pi-ux-ce/Reverse_proxy_Nginx
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

file updated due to Terraform, purge some useles files as well

Browse Source
This commit is contained in:
pi-ux-ce
2024-07-30 15:52:47 +01:00
parent 89c5666074
commit 225b60b1fd
21 changed files with 426 additions and 278 deletions
Download Patch File Download Diff File Expand all files Collapse all files
conf.d/bitwarden.tryton.geeraert.eu.conf
Executable → Regular
+2
View File
@@ -12,6 +12,7 @@ server {
location / { location / {
proxy_pass http://bitwarden_backend; proxy_pass http://bitwarden_backend;
proxy_set_header Upgrade $http_upgrade; proxy_set_header Upgrade $http_upgrade;
proxy_set_header Host $host;
} }
@@ -19,6 +20,7 @@ server {
root /var/www/certbot; root /var/www/certbot;
} }
http2 on; http2 on;
ssl_protocols TLSv1.2; ssl_protocols TLSv1.2;
conf.d/bookstack.tryton.geeraert.eu.conf
Executable → Regular
+2 -8
View File
@@ -12,22 +12,16 @@ server {
location / { location / {
proxy_pass http://bookstack_backend; proxy_pass http://bookstack_backend;
proxy_set_header Upgrade $http_upgrade; proxy_set_header Upgrade $http_upgrade;
proxy_set_header Host $host;
location ~* \.(html|css|jpg|gif|ico|js)$ {
proxy_cache cache;
proxy_cache_key $host$uri$is_args$args;
proxy_cache_valid 200 301 302 30m;
expires 30m;
proxy_pass http://bookstack_backend;
}
} }
location /.well-known/acme-challenge/ { location /.well-known/acme-challenge/ {
root /var/www/certbot; root /var/www/certbot;
} }
listen 443 ssl; listen 443 ssl;
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem; ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem; ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
conf.d/django.tryton.geeraert.eu.conf
Executable → Regular
+2
View File
@@ -12,6 +12,7 @@ server {
location / { location / {
proxy_pass http://django_backend; proxy_pass http://django_backend;
proxy_set_header Upgrade $http_upgrade; proxy_set_header Upgrade $http_upgrade;
proxy_set_header Host $host;
location ~* \.(html|css|jpg|gif|ico|js)$ { location ~* \.(html|css|jpg|gif|ico|js)$ {
@@ -27,6 +28,7 @@ server {
root /var/www/certbot; root /var/www/certbot;
} }
http2 on; http2 on;
ssl_protocols TLSv1.2; ssl_protocols TLSv1.2;
conf.d/echo.tryton.geeraert.eu.conf
Executable → Regular
+2
View File
@@ -12,6 +12,7 @@ server {
location / { location / {
proxy_pass http://echo_backend; proxy_pass http://echo_backend;
proxy_set_header Upgrade $http_upgrade; proxy_set_header Upgrade $http_upgrade;
proxy_set_header Host $host;
location ~* \.(html|css|jpg|gif|ico|js)$ { location ~* \.(html|css|jpg|gif|ico|js)$ {
@@ -27,6 +28,7 @@ server {
root /var/www/certbot; root /var/www/certbot;
} }
http2 on; http2 on;
ssl_protocols TLSv1.2; ssl_protocols TLSv1.2;
conf.d/gitlab.tryton.geeraert.eu.conf
Executable → Regular
+1
View File
@@ -12,6 +12,7 @@ server {
location / { location / {
proxy_pass https://gitlab_backend; proxy_pass https://gitlab_backend;
proxy_set_header Upgrade $http_upgrade; proxy_set_header Upgrade $http_upgrade;
proxy_set_header Host $host;
location ~* \.(html|css|jpg|gif|ico|js)$ { location ~* \.(html|css|jpg|gif|ico|js)$ {
conf.d/homeassistant.tryton.geeraert.eu.conf
+23 -25
View File
@@ -1,46 +1,44 @@
############################################
# config file for homeassistant
############################################
upstream homeassistant_backend { upstream homeassistant_backend {
## docker server server homeassistant.homeassistant.svc:8123;
# server 192.168.88.50:8123; server 1.1.1.1 backup;
## K8S server
server homeassistant.homeassistant.svc:8123;
#server 192.168.88.52:30009;
server 1.1.1.1 backup;
} }
server { server {
server_name homeassistant.tryton.geeraert.eu www.homeassistant.tryton.geeraert.eu; server_name homeassistant.tryton.geeraert.eu www.homeassistant.tryton.geeraert.eu;
location / { location / {
proxy_pass http://homeassistant_backend; proxy_pass http://homeassistant_backend;
proxy_set_header Upgrade $http_upgrade; proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade"; proxy_set_header Host $host;
} }
location /.well-known/acme-challenge/ { location /.well-known/acme-challenge/ {
root /var/www/certbot; root /var/www/certbot;
} }
listen 443 ssl; # managed by Certbot
listen 443 ssl;
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem; ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem; ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
} }
server { server {
if ($host = www.homeassistant.tryton.geeraert.eu) { if ($host = www.homeassistant.tryton.geeraert.eu) {
return 301 https://$host$request_uri; return 301 https://$host$request_uri;
} # managed by Certbot }
if ($host = homeassistant.tryton.geeraert.eu) { if ($host = homeassistant.tryton.geeraert.eu) {
return 301 https://$host$request_uri; return 301 https://$host$request_uri;
} # managed by Certbot }
server_name www.homeassistant.tryton.geeraert.eu homeassistant.tryton.geeraert.eu; server_name www.homeassistant.tryton.geeraert.eu homeassistant.tryton.geeraert.eu;
listen 80; listen 80;
return 404; # managed by Certbot return 404;
} }
conf.d/keycloak.tryton.geeraert.eu.conf
Executable → Regular
+1
View File
@@ -12,6 +12,7 @@ server {
location / { location / {
proxy_pass http://keycloak_backend; proxy_pass http://keycloak_backend;
proxy_set_header Upgrade $http_upgrade; proxy_set_header Upgrade $http_upgrade;
proxy_set_header Host $host;
} }
conf.d/nextcloud.tryton.geeraert.eu.conf
Executable → Regular
+39 -66
View File
@@ -1,95 +1,68 @@
############################################
# config file for nextcloud
############################################
upstream nextcloud_backend { upstream nextcloud_backend {
# server 192.168.88.43; #IP of old tryton server (physical server) server webserver.nextcloud.svc;
# server 192.168.88.50:6456; #IP of the docker nextcloud install server 1.1.1.1 backup;
server webserver.nextcloud.svc; #using svc dns name
# server 192.168.88.52:31236; #IP of the kubernetes #
# server 1.1.1.1 backup;
} }
server { server {
server_name nextcloud.tryton.geeraert.eu www.nextcloud.tryton.geeraert.eu; server_name nextcloud.tryton.geeraert.eu www.nextcloud.tryton.geeraert.eu;
location / { location / {
proxy_pass http://nextcloud_backend/; proxy_pass http://nextcloud_backend;
location ~* \.(html|css|jpg|gif|ico|js)$ { proxy_set_header Upgrade $http_upgrade;
proxy_cache cache; proxy_set_header Host $host;
proxy_cache_key $host$uri$is_args$args;
proxy_cache_valid 200 301 302 30m;
expires 30m;
proxy_pass http://nextcloud_backend;
}
# proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; location ~* \.(html|css|jpg|gif|ico|js)$ {
# proxy_set_header X-Forwarded-Port $server_port; proxy_cache cache;
# proxy_set_header X-Forwarded-Scheme $scheme; proxy_cache_key $host$uri$is_args$args;
# proxy_set_header X-Forwarded-Proto $scheme; proxy_cache_valid 200 301 302 30m;
# proxy_set_header X-Real-IP $remote_addr; expires 30m;
# proxy_set_header Accept-Encoding ""; proxy_pass http://nextcloud_backend;
# proxy_set_header Host $host; }
# client_body_buffer_size 512k;
# proxy_read_timeout 86400s;
# client_max_body_size 0;
# Websocket
# proxy_http_version 1.1;
# proxy_set_header Upgrade $http_upgrade;
# proxy_set_header Connection $connection_upgrade;
# proxy_pass_request_headers on;
# proxy_no_cache $cookie_nocache $arg_nocache$arg_comment;
# proxy_no_cache $http_pragma $http_authorization;
# proxy_cache_bypass $cookie_nocache $arg_nocache $arg_comment;
# proxy_cache_bypass $http_pragma $http_authorization;
# proxy_set_header HTTP_AUTHORIZATION $http_authorization;
} }
location /.well-known/acme-challenge/ { location /.well-known/acme-challenge/ {
root /var/www/certbot; root /var/www/certbot;
} }
location /.well-known/carddav {
return 301 $scheme://$host/remote.php/dav;
}
location /.well-known/caldav {
return 301 $scheme://$host/remote.php/dav;
} location /.well-known/carddav {
return 301 $scheme://$host/remote.php/dav;
}
location /.well-known/caldav {
return 301 $scheme://$host/remote.php/dav;
}
location = /health { location = /health {
default_type text/html; default_type text/html;
return 200 "<!DOCTYPE html><h2>health check</h2>\n"; return 200 "<!DOCTYPE html><h2>health check</h2>\n";
} }
# listen 443 ssl; # managed by Certbot http2 on;
listen 443 ssl; ssl_protocols TLSv1.2;
listen [::]:443 ssl;
http2 on;
ssl_protocols TLSv1.2;
listen 443 ssl;
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem; ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem; ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
} }
server { server {
if ($host = www.nextcloud.tryton.geeraert.eu) { if ($host = www.nextcloud.tryton.geeraert.eu) {
return 301 https://$host$request_uri; return 301 https://$host$request_uri;
} # managed by Certbot }
if ($host = nextcloud.tryton.geeraert.eu) { if ($host = nextcloud.tryton.geeraert.eu) {
return 301 https://$host$request_uri; return 301 https://$host$request_uri;
} # managed by Certbot }
server_name www.nextcloud.tryton.geeraert.eu nextcloud.tryton.geeraert.eu; server_name www.nextcloud.tryton.geeraert.eu nextcloud.tryton.geeraert.eu;
listen 80; listen 80;
return 404; # managed by Certbot return 404;
} }
conf.d/octoprint.tryton.geeraert.eu.conf
+34 -7
View File
@@ -1,17 +1,44 @@
############################################
# config file for octoprint
############################################
upstream octoprint_backend { upstream octoprint_backend {
server 192.168.1.28:5000; server 192.168.1.28:5000;
server 1.1.1.1 backup; server 1.1.1.1 backup;
} }
server { server {
server_name octoprint.tryton.geeraert.eu www.octoprint.tryton.geeraert.eu; server_name octoprint.tryton.geeraert.eu www.octoprint.tryton.geeraert.eu;
location / { location / {
proxy_pass http://octoprint_backend; proxy_pass http://octoprint_backend;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Host $host;
} }
location /.well-known/acme-challenge/ { location /.well-known/acme-challenge/ {
root /var/www/certbot; root /var/www/certbot;
} }
listen 80 ;
}
listen 443 ssl;
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
}
server {
if ($host = www.octoprint.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
}
if ($host = octoprint.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
}
server_name www.octoprint.tryton.geeraert.eu octoprint.tryton.geeraert.eu;
listen 80;
return 404;
}
conf.d/onitama.tryton.geeraert.eu.conf
+34 -23
View File
@@ -1,33 +1,44 @@
############################################
# config file for onitama
############################################
upstream onitama_backend { upstream onitama_backend {
server onitama.onitama.svc; server onitama.onitama.svc;
#kube server server 1.1.1.1 backup;
#server 192.168.88.52:30007;
#docker server
#server 192.168.88.50:6780;
server 1.1.1.1 backup;
} }
server { server {
server_name onitama.tryton.geeraert.eu www.onitama.tryton.geeraert.eu; server_name onitama.tryton.geeraert.eu www.onitama.tryton.geeraert.eu;
location / { location / {
# auth_request /auth; proxy_pass http://onitama_backend;
# auth_request_set $auth_status $upstream_status; proxy_set_header Upgrade $http_upgrade;
# error_page 401 = @handle_unauthorized; proxy_set_header Host $host;
proxy_pass http://onitama_backend;
} }
# location /auth {
# proxy_ssl_server_name on;
# proxy_pass https://keycloak.tryton.geeraert.eu/realms/tryton/protocol/openid-connect/userinfo;
# proxy_pass_request_body off;
# proxy_set_header Content-Length "";
# proxy_set_header X-Original-URI $request_uri;
# }
location /.well-known/acme-challenge/ { location /.well-known/acme-challenge/ {
root /var/www/certbot; root /var/www/certbot;
} }
listen 80 ;
}
listen 443 ssl;
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
}
server {
if ($host = www.onitama.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
}
if ($host = onitama.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
}
server_name www.onitama.tryton.geeraert.eu onitama.tryton.geeraert.eu;
listen 80;
return 404;
}
conf.d/paperless-docker.tryton.geeraert.eu.conf
+44
View File
@@ -0,0 +1,44 @@
############################################
# config file for paperless-docker
############################################
upstream paperless-docker_backend {
server 192.168.88.50:4887;
server 1.1.1.1 backup;
}
server {
server_name paperless-docker.tryton.geeraert.eu www.paperless-docker.tryton.geeraert.eu;
location / {
proxy_pass http://paperless-docker_backend;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Host $host;
}
location /.well-known/acme-challenge/ {
root /var/www/certbot;
}
listen 443 ssl;
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
}
server {
if ($host = www.paperless-docker.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
}
if ($host = paperless-docker.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
}
server_name www.paperless-docker.tryton.geeraert.eu paperless-docker.tryton.geeraert.eu;
listen 80;
return 404;
}
conf.d/paperless.tryton.geeraert.eu.conf
Executable → Regular
+22 -16
View File
@@ -1,38 +1,44 @@
#config file for Paperless ############################################
# config file for paperless
############################################
upstream paperless_backend { upstream paperless_backend {
server webserver.paperless.svc:8000; server webserver.paperless.svc:8000;
server 1.1.1.1 backup; server 1.1.1.1 backup;
} }
server { server {
server_name paperless.tryton.geeraert.eu www.paperless.tryton.geeraert.eu; server_name paperless.tryton.geeraert.eu www.paperless.tryton.geeraert.eu;
location / { location / {
proxy_pass http://paperless_backend; proxy_pass http://paperless_backend;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Host $host;
} }
location /.well-known/acme-challenge/ { location /.well-known/acme-challenge/ {
root /var/www/certbot; root /var/www/certbot;
} }
listen 443 ssl; # managed by Certbot
listen 443 ssl;
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem; ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem; ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
} }
server { server {
if ($host = www.paperless.tryton.geeraert.eu) { if ($host = www.paperless.tryton.geeraert.eu) {
return 301 https://$host$request_uri; return 301 https://$host$request_uri;
} # managed by Certbot }
if ($host = paperless.tryton.geeraert.eu) { if ($host = paperless.tryton.geeraert.eu) {
return 301 https://$host$request_uri; return 301 https://$host$request_uri;
} # managed by Certbot }
server_name www.paperless.tryton.geeraert.eu paperless.tryton.geeraert.eu; server_name www.paperless.tryton.geeraert.eu paperless.tryton.geeraert.eu;
listen 80; listen 80;
return 404; # managed by Certbot return 404;
} }
conf.d/portainer.tryton.geeraert.eu.conf
+24 -21
View File
@@ -1,41 +1,44 @@
############################################
# config file for portainer
############################################
upstream portainer_backend { upstream portainer_backend {
server portainer.portainer.svc; server portainer.portainer.svc;
# server 192.168.88.50:9000; server 1.1.1.1 backup;
server 1.1.1.1 backup;
} }
server { server {
server_name portainer.tryton.geeraert.eu www.portainer.tryton.geeraert.eu; server_name portainer.tryton.geeraert.eu www.portainer.tryton.geeraert.eu;
location / { location / {
proxy_pass http://portainer_backend; proxy_pass http://portainer_backend;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Host $host;
} }
location /.well-known/acme-challenge/ { location /.well-known/acme-challenge/ {
root /var/www/certbot; root /var/www/certbot;
} }
listen 443 ssl; # managed by Certbot
listen 443 ssl;
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem; ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem; ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
} }
server { server {
if ($host = www.portainer.tryton.geeraert.eu) { if ($host = www.portainer.tryton.geeraert.eu) {
return 301 https://$host$request_uri; return 301 https://$host$request_uri;
} # managed by Certbot }
if ($host = portainer.tryton.geeraert.eu) { if ($host = portainer.tryton.geeraert.eu) {
return 301 https://$host$request_uri; return 301 https://$host$request_uri;
} # managed by Certbot }
server_name www.portainer.tryton.geeraert.eu portainer.tryton.geeraert.eu; server_name www.portainer.tryton.geeraert.eu portainer.tryton.geeraert.eu;
listen 80; listen 80;
return 404; # managed by Certbot return 404;
} }
conf.d/prowlarr.tryton.geeraert.eu.conf
+25 -26
View File
@@ -1,45 +1,44 @@
############################################
# config file for prowlarr
############################################
upstream prowlarr_backend { upstream prowlarr_backend {
server prowlarr.servarr.svc; server prowlarr.servarr.svc;
# server 192.168.88.52:31884; server 1.1.1.1 backup;
# server 1.1.1.1 ;
#backup;
} }
server { server {
server_name prowlarr.tryton.geeraert.eu www.prowlarr.tryton.geeraert.eu; server_name prowlarr.tryton.geeraert.eu www.prowlarr.tryton.geeraert.eu;
location / { location / {
proxy_pass http://prowlarr_backend; proxy_pass http://prowlarr_backend;
proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade;
proxy_set_header Upgrade $http_upgrade; proxy_set_header Host $host;
proxy_set_header Connection $connection_upgrade;
} }
location /.well-known/acme-challenge/ { location /.well-known/acme-challenge/ {
root /var/www/certbot; root /var/www/certbot;
} }
listen 443 ssl; # managed by Certbot
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
listen 443 ssl;
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
} }
server { server {
if ($host = www.prowlarr.tryton.geeraert.eu) { if ($host = www.prowlarr.tryton.geeraert.eu) {
return 301 https://$host$request_uri; return 301 https://$host$request_uri;
} # managed by Certbot }
if ($host = prowlarr.tryton.geeraert.eu) { if ($host = prowlarr.tryton.geeraert.eu) {
return 301 https://$host$request_uri; return 301 https://$host$request_uri;
} # managed by Certbot }
server_name www.prowlarr.tryton.geeraert.eu prowlarr.tryton.geeraert.eu; server_name www.prowlarr.tryton.geeraert.eu prowlarr.tryton.geeraert.eu;
listen 80; listen 80;
return 404; # managed by Certbot return 404;
} }
conf.d/qbittorrent.tryton.geeraert.eu.conf
+24 -21
View File
@@ -1,41 +1,44 @@
############################################
# config file for qbittorrent
############################################
upstream qbittorrent_backend { upstream qbittorrent_backend {
server qbittorrent.servarr.svc:8080; server qbittorrent.servarr.svc:8080;
# server 192.168.88.52:30302; server 1.1.1.1 backup;
server 1.1.1.1 backup;
} }
server { server {
server_name qbittorrent.tryton.geeraert.eu www.qbittorrent.tryton.geeraert.eu; server_name qbittorrent.tryton.geeraert.eu www.qbittorrent.tryton.geeraert.eu;
location / { location / {
proxy_pass http://qbittorrent_backend; proxy_pass http://qbittorrent_backend;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Host $host;
} }
location /.well-known/acme-challenge/ { location /.well-known/acme-challenge/ {
root /var/www/certbot; root /var/www/certbot;
} }
listen 443 ssl; # managed by Certbot
listen 443 ssl;
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem; ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem; ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
} }
server { server {
if ($host = www.qbittorrent.tryton.geeraert.eu) { if ($host = www.qbittorrent.tryton.geeraert.eu) {
return 301 https://$host$request_uri; return 301 https://$host$request_uri;
} # managed by Certbot }
if ($host = qbittorrent.tryton.geeraert.eu) { if ($host = qbittorrent.tryton.geeraert.eu) {
return 301 https://$host$request_uri; return 301 https://$host$request_uri;
} # managed by Certbot }
server_name www.qbittorrent.tryton.geeraert.eu qbittorrent.tryton.geeraert.eu; server_name www.qbittorrent.tryton.geeraert.eu qbittorrent.tryton.geeraert.eu;
listen 80; listen 80;
return 404; # managed by Certbot return 404;
} }
conf.d/radarr.tryton.geeraert.eu.conf
+23 -35
View File
@@ -1,56 +1,44 @@
############################################
# config file for radarr
############################################
upstream radarr_backend { upstream radarr_backend {
server radarr.servarr.svc; server radarr.servarr.svc;
# server 192.168.88.50:7878; server 1.1.1.1 backup;
server 192.168.88.52:31084;
server 1.1.1.1 backup;
} }
server { server {
server_name radarr.tryton.geeraert.eu www.radarr.tryton.geeraert.eu; server_name radarr.tryton.geeraert.eu www.radarr.tryton.geeraert.eu;
location / { location / {
# auth_request /auth; proxy_pass http://radarr_backend;
# auth_request_set $auth_status $upstream_status; proxy_set_header Upgrade $http_upgrade;
proxy_set_header Host $host;
proxy_pass http://radarr_backend;
} }
# location /auth {
# proxy_ssl_server_name on;
# proxy_pass https://keycloak.tryton.geeraert.eu/realms/tryton/protocol/openid-connect/userinfo;
# proxy_pass_request_body off;
# proxy_set_header Content-Length "";
# proxy_set_header X-Original-URI $request_uri;
# }
location /.well-known/acme-challenge/ { location /.well-known/acme-challenge/ {
root /var/www/certbot; root /var/www/certbot;
} }
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $http_connection; listen 443 ssl;
listen 443 ssl; # managed by Certbot
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem; ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem; ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
} }
server { server {
if ($host = www.radarr.tryton.geeraert.eu) { if ($host = www.radarr.tryton.geeraert.eu) {
return 301 https://$host$request_uri; return 301 https://$host$request_uri;
} # managed by Certbot }
if ($host = radarr.tryton.geeraert.eu) { if ($host = radarr.tryton.geeraert.eu) {
return 301 https://$host$request_uri; return 301 https://$host$request_uri;
} # managed by Certbot }
server_name www.radarr.tryton.geeraert.eu radarr.tryton.geeraert.eu; server_name www.radarr.tryton.geeraert.eu radarr.tryton.geeraert.eu;
listen 80; listen 80;
return 404; # managed by Certbot return 404;
} }
conf.d/router.tryton.geeraert.eu.conf
Executable → Regular
+2
View File
@@ -12,6 +12,7 @@ server {
location / { location / {
proxy_pass http://router_backend; proxy_pass http://router_backend;
proxy_set_header Upgrade $http_upgrade; proxy_set_header Upgrade $http_upgrade;
proxy_set_header Host $host;
auth_basic "Administrator’s Area"; auth_basic "Administrator’s Area";
auth_basic_user_file /authentication-htpasswd/.htpasswd; auth_basic_user_file /authentication-htpasswd/.htpasswd;
@@ -23,6 +24,7 @@ server {
} }
listen 443 ssl; listen 443 ssl;
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem; ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem; ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
conf.d/sickchill.tryton.geeraert.eu.conf
+24 -22
View File
@@ -1,42 +1,44 @@
############################################
# config file for sickchill
############################################
upstream sickchill_backend { upstream sickchill_backend {
server sickchill.servarr.svc; server sickchill.servarr.svc;
# server 192.168.88.52:30865; server 1.1.1.1 backup;
# server 192.168.88.50:8081;
server 1.1.1.1 backup;
} }
server { server {
server_name sickchill.tryton.geeraert.eu www.sickchill.tryton.geeraert.eu; server_name sickchill.tryton.geeraert.eu www.sickchill.tryton.geeraert.eu;
location / { location / {
proxy_pass http://sickchill_backend; proxy_pass http://sickchill_backend;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Host $host;
} }
location /.well-known/acme-challenge/ { location /.well-known/acme-challenge/ {
root /var/www/certbot; root /var/www/certbot;
} }
listen 443 ssl; # managed by Certbot
listen 443 ssl;
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem; ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem; ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
} }
server { server {
if ($host = www.sickchill.tryton.geeraert.eu) { if ($host = www.sickchill.tryton.geeraert.eu) {
return 301 https://$host$request_uri; return 301 https://$host$request_uri;
} # managed by Certbot }
if ($host = sickchill.tryton.geeraert.eu) { if ($host = sickchill.tryton.geeraert.eu) {
return 301 https://$host$request_uri; return 301 https://$host$request_uri;
} # managed by Certbot }
server_name www.sickchill.tryton.geeraert.eu sickchill.tryton.geeraert.eu; server_name www.sickchill.tryton.geeraert.eu sickchill.tryton.geeraert.eu;
listen 80; listen 80;
return 404; # managed by Certbot return 404;
} }
conf.d/sonarr.tryton.geeraert.eu.conf
Executable → Regular
+2
View File
@@ -12,6 +12,7 @@ server {
location / { location / {
proxy_pass http://sonarr_backend; proxy_pass http://sonarr_backend;
proxy_set_header Upgrade $http_upgrade; proxy_set_header Upgrade $http_upgrade;
proxy_set_header Host $host;
} }
@@ -20,6 +21,7 @@ server {
} }
listen 443 ssl; listen 443 ssl;
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem; ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem; ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
conf.d/unifi-inform.tryton.geeraert.eu.conf
+44
View File
@@ -0,0 +1,44 @@
############################################
# config file for unifi-inform
############################################
upstream unifi-inform_backend {
server 192.168.88.50:8082;
server 1.1.1.1 backup;
}
server {
server_name unifi-inform.tryton.geeraert.eu www.unifi-inform.tryton.geeraert.eu;
location / {
proxy_pass http://unifi-inform_backend;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Host $host;
}
location /.well-known/acme-challenge/ {
root /var/www/certbot;
}
listen 443 ssl;
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
}
server {
if ($host = www.unifi-inform.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
}
if ($host = unifi-inform.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
}
server_name www.unifi-inform.tryton.geeraert.eu unifi-inform.tryton.geeraert.eu;
listen 80;
return 404;
}
conf.d/unifi.tryton.geeraert.eu.conf
+44
View File
@@ -0,0 +1,44 @@
############################################
# config file for unifi
############################################
upstream unifi_backend {
server 192.168.88.52:31043;
server 1.1.1.1 backup;
}
server {
server_name unifi.tryton.geeraert.eu www.unifi.tryton.geeraert.eu;
location / {
proxy_pass http://unifi_backend;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Host $host;
}
location /.well-known/acme-challenge/ {
root /var/www/certbot;
}
listen 443 ssl;
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
}
server {
if ($host = www.unifi.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
}
if ($host = unifi.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
}
server_name www.unifi.tryton.geeraert.eu unifi.tryton.geeraert.eu;
listen 80;
return 404;
}