pi-ux-ce/Reverse_proxy_Nginx
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

file updated due to Terraform, purge some useles files as well

Browse Source
This commit is contained in:
pi-ux-ce
2024-07-30 15:52:47 +01:00
parent 89c5666074
commit 225b60b1fd
21 changed files with 426 additions and 278 deletions
Download Patch File Download Diff File Expand all files Collapse all files
conf.d/bitwarden.tryton.geeraert.eu.conf
Executable → Regular
+2
View File
@@ -12,6 +12,7 @@ server {
location / {
proxy_pass http://bitwarden_backend;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Host $host;
}
@@ -19,6 +20,7 @@ server {
root /var/www/certbot;
}
http2 on;
ssl_protocols TLSv1.2;
conf.d/bookstack.tryton.geeraert.eu.conf
Executable → Regular
+2 -8
View File
@@ -12,21 +12,15 @@ server {
location / {
proxy_pass http://bookstack_backend;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Host $host;
location ~* \.(html|css|jpg|gif|ico|js)$ {
proxy_cache cache;
proxy_cache_key $host$uri$is_args$args;
proxy_cache_valid 200 301 302 30m;
expires 30m;
proxy_pass http://bookstack_backend;
}
}
location /.well-known/acme-challenge/ {
root /var/www/certbot;
}
listen 443 ssl;
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
conf.d/django.tryton.geeraert.eu.conf
Executable → Regular
+2
View File
@@ -12,6 +12,7 @@ server {
location / {
proxy_pass http://django_backend;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Host $host;
location ~* \.(html|css|jpg|gif|ico|js)$ {
@@ -27,6 +28,7 @@ server {
root /var/www/certbot;
}
http2 on;
ssl_protocols TLSv1.2;
conf.d/echo.tryton.geeraert.eu.conf
Executable → Regular
+2
View File
@@ -12,6 +12,7 @@ server {
location / {
proxy_pass http://echo_backend;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Host $host;
location ~* \.(html|css|jpg|gif|ico|js)$ {
@@ -27,6 +28,7 @@ server {
root /var/www/certbot;
}
http2 on;
ssl_protocols TLSv1.2;
conf.d/gitlab.tryton.geeraert.eu.conf
Executable → Regular
+1
View File
@@ -12,6 +12,7 @@ server {
location / {
proxy_pass https://gitlab_backend;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Host $host;
location ~* \.(html|css|jpg|gif|ico|js)$ {
conf.d/homeassistant.tryton.geeraert.eu.conf
+23 -25
View File
@@ -1,46 +1,44 @@
############################################
# config file for homeassistant
############################################
upstream homeassistant_backend {
## docker server
# server 192.168.88.50:8123;
## K8S server
server homeassistant.homeassistant.svc:8123;
#server 192.168.88.52:30009;
server 1.1.1.1 backup;
server homeassistant.homeassistant.svc:8123;
server 1.1.1.1 backup;
}
server {
server_name homeassistant.tryton.geeraert.eu www.homeassistant.tryton.geeraert.eu;
server_name homeassistant.tryton.geeraert.eu www.homeassistant.tryton.geeraert.eu;
location / {
proxy_pass http://homeassistant_backend;
proxy_pass http://homeassistant_backend;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_set_header Host $host;
}
location /.well-known/acme-challenge/ {
root /var/www/certbot;
root /var/www/certbot;
}
listen 443 ssl; # managed by Certbot
listen 443 ssl;
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
}
server {
if ($host = www.homeassistant.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
if ($host = www.homeassistant.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
}
if ($host = homeassistant.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
if ($host = homeassistant.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
}
server_name www.homeassistant.tryton.geeraert.eu homeassistant.tryton.geeraert.eu;
listen 80;
return 404; # managed by Certbot
listen 80;
return 404;
}
conf.d/keycloak.tryton.geeraert.eu.conf
Executable → Regular
+1
View File
@@ -12,6 +12,7 @@ server {
location / {
proxy_pass http://keycloak_backend;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Host $host;
}
conf.d/nextcloud.tryton.geeraert.eu.conf
Executable → Regular
+43 -70
View File
@@ -1,95 +1,68 @@
############################################
# config file for nextcloud
############################################
upstream nextcloud_backend {
# server 192.168.88.43; #IP of old tryton server (physical server)
# server 192.168.88.50:6456; #IP of the docker nextcloud install
server webserver.nextcloud.svc; #using svc dns name
# server 192.168.88.52:31236; #IP of the kubernetes #
# server 1.1.1.1 backup;
server webserver.nextcloud.svc;
server 1.1.1.1 backup;
}
server {
server_name nextcloud.tryton.geeraert.eu www.nextcloud.tryton.geeraert.eu;
server_name nextcloud.tryton.geeraert.eu www.nextcloud.tryton.geeraert.eu;
location / {
proxy_pass http://nextcloud_backend/;
location ~* \.(html|css|jpg|gif|ico|js)$ {
proxy_cache cache;
proxy_cache_key $host$uri$is_args$args;
proxy_cache_valid 200 301 302 30m;
expires 30m;
proxy_pass http://nextcloud_backend;
}
# proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
# proxy_set_header X-Forwarded-Port $server_port;
# proxy_set_header X-Forwarded-Scheme $scheme;
# proxy_set_header X-Forwarded-Proto $scheme;
# proxy_set_header X-Real-IP $remote_addr;
# proxy_set_header Accept-Encoding "";
# proxy_set_header Host $host;
# client_body_buffer_size 512k;
# proxy_read_timeout 86400s;
# client_max_body_size 0;
# Websocket
# proxy_http_version 1.1;
# proxy_set_header Upgrade $http_upgrade;
# proxy_set_header Connection $connection_upgrade;
# proxy_pass_request_headers on;
# proxy_no_cache $cookie_nocache $arg_nocache$arg_comment;
# proxy_no_cache $http_pragma $http_authorization;
# proxy_cache_bypass $cookie_nocache $arg_nocache $arg_comment;
# proxy_cache_bypass $http_pragma $http_authorization;
# proxy_set_header HTTP_AUTHORIZATION $http_authorization;
proxy_pass http://nextcloud_backend;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Host $host;
location ~* \.(html|css|jpg|gif|ico|js)$ {
proxy_cache cache;
proxy_cache_key $host$uri$is_args$args;
proxy_cache_valid 200 301 302 30m;
expires 30m;
proxy_pass http://nextcloud_backend;
}
}
location /.well-known/acme-challenge/ {
root /var/www/certbot;
root /var/www/certbot;
}
location /.well-known/carddav {
return 301 $scheme://$host/remote.php/dav;
}
location /.well-known/caldav {
return 301 $scheme://$host/remote.php/dav;
}
location /.well-known/carddav {
return 301 $scheme://$host/remote.php/dav;
}
location /.well-known/caldav {
return 301 $scheme://$host/remote.php/dav;
}
location = /health {
default_type text/html;
default_type text/html;
return 200 "<!DOCTYPE html><h2>health check</h2>\n";
}
}
# listen 443 ssl; # managed by Certbot
listen 443 ssl;
listen [::]:443 ssl;
http2 on;
ssl_protocols TLSv1.2;
http2 on;
ssl_protocols TLSv1.2;
listen 443 ssl;
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
}
server {
if ($host = www.nextcloud.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
if ($host = www.nextcloud.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
}
if ($host = nextcloud.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
if ($host = nextcloud.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
}
server_name www.nextcloud.tryton.geeraert.eu nextcloud.tryton.geeraert.eu;
listen 80;
return 404; # managed by Certbot
listen 80;
return 404;
}
conf.d/octoprint.tryton.geeraert.eu.conf
+35 -8
View File
@@ -1,17 +1,44 @@
############################################
# config file for octoprint
############################################
upstream octoprint_backend {
server 192.168.1.28:5000;
server 1.1.1.1 backup;
server 192.168.1.28:5000;
server 1.1.1.1 backup;
}
server {
server_name octoprint.tryton.geeraert.eu www.octoprint.tryton.geeraert.eu;
server_name octoprint.tryton.geeraert.eu www.octoprint.tryton.geeraert.eu;
location / {
proxy_pass http://octoprint_backend;
proxy_pass http://octoprint_backend;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Host $host;
}
location /.well-known/acme-challenge/ {
root /var/www/certbot;
root /var/www/certbot;
}
listen 80 ;
}
listen 443 ssl;
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
}
server {
if ($host = www.octoprint.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
}
if ($host = octoprint.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
}
server_name www.octoprint.tryton.geeraert.eu octoprint.tryton.geeraert.eu;
listen 80;
return 404;
}
conf.d/onitama.tryton.geeraert.eu.conf
+35 -24
View File
@@ -1,33 +1,44 @@
############################################
# config file for onitama
############################################
upstream onitama_backend {
server onitama.onitama.svc;
#kube server
#server 192.168.88.52:30007;
#docker server
#server 192.168.88.50:6780;
server 1.1.1.1 backup;
server onitama.onitama.svc;
server 1.1.1.1 backup;
}
server {
server_name onitama.tryton.geeraert.eu www.onitama.tryton.geeraert.eu;
server_name onitama.tryton.geeraert.eu www.onitama.tryton.geeraert.eu;
location / {
# auth_request /auth;
# auth_request_set $auth_status $upstream_status;
# error_page 401 = @handle_unauthorized;
proxy_pass http://onitama_backend;
proxy_pass http://onitama_backend;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Host $host;
}
# location /auth {
# proxy_ssl_server_name on;
# proxy_pass https://keycloak.tryton.geeraert.eu/realms/tryton/protocol/openid-connect/userinfo;
# proxy_pass_request_body off;
# proxy_set_header Content-Length "";
# proxy_set_header X-Original-URI $request_uri;
# }
location /.well-known/acme-challenge/ {
root /var/www/certbot;
root /var/www/certbot;
}
listen 80 ;
}
listen 443 ssl;
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
}
server {
if ($host = www.onitama.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
}
if ($host = onitama.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
}
server_name www.onitama.tryton.geeraert.eu onitama.tryton.geeraert.eu;
listen 80;
return 404;
}
conf.d/paperless-docker.tryton.geeraert.eu.conf
+44
View File
@@ -0,0 +1,44 @@
############################################
# config file for paperless-docker
############################################
upstream paperless-docker_backend {
server 192.168.88.50:4887;
server 1.1.1.1 backup;
}
server {
server_name paperless-docker.tryton.geeraert.eu www.paperless-docker.tryton.geeraert.eu;
location / {
proxy_pass http://paperless-docker_backend;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Host $host;
}
location /.well-known/acme-challenge/ {
root /var/www/certbot;
}
listen 443 ssl;
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
}
server {
if ($host = www.paperless-docker.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
}
if ($host = paperless-docker.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
}
server_name www.paperless-docker.tryton.geeraert.eu paperless-docker.tryton.geeraert.eu;
listen 80;
return 404;
}
conf.d/paperless.tryton.geeraert.eu.conf
Executable → Regular
+22 -16
View File
@@ -1,38 +1,44 @@
#config file for Paperless
############################################
# config file for paperless
############################################
upstream paperless_backend {
server webserver.paperless.svc:8000;
server 1.1.1.1 backup;
}
server {
server_name paperless.tryton.geeraert.eu www.paperless.tryton.geeraert.eu;
server_name paperless.tryton.geeraert.eu www.paperless.tryton.geeraert.eu;
location / {
proxy_pass http://paperless_backend;
proxy_pass http://paperless_backend;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Host $host;
}
location /.well-known/acme-challenge/ {
root /var/www/certbot;
root /var/www/certbot;
}
listen 443 ssl; # managed by Certbot
listen 443 ssl;
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
}
server {
if ($host = www.paperless.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
if ($host = www.paperless.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
}
if ($host = paperless.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
if ($host = paperless.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
}
server_name www.paperless.tryton.geeraert.eu paperless.tryton.geeraert.eu;
listen 80;
return 404; # managed by Certbot
listen 80;
return 404;
}
conf.d/portainer.tryton.geeraert.eu.conf
+24 -21
View File
@@ -1,41 +1,44 @@
############################################
# config file for portainer
############################################
upstream portainer_backend {
server portainer.portainer.svc;
# server 192.168.88.50:9000;
server 1.1.1.1 backup;
server portainer.portainer.svc;
server 1.1.1.1 backup;
}
server {
server_name portainer.tryton.geeraert.eu www.portainer.tryton.geeraert.eu;
server_name portainer.tryton.geeraert.eu www.portainer.tryton.geeraert.eu;
location / {
proxy_pass http://portainer_backend;
proxy_pass http://portainer_backend;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Host $host;
}
location /.well-known/acme-challenge/ {
root /var/www/certbot;
root /var/www/certbot;
}
listen 443 ssl; # managed by Certbot
listen 443 ssl;
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
}
server {
if ($host = www.portainer.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
if ($host = www.portainer.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
}
if ($host = portainer.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
if ($host = portainer.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
}
server_name www.portainer.tryton.geeraert.eu portainer.tryton.geeraert.eu;
listen 80;
return 404; # managed by Certbot
listen 80;
return 404;
}
conf.d/prowlarr.tryton.geeraert.eu.conf
+26 -27
View File
@@ -1,45 +1,44 @@
############################################
# config file for prowlarr
############################################
upstream prowlarr_backend {
server prowlarr.servarr.svc;
# server 192.168.88.52:31884;
# server 1.1.1.1 ;
#backup;
server prowlarr.servarr.svc;
server 1.1.1.1 backup;
}
server {
server_name prowlarr.tryton.geeraert.eu www.prowlarr.tryton.geeraert.eu;
server_name prowlarr.tryton.geeraert.eu www.prowlarr.tryton.geeraert.eu;
location / {
proxy_pass http://prowlarr_backend;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $connection_upgrade;
proxy_pass http://prowlarr_backend;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Host $host;
}
location /.well-known/acme-challenge/ {
root /var/www/certbot;
root /var/www/certbot;
}
listen 443 ssl; # managed by Certbot
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
listen 443 ssl;
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
}
server {
if ($host = www.prowlarr.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
if ($host = www.prowlarr.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
}
if ($host = prowlarr.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
if ($host = prowlarr.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
}
server_name www.prowlarr.tryton.geeraert.eu prowlarr.tryton.geeraert.eu;
listen 80;
return 404; # managed by Certbot
listen 80;
return 404;
}
conf.d/qbittorrent.tryton.geeraert.eu.conf
+24 -21
View File
@@ -1,41 +1,44 @@
############################################
# config file for qbittorrent
############################################
upstream qbittorrent_backend {
server qbittorrent.servarr.svc:8080;
# server 192.168.88.52:30302;
server 1.1.1.1 backup;
server qbittorrent.servarr.svc:8080;
server 1.1.1.1 backup;
}
server {
server_name qbittorrent.tryton.geeraert.eu www.qbittorrent.tryton.geeraert.eu;
server_name qbittorrent.tryton.geeraert.eu www.qbittorrent.tryton.geeraert.eu;
location / {
proxy_pass http://qbittorrent_backend;
proxy_pass http://qbittorrent_backend;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Host $host;
}
location /.well-known/acme-challenge/ {
root /var/www/certbot;
root /var/www/certbot;
}
listen 443 ssl; # managed by Certbot
listen 443 ssl;
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
}
server {
if ($host = www.qbittorrent.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
if ($host = www.qbittorrent.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
}
if ($host = qbittorrent.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
if ($host = qbittorrent.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
}
server_name www.qbittorrent.tryton.geeraert.eu qbittorrent.tryton.geeraert.eu;
listen 80;
return 404; # managed by Certbot
listen 80;
return 404;
}
conf.d/radarr.tryton.geeraert.eu.conf
+24 -36
View File
@@ -1,56 +1,44 @@
############################################
# config file for radarr
############################################
upstream radarr_backend {
server radarr.servarr.svc;
# server 192.168.88.50:7878;
server 192.168.88.52:31084;
server 1.1.1.1 backup;
server radarr.servarr.svc;
server 1.1.1.1 backup;
}
server {
server_name radarr.tryton.geeraert.eu www.radarr.tryton.geeraert.eu;
server_name radarr.tryton.geeraert.eu www.radarr.tryton.geeraert.eu;
location / {
# auth_request /auth;
# auth_request_set $auth_status $upstream_status;
proxy_pass http://radarr_backend;
proxy_pass http://radarr_backend;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Host $host;
}
# location /auth {
# proxy_ssl_server_name on;
# proxy_pass https://keycloak.tryton.geeraert.eu/realms/tryton/protocol/openid-connect/userinfo;
# proxy_pass_request_body off;
# proxy_set_header Content-Length "";
# proxy_set_header X-Original-URI $request_uri;
# }
location /.well-known/acme-challenge/ {
root /var/www/certbot;
root /var/www/certbot;
}
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $http_connection;
listen 443 ssl; # managed by Certbot
listen 443 ssl;
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
}
server {
if ($host = www.radarr.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
if ($host = www.radarr.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
}
if ($host = radarr.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
if ($host = radarr.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
}
server_name www.radarr.tryton.geeraert.eu radarr.tryton.geeraert.eu;
listen 80;
return 404; # managed by Certbot
listen 80;
return 404;
}
conf.d/router.tryton.geeraert.eu.conf
Executable → Regular
+2
View File
@@ -12,6 +12,7 @@ server {
location / {
proxy_pass http://router_backend;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Host $host;
auth_basic "Administrator’s Area";
auth_basic_user_file /authentication-htpasswd/.htpasswd;
@@ -22,6 +23,7 @@ server {
root /var/www/certbot;
}
listen 443 ssl;
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
conf.d/sickchill.tryton.geeraert.eu.conf
+24 -22
View File
@@ -1,42 +1,44 @@
############################################
# config file for sickchill
############################################
upstream sickchill_backend {
server sickchill.servarr.svc;
# server 192.168.88.52:30865;
# server 192.168.88.50:8081;
server 1.1.1.1 backup;
server sickchill.servarr.svc;
server 1.1.1.1 backup;
}
server {
server_name sickchill.tryton.geeraert.eu www.sickchill.tryton.geeraert.eu;
server_name sickchill.tryton.geeraert.eu www.sickchill.tryton.geeraert.eu;
location / {
proxy_pass http://sickchill_backend;
proxy_pass http://sickchill_backend;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Host $host;
}
location /.well-known/acme-challenge/ {
root /var/www/certbot;
root /var/www/certbot;
}
listen 443 ssl; # managed by Certbot
listen 443 ssl;
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
}
server {
if ($host = www.sickchill.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
if ($host = www.sickchill.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
}
if ($host = sickchill.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
if ($host = sickchill.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
}
server_name www.sickchill.tryton.geeraert.eu sickchill.tryton.geeraert.eu;
listen 80;
return 404; # managed by Certbot
listen 80;
return 404;
}
conf.d/sonarr.tryton.geeraert.eu.conf
Executable → Regular
+2
View File
@@ -12,6 +12,7 @@ server {
location / {
proxy_pass http://sonarr_backend;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Host $host;
}
@@ -19,6 +20,7 @@ server {
root /var/www/certbot;
}
listen 443 ssl;
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
conf.d/unifi-inform.tryton.geeraert.eu.conf
+44
View File
@@ -0,0 +1,44 @@
############################################
# config file for unifi-inform
############################################
upstream unifi-inform_backend {
server 192.168.88.50:8082;
server 1.1.1.1 backup;
}
server {
server_name unifi-inform.tryton.geeraert.eu www.unifi-inform.tryton.geeraert.eu;
location / {
proxy_pass http://unifi-inform_backend;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Host $host;
}
location /.well-known/acme-challenge/ {
root /var/www/certbot;
}
listen 443 ssl;
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
}
server {
if ($host = www.unifi-inform.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
}
if ($host = unifi-inform.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
}
server_name www.unifi-inform.tryton.geeraert.eu unifi-inform.tryton.geeraert.eu;
listen 80;
return 404;
}
conf.d/unifi.tryton.geeraert.eu.conf
+44
View File
@@ -0,0 +1,44 @@
############################################
# config file for unifi
############################################
upstream unifi_backend {
server 192.168.88.52:31043;
server 1.1.1.1 backup;
}
server {
server_name unifi.tryton.geeraert.eu www.unifi.tryton.geeraert.eu;
location / {
proxy_pass http://unifi_backend;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Host $host;
}
location /.well-known/acme-challenge/ {
root /var/www/certbot;
}
listen 443 ssl;
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
}
server {
if ($host = www.unifi.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
}
if ($host = unifi.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
}
server_name www.unifi.tryton.geeraert.eu unifi.tryton.geeraert.eu;
listen 80;
return 404;
}