pi-ux-ce/Reverse_proxy_Nginx
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

success with geoip2
Gitea Actions Demo / Explore-Gitea-Actions (push) Failing after 50s
Details

Browse Source
This commit is contained in:
pi-ux-ce
2026-03-13 00:33:43 +00:00
parent 2ea483265b
commit 3570e436f8
4 changed files with 70 additions and 48 deletions
Download Patch File Download Diff File Expand all files Collapse all files
terraform/variables.auto.tfvars
+32 -30
View File
@@ -1,13 +1,13 @@
nginx_sites = {
bitwarden = {
service = "nginx.bitwarden.svc:8080"
#service = "nginx.bitwarden.svc:8080"
#extra-value-location = <<EOT
#proxy_set_header Host $host;
#proxy_set_header X-Real-IP $remote_addr;
#proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
#proxy_set_header Proxy "";
# EOT
#service = "bitwarden-nginx-svc.bitwardent.svc:8080"
service = "bitwarden-nginx-svc.bitwarden.svc:8080"
http2_bool = true
}
@@ -36,38 +36,38 @@ nginx_sites = {
proxy_cache = true
http2_bool = true
extra-value-location = <<EOT
auth_request /oauth2/auth;
error_page 401 = @oauth2_signin;
proxy_set_header X-Auth-Request-Redirect $request_uri;
EOT
#extra-value-location = <<EOT
# auth_request /oauth2/auth;
# error_page 401 = @oauth2_signin;
# proxy_set_header X-Auth-Request-Redirect $request_uri;
# EOT
extra-value = <<EOT
location = /oauth2/auth {
internal;
proxy_pass http://oauthn_backend;
# proxy_pass https://oauthn.tryton.geeraert.eu/oauth2/auth;
proxy_pass_request_body off;
proxy_set_header Content-Length "";
proxy_set_header X-Original-URI $request_uri;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Scheme $scheme;
}
#extra-value = <<EOT
# location = /oauth2/auth {
# internal;
#proxy_pass http://oauthn_backend;
## proxy_pass https://oauthn.tryton.geeraert.eu/oauth2/auth;
# proxy_pass_request_body off;
# proxy_set_header Content-Length "";
# proxy_set_header X-Original-URI $request_uri;
# proxy_set_header X-Real-IP $remote_addr;
# proxy_set_header X-Scheme $scheme;
#}
location @oauth2_signin {
return 302 https://$host/oauth2/start?rd=https://$host$request_uri;
#return 302 https://oauthn.tryton.geeraert.eu/oauth2/start?rd=https://$host$request_uri;
}
#location @oauth2_signin {
# return 302 https://$host/oauth2/start?rd=https://$host$request_uri;
# #return 302 https://oauthn.tryton.geeraert.eu/oauth2/start?rd=https://$host$request_uri;
#}
location /oauth2/ {
proxy_pass http://oauthn_backend;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Scheme $scheme;
proxy_set_header X-Auth-Request-Redirect $request_uri;
}
#location /oauth2/ {
#proxy_pass http://oauthn_backend;
#proxy_set_header Host $host;
#proxy_set_header X-Real-IP $remote_addr;
#proxy_set_header X-Scheme $scheme;
#proxy_set_header X-Auth-Request-Redirect $request_uri;
#}
EOT
# EOT
}
@@ -75,6 +75,7 @@ proxy_pass http://oauthn_backend;
service = "webserver.gitlab.svc:443"
proxy_cache = true
extra_value_bool = true
enabled = false
extra-value = <<EOT
client_max_body_size 20m;
proxy_request_buffering off;
@@ -192,6 +193,7 @@ client_max_body_size 20m;
}
dupeguru = {
service = "dupeguru.dupeguru.svc:5800"
enabled = false
authentication_required = true
}