbot;
+        }
+
+	
+
+        listen 443 ssl;
+        ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
+        ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
+
+}
+server {
+        if ($host = www.paperless-docker.tryton.geeraert.eu) {
+                return 301 https://$host$request_uri;
+        }
+
+
+        if ($host = paperless-docker.tryton.geeraert.eu) {
+                return 301 https://$host$request_uri;
+        }
+
+        server_name www.paperless-docker.tryton.geeraert.eu paperless-docker.tryton.geeraert.eu;
+        listen 80;
+        return 404;
+
+}
diff --git a/conf.d/paperless.tryton.geeraert.eu.conf b/conf.d/paperless.tryton.geeraert.eu.conf
old mode 100755
new mode 100644
index 43a95b5..00a669b
--- a/conf.d/paperless.tryton.geeraert.eu.conf
+++ b/conf.d/paperless.tryton.geeraert.eu.conf
@@ -1,38 +1,44 @@
-#config file for Paperless
+############################################
+#       config file for paperless
+############################################
+
 upstream paperless_backend {
         server webserver.paperless.svc:8000;
         server 1.1.1.1 backup;
     }
 
 server {
-	server_name paperless.tryton.geeraert.eu www.paperless.tryton.geeraert.eu;
+        server_name paperless.tryton.geeraert.eu www.paperless.tryton.geeraert.eu;
         location / {
-		proxy_pass http://paperless_backend;
+                proxy_pass http://paperless_backend;
+                proxy_set_header    Upgrade     $http_upgrade;
+		proxy_set_header Host $host;
+		
+                
         }
         location /.well-known/acme-challenge/ {
-		root /var/www/certbot;
+                root /var/www/certbot;
         }
+
 	
-	listen 443 ssl; # managed by Certbot
+
+        listen 443 ssl;
         ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
         ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
 
 }
 server {
-    if ($host = www.paperless.tryton.geeraert.eu) {
-        return 301 https://$host$request_uri;
-    } # managed by Certbot
+        if ($host = www.paperless.tryton.geeraert.eu) {
+                return 301 https://$host$request_uri;
+        }
 
 
-    if ($host = paperless.tryton.geeraert.eu) {
-        return 301 https://$host$request_uri;
-    } # managed by Certbot
-
+        if ($host = paperless.tryton.geeraert.eu) {
+                return 301 https://$host$request_uri;
+        }
 
         server_name www.paperless.tryton.geeraert.eu paperless.tryton.geeraert.eu;
-    listen 80;
-    return 404; # managed by Certbot
+        listen 80;
+        return 404;
 
 }
-
-
diff --git a/conf.d/portainer.tryton.geeraert.eu.conf b/conf.d/portainer.tryton.geeraert.eu.conf
index e4b1a9e..14a3a12 100644
--- a/conf.d/portainer.tryton.geeraert.eu.conf
+++ b/conf.d/portainer.tryton.geeraert.eu.conf
@@ -1,41 +1,44 @@
+############################################
+#       config file for portainer
+############################################
+
 upstream portainer_backend {
-	server portainer.portainer.svc;
-#	server 192.168.88.50:9000;
-	server 1.1.1.1 backup;
+        server portainer.portainer.svc;
+        server 1.1.1.1 backup;
     }
 
 server {
-	server_name portainer.tryton.geeraert.eu www.portainer.tryton.geeraert.eu;
+        server_name portainer.tryton.geeraert.eu www.portainer.tryton.geeraert.eu;
         location / {
-		proxy_pass http://portainer_backend;
+                proxy_pass http://portainer_backend;
+                proxy_set_header    Upgrade     $http_upgrade;
+		proxy_set_header Host $host;
+		
+                
         }
         location /.well-known/acme-challenge/ {
-		root /var/www/certbot;
+                root /var/www/certbot;
         }
+
 	
-	listen 443 ssl; # managed by Certbot
+
+        listen 443 ssl;
         ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
         ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
-	#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
-	#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
-
 
 }
 server {
-    if ($host = www.portainer.tryton.geeraert.eu) {
-        return 301 https://$host$request_uri;
-    } # managed by Certbot
+        if ($host = www.portainer.tryton.geeraert.eu) {
+                return 301 https://$host$request_uri;
+        }
 
 
-    if ($host = portainer.tryton.geeraert.eu) {
-        return 301 https://$host$request_uri;
-    } # managed by Certbot
-
+        if ($host = portainer.tryton.geeraert.eu) {
+                return 301 https://$host$request_uri;
+        }
 
         server_name www.portainer.tryton.geeraert.eu portainer.tryton.geeraert.eu;
-    listen 80;
-    return 404; # managed by Certbot
+        listen 80;
+        return 404;
 
 }
-
-
diff --git a/conf.d/prowlarr.tryton.geeraert.eu.conf b/conf.d/prowlarr.tryton.geeraert.eu.conf
index 4380892..426fbd2 100644
--- a/conf.d/prowlarr.tryton.geeraert.eu.conf
+++ b/conf.d/prowlarr.tryton.geeraert.eu.conf
@@ -1,45 +1,44 @@
+############################################
+#       config file for prowlarr
+############################################
+
 upstream prowlarr_backend {
-	server prowlarr.servarr.svc;
-#       server 192.168.88.52:31884;
-#       server 1.1.1.1 ;
-#backup;
+        server prowlarr.servarr.svc;
+        server 1.1.1.1 backup;
     }
 
 server {
-	server_name prowlarr.tryton.geeraert.eu www.prowlarr.tryton.geeraert.eu;
+        server_name prowlarr.tryton.geeraert.eu www.prowlarr.tryton.geeraert.eu;
         location / {
-		proxy_pass http://prowlarr_backend;
-		proxy_http_version 1.1;
-	        proxy_set_header Upgrade $http_upgrade;
-		proxy_set_header Connection $connection_upgrade;
+                proxy_pass http://prowlarr_backend;
+                proxy_set_header    Upgrade     $http_upgrade;
+		proxy_set_header Host $host;
+		
+                
         }
         location /.well-known/acme-challenge/ {
-		root /var/www/certbot;
+                root /var/www/certbot;
         }
-	
-	listen 443 ssl; # managed by Certbot
-	ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
-	ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
-	#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
-	#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
 
+	
+
+        listen 443 ssl;
+        ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
+        ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
 
 }
 server {
-    if ($host = www.prowlarr.tryton.geeraert.eu) {
-        return 301 https://$host$request_uri;
-    } # managed by Certbot
+        if ($host = www.prowlarr.tryton.geeraert.eu) {
+                return 301 https://$host$request_uri;
+        }
 
 
-    if ($host = prowlarr.tryton.geeraert.eu) {
-        return 301 https://$host$request_uri;
-    } # managed by Certbot
-
+        if ($host = prowlarr.tryton.geeraert.eu) {
+                return 301 https://$host$request_uri;
+        }
 
         server_name www.prowlarr.tryton.geeraert.eu prowlarr.tryton.geeraert.eu;
-    listen 80;
-    return 404; # managed by Certbot
+        listen 80;
+        return 404;
 
 }
-
-
diff --git a/conf.d/qbittorrent.tryton.geeraert.eu.conf b/conf.d/qbittorrent.tryton.geeraert.eu.conf
index 9bb6e90..a4d4d63 100644
--- a/conf.d/qbittorrent.tryton.geeraert.eu.conf
+++ b/conf.d/qbittorrent.tryton.geeraert.eu.conf
@@ -1,41 +1,44 @@
+############################################
+#       config file for qbittorrent
+############################################
+
 upstream qbittorrent_backend {
-	server qbittorrent.servarr.svc:8080;
-#       server 192.168.88.52:30302;
-       server 1.1.1.1 backup;
+        server qbittorrent.servarr.svc:8080;
+        server 1.1.1.1 backup;
     }
 
 server {
-	server_name qbittorrent.tryton.geeraert.eu www.qbittorrent.tryton.geeraert.eu;
+        server_name qbittorrent.tryton.geeraert.eu www.qbittorrent.tryton.geeraert.eu;
         location / {
-		proxy_pass http://qbittorrent_backend;
+                proxy_pass http://qbittorrent_backend;
+                proxy_set_header    Upgrade     $http_upgrade;
+		proxy_set_header Host $host;
+		
+                
         }
         location /.well-known/acme-challenge/ {
-		root /var/www/certbot;
+                root /var/www/certbot;
         }
+
 	
-	listen 443 ssl; # managed by Certbot
+
+        listen 443 ssl;
         ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
         ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
-	#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
-	#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
-
 
 }
 server {
-    if ($host = www.qbittorrent.tryton.geeraert.eu) {
-        return 301 https://$host$request_uri;
-    } # managed by Certbot
+        if ($host = www.qbittorrent.tryton.geeraert.eu) {
+                return 301 https://$host$request_uri;
+        }
 
 
-    if ($host = qbittorrent.tryton.geeraert.eu) {
-        return 301 https://$host$request_uri;
-    } # managed by Certbot
-
+        if ($host = qbittorrent.tryton.geeraert.eu) {
+                return 301 https://$host$request_uri;
+        }
 
         server_name www.qbittorrent.tryton.geeraert.eu qbittorrent.tryton.geeraert.eu;
-    listen 80;
-    return 404; # managed by Certbot
+        listen 80;
+        return 404;
 
 }
-
-
diff --git a/conf.d/radarr.tryton.geeraert.eu.conf b/conf.d/radarr.tryton.geeraert.eu.conf
index 8411dad..23f684f 100644
--- a/conf.d/radarr.tryton.geeraert.eu.conf
+++ b/conf.d/radarr.tryton.geeraert.eu.conf
@@ -1,56 +1,44 @@
+############################################
+#       config file for radarr
+############################################
+
 upstream radarr_backend {
-	server radarr.servarr.svc;
-#       server 192.168.88.50:7878;
-       server 192.168.88.52:31084;
-       server 1.1.1.1 backup;
+        server radarr.servarr.svc;
+        server 1.1.1.1 backup;
     }
 
 server {
-	server_name radarr.tryton.geeraert.eu www.radarr.tryton.geeraert.eu;
+        server_name radarr.tryton.geeraert.eu www.radarr.tryton.geeraert.eu;
         location / {
-#                auth_request /auth;
-#                auth_request_set $auth_status $upstream_status;
-
-		proxy_pass http://radarr_backend;
+                proxy_pass http://radarr_backend;
+                proxy_set_header    Upgrade     $http_upgrade;
+		proxy_set_header Host $host;
+		
+                
         }
- #       location /auth {
-#		proxy_ssl_server_name on;
-#		proxy_pass  https://keycloak.tryton.geeraert.eu/realms/tryton/protocol/openid-connect/userinfo;
-#		proxy_pass_request_body off;
-#		proxy_set_header Content-Length "";
-#		proxy_set_header X-Original-URI $request_uri;
-#	}
-
         location /.well-known/acme-challenge/ {
-		root /var/www/certbot;
+                root /var/www/certbot;
         }
 
-        proxy_http_version 1.1;
-        proxy_set_header Upgrade $http_upgrade;
-        proxy_set_header Connection $http_connection;	
-	listen 443 ssl; # managed by Certbot
+	
+
+        listen 443 ssl;
         ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
         ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
-	#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
-	#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
-
 
 }
 server {
-    if ($host = www.radarr.tryton.geeraert.eu) {
-        return 301 https://$host$request_uri;
-    } # managed by Certbot
+        if ($host = www.radarr.tryton.geeraert.eu) {
+                return 301 https://$host$request_uri;
+        }
 
 
-    if ($host = radarr.tryton.geeraert.eu) {
-        return 301 https://$host$request_uri;
-    } # managed by Certbot
-
+        if ($host = radarr.tryton.geeraert.eu) {
+                return 301 https://$host$request_uri;
+        }
 
         server_name www.radarr.tryton.geeraert.eu radarr.tryton.geeraert.eu;
-    listen 80;
-    return 404; # managed by Certbot
+        listen 80;
+        return 404;
 
 }
-
-
diff --git a/conf.d/router.tryton.geeraert.eu.conf b/conf.d/router.tryton.geeraert.eu.conf
old mode 100755
new mode 100644
index b45317c..cc090e7
--- a/conf.d/router.tryton.geeraert.eu.conf
+++ b/conf.d/router.tryton.geeraert.eu.conf
@@ -12,6 +12,7 @@ server {
         location / {
                 proxy_pass http://router_backend;
                 proxy_set_header    Upgrade     $http_upgrade;
+		proxy_set_header Host $host;
 		
                 auth_basic "Administrator’s Area";
                 auth_basic_user_file /authentication-htpasswd/.htpasswd;
@@ -22,6 +23,7 @@ server {
                 root /var/www/certbot;
         }
 
+	
 
         listen 443 ssl;
         ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
diff --git a/conf.d/sickchill.tryton.geeraert.eu.conf b/conf.d/sickchill.tryton.geeraert.eu.conf
index b79cc61..a4ccac2 100644
--- a/conf.d/sickchill.tryton.geeraert.eu.conf
+++ b/conf.d/sickchill.tryton.geeraert.eu.conf
@@ -1,42 +1,44 @@
+############################################
+#       config file for sickchill
+############################################
+
 upstream sickchill_backend {
-	server sickchill.servarr.svc;
-#       server 192.168.88.52:30865;
-#       server 192.168.88.50:8081;
-       server 1.1.1.1 backup;
+        server sickchill.servarr.svc;
+        server 1.1.1.1 backup;
     }
 
 server {
-	server_name sickchill.tryton.geeraert.eu www.sickchill.tryton.geeraert.eu;
+        server_name sickchill.tryton.geeraert.eu www.sickchill.tryton.geeraert.eu;
         location / {
-		proxy_pass http://sickchill_backend;
+                proxy_pass http://sickchill_backend;
+                proxy_set_header    Upgrade     $http_upgrade;
+		proxy_set_header Host $host;
+		
+                
         }
         location /.well-known/acme-challenge/ {
-		root /var/www/certbot;
+                root /var/www/certbot;
         }
+
 	
-	listen 443 ssl; # managed by Certbot
+
+        listen 443 ssl;
         ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
         ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
-	#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
-	#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
-
 
 }
 server {
-    if ($host = www.sickchill.tryton.geeraert.eu) {
-        return 301 https://$host$request_uri;
-    } # managed by Certbot
+        if ($host = www.sickchill.tryton.geeraert.eu) {
+                return 301 https://$host$request_uri;
+        }
 
 
-    if ($host = sickchill.tryton.geeraert.eu) {
-        return 301 https://$host$request_uri;
-    } # managed by Certbot
-
+        if ($host = sickchill.tryton.geeraert.eu) {
+                return 301 https://$host$request_uri;
+        }
 
         server_name www.sickchill.tryton.geeraert.eu sickchill.tryton.geeraert.eu;
-    listen 80;
-    return 404; # managed by Certbot
+        listen 80;
+        return 404;
 
 }
-
-
diff --git a/conf.d/sonarr.tryton.geeraert.eu.conf b/conf.d/sonarr.tryton.geeraert.eu.conf
old mode 100755
new mode 100644
index 0511843..3d179fe
--- a/conf.d/sonarr.tryton.geeraert.eu.conf
+++ b/conf.d/sonarr.tryton.geeraert.eu.conf
@@ -12,6 +12,7 @@ server {
         location / {
                 proxy_pass http://sonarr_backend;
                 proxy_set_header    Upgrade     $http_upgrade;
+		proxy_set_header Host $host;
 		
                 
         }
@@ -19,6 +20,7 @@ server {
                 root /var/www/certbot;
         }
 
+	
 
         listen 443 ssl;
         ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
diff --git a/conf.d/unifi-inform.tryton.geeraert.eu.conf b/conf.d/unifi-inform.tryton.geeraert.eu.conf
new file mode 100644
index 0000000..8645100
--- /dev/null
+++ b/conf.d/unifi-inform.tryton.geeraert.eu.conf
@@ -0,0 +1,44 @@
+############################################
+#       config file for unifi-inform
+############################################
+
+upstream unifi-inform_backend {
+        server 192.168.88.50:8082;
+        server 1.1.1.1 backup;
+    }
+
+server {
+        server_name unifi-inform.tryton.geeraert.eu www.unifi-inform.tryton.geeraert.eu;
+        location / {
+                proxy_pass http://unifi-inform_backend;
+                proxy_set_header    Upgrade     $http_upgrade;
+		proxy_set_header Host $host;
+		
+                
+        }
+        location /.well-known/acme-challenge/ {
+                root /var/www/certbot;
+        }
+
+	
+
+        listen 443 ssl;
+        ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
+        ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
+
+}
+server {
+        if ($host = www.unifi-inform.tryton.geeraert.eu) {
+                return 301 https://$host$request_uri;
+        }
+
+
+        if ($host = unifi-inform.tryton.geeraert.eu) {
+                return 301 https://$host$request_uri;
+        }
+
+        server_name www.unifi-inform.tryton.geeraert.eu unifi-inform.tryton.geeraert.eu;
+        listen 80;
+        return 404;
+
+}
diff --git a/conf.d/unifi.tryton.geeraert.eu.conf b/conf.d/unifi.tryton.geeraert.eu.conf
new file mode 100644
index 0000000..154bb38
--- /dev/null
+++ b/conf.d/unifi.tryton.geeraert.eu.conf
@@ -0,0 +1,44 @@
+############################################
+#       config file for unifi
+############################################
+
+upstream unifi_backend {
+        server 192.168.88.52:31043;
+        server 1.1.1.1 backup;
+    }
+
+server {
+        server_name unifi.tryton.geeraert.eu www.unifi.tryton.geeraert.eu;
+        location / {
+                proxy_pass http://unifi_backend;
+                proxy_set_header    Upgrade     $http_upgrade;
+		proxy_set_header Host $host;
+		
+                
+        }
+        location /.well-known/acme-challenge/ {
+                root /var/www/certbot;
+        }
+
+	
+
+        listen 443 ssl;
+        ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
+        ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
+
+}
+server {
+        if ($host = www.unifi.tryton.geeraert.eu) {
+                return 301 https://$host$request_uri;
+        }
+
+
+        if ($host = unifi.tryton.geeraert.eu) {
+                return 301 https://$host$request_uri;
+        }
+
+        server_name www.unifi.tryton.geeraert.eu unifi.tryton.geeraert.eu;
+        listen 80;
+        return 404;
+
+}