pi-ux-ce/Reverse_proxy_Nginx
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

adding sites into terraform

Browse Source
This commit is contained in:
pi-ux-ce
2024-07-25 17:56:10 +01:00
parent 3b67e1b3c6
commit 6cc7ace590
16 changed files with 102 additions and 419 deletions
Download Patch File Download Diff File Expand all files Collapse all files
conf.d/bitwarden.tryton.geeraert.eu.kube.conf.bak2
-45
View File
@@ -1,45 +0,0 @@
upstream bitwarden_backend {
# BITWARDEN SERVER DOCKER
# server 192.168.88.50:8080;
# NEW BITWARDEN SERVER kubernetes
server bitwarden-self-host-web.bitwarden-helm.svc:5000;
#bitwarden-self-host-admin.bitwarden.svc
# OLD BITWARDEN SERVER
# server 192.168.6.147;
server 1.1.1.1 backup;
}
server {
server_name bitwarden.tryton.geeraert.eu www.bitwarden.tryton.geeraert.eu;
location / {
proxy_pass http://bitwarden_backend;
}
listen 443 ssl; # managed by Certbot
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
}
server {
if ($host = www.bitwarden.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
if ($host = bitwarden.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
server_name www.bitwarden.tryton.geeraert.eu bitwarden.tryton.geeraert.eu;
listen 80;
return 404; # managed by Certbot
}
conf.d/bitwarden_docker.tryton.geeraert.eu.conf.old
-44
View File
@@ -1,44 +0,0 @@
upstream bitwarden_backend {
# BITWARDEN SERVER DOCKER
server 192.168.88.50:8080;
# OLD BITWARDEN SERVER
# server 192.168.6.147;
server 1.1.1.1 backup;
}
server {
server_name bitwarden.tryton.geeraert.eu www.bitwarden.tryton.geeraert.eu;
location / {
proxy_pass http://bitwarden_backend;
}
location /.well-known/acme-challenge/ {
root /var/www/certbot;
}
listen 443 ssl; # managed by Certbot
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
}
server {
if ($host = www.bitwarden.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
if ($host = bitwarden.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
server_name www.bitwarden.tryton.geeraert.eu bitwarden.tryton.geeraert.eu;
listen 80;
return 404; # managed by Certbot
}
conf.d/bitwarden_kube.tryton.geeraert.eu.kube.conf
-76
View File
@@ -1,76 +0,0 @@
upstream bitwarden_kube_backend {
# BITWARDEN SERVER DOCKER
# server 192.168.88.50:8080;
# NEW BITWARDEN SERVER kubernetes
# server bitwarden-self-host-web.bitwarden-helm.svc:5000;
server nginx.bitwarden.svc:8080;
#bitwarden-self-host-admin.bitwarden-helm.svc
# OLD BITWARDEN SERVER
# server 192.168.6.147;
# server 1.1.1.1 backup;
}
server {
server_name bitwarden.tryton.geeraert.eu www.bitwarden.tryton.geeraert.eu;
location / {
proxy_pass http://bitwarden_kube_backend;
}
# location /api/ {
# proxy_pass http://bitwarden-self-host-api.bitwarden-helm.svc:5000;
#proxy_pass http://10.106.163.98:5000;
# }
# location /attachments/ {
# proxy_pass http://bitwarden-self-host-api.bitwarden-helm.svc:5000;
# }
# location /icons/ {
# proxy_pass http://bitwarden-self-host-icons.bitwarden-helm.svc:5000;
# }
# location /notifications/ {
# proxy_pass http://bitwarden-self-host-notifications.bitwarden-helm.svc:5000;
# }
# location /events/ {
# proxy_pass http://bitwarden-self-host-events.bitwarden-helm.svc:5000;
# }
# location /scim/ {
# proxy_pass http://bitwarden-self-host-scim.bitwarden-helm.svc:5000;
# }
# location /sso/ {
# proxy_pass http://bitwarden-self-host-sso.bitwarden-helm.svc:5000;
# }
# location /identity/ {
# proxy_pass http://bitwarden-self-host-identity.bitwarden-helm.svc:5000;
# }
# location /admin/ {
# proxy_pass http://bitwarden-self-host-admin.bitwarden-helm.svc:5000;
# }
location /.well-known/acme-challenge/ {
root /var/www/certbot;
}
listen 443 ssl; # managed by Certbot
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
}
server {
if ($host = www.bitwarden.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
if ($host = bitwarden.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
server_name www.bitwarden.tryton.geeraert.eu bitwarden.tryton.geeraert.eu;
listen 80;
return 404; # managed by Certbot
}
conf.d/bitwarden_kube.tryton.geeraert.eu.kube.conf.old
-76
View File
@@ -1,76 +0,0 @@
upstream bitwarden_kube_backend {
# BITWARDEN SERVER DOCKER
# server 192.168.88.50:8080;
# NEW BITWARDEN SERVER kubernetes
# server bitwarden-self-host-web.bitwarden-helm.svc:5000;
server nginx.bitwarden.svc:8080;
#bitwarden-self-host-admin.bitwarden-helm.svc
# OLD BITWARDEN SERVER
# server 192.168.6.147;
# server 1.1.1.1 backup;
}
server {
server_name bitwarden.tryton.geeraert.eu www.bitwarden.tryton.geeraert.eu;
location / {
proxy_pass http://bitwarden_kube_backend;
}
# location /api/ {
# proxy_pass http://bitwarden-self-host-api.bitwarden-helm.svc:5000;
#proxy_pass http://10.106.163.98:5000;
# }
# location /attachments/ {
# proxy_pass http://bitwarden-self-host-api.bitwarden-helm.svc:5000;
# }
# location /icons/ {
# proxy_pass http://bitwarden-self-host-icons.bitwarden-helm.svc:5000;
# }
# location /notifications/ {
# proxy_pass http://bitwarden-self-host-notifications.bitwarden-helm.svc:5000;
# }
# location /events/ {
# proxy_pass http://bitwarden-self-host-events.bitwarden-helm.svc:5000;
# }
# location /scim/ {
# proxy_pass http://bitwarden-self-host-scim.bitwarden-helm.svc:5000;
# }
# location /sso/ {
# proxy_pass http://bitwarden-self-host-sso.bitwarden-helm.svc:5000;
# }
# location /identity/ {
# proxy_pass http://bitwarden-self-host-identity.bitwarden-helm.svc:5000;
# }
# location /admin/ {
# proxy_pass http://bitwarden-self-host-admin.bitwarden-helm.svc:5000;
# }
location /.well-known/acme-challenge/ {
root /var/www/certbot;
}
listen 443 ssl; # managed by Certbot
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
}
server {
if ($host = www.bitwarden.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
if ($host = bitwarden.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
server_name www.bitwarden.tryton.geeraert.eu bitwarden.tryton.geeraert.eu;
listen 80;
return 404; # managed by Certbot
}
conf.d/bookstack.tryton.geeraert.eu.conf
+32 -28
View File
@@ -1,48 +1,52 @@
############################################
# config file for bookstack
############################################
upstream bookstack_backend {
server webserver.bookstack.svc;
server 1.1.1.1 backup;
server webserver.bookstack.svc;
server 1.1.1.1 backup;
}
server {
server_name bookstack.tryton.geeraert.eu www.bookstack.tryton.geeraert.eu;
server_name bookstack.tryton.geeraert.eu www.bookstack.tryton.geeraert.eu;
location / {
proxy_pass http://bookstack_backend;
proxy_pass http://bookstack_backend;
location ~* \.(html|css|jpg|gif|ico|js)$ {
proxy_cache cache;
proxy_cache_key $host$uri$is_args$args;
proxy_cache_valid 200 301 302 30m;
expires 30m;
proxy_pass http://bookstack_backend;
}
proxy_cache cache;
proxy_cache_key $host$uri$is_args$args;
proxy_cache_valid 200 301 302 30m;
expires 30m;
proxy_pass http://bookstack_backend;
}
}
location /.well-known/acme-challenge/ {
root /var/www/certbot;
root /var/www/certbot;
}
listen 443 ssl; # managed by Certbot
listen 443 ssl;
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
}
server {
if ($host = www.bookstack.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
if ($host = www.bookstack.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
}
if ($host = bookstack.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
if ($host = bookstack.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
}
server_name www.bookstack.tryton.geeraert.eu bookstack.tryton.geeraert.eu;
listen 80;
return 404; # managed by Certbot
listen 80;
return 404;
}
conf.d/camera.tryton.geeraert.eu.conf.BAK
-17
View File
@@ -1,17 +0,0 @@
upstream camera_backend {
server 192.168.88.36;
server 1.1.1.1 backup;
}
server {
server_name camera.tryton.geeraert.eu www.camera.tryton.geeraert.eu;
location / {
proxy_pass http://camera_backend;
}
location /.well-known/acme-challenge/ {
root /var/www/certbot;
}
listen 80 ;
}
conf.d/netdata.tryton.geeraert.eu.conf
-43
View File
@@ -1,43 +0,0 @@
upstream netdata_backend {
#kube server
server netdata-agent.netdata.svc:19999;
#old server
#server 192.168.88.50:19999;
server 1.1.1.1 backup;
}
server {
server_name netdata.tryton.geeraert.eu www.netdata.tryton.geeraert.eu;
location / {
proxy_pass http://netdata_backend;
}
location /.well-known/acme-challenge/ {
root /var/www/certbot;
}
listen 443 ssl; # managed by Certbot
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
}
server {
if ($host = www.netdata.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
if ($host = netdata.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
server_name www.netdata.tryton.geeraert.eu netdata.tryton.geeraert.eu;
listen 80;
return 404; # managed by Certbot
}
conf.d/nextcloud.tryton.geeraert.eu.conf.bak
-38
View File
@@ -1,38 +0,0 @@
upstream nextcloud_backend {
server 192.168.6.20;
server 1.1.1.1 backup;
}
server {
server_name nextcloud.tryton.geeraert.eu www.nextcloud.tryton.geeraert.eu;
location / {
proxy_pass http://nextcloud_backend;
}
location /.well-known/acme-challenge/ {
root /var/www/certbot;
}
listen 443 ssl; # managed by Certbot
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem; # managed by Certbot
# managed by Certbot
}
server {
if ($host = www.nextcloud.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
if ($host = nextcloud.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
server_name www.nextcloud.tryton.geeraert.eu nextcloud.tryton.geeraert.eu;
listen 80;
return 404; # managed by Certbot
}
conf.d/opentrashmail.tryton.geeraert.eu.conf.bak → conf.d/opentrashmail.tryton.geeraert.eu.conf
+2 -1
View File
@@ -1,5 +1,6 @@
upstream opentrashmail_backend {
server opentrashmail.opentrashmail.svc;
# server opentrashmail.opentrashmail.svc;
server 1.1.1.1;
server 1.1.1.1 backup;
}
conf.d/portainer.tryton.geeraert.eu.conf.bak
-40
View File
@@ -1,40 +0,0 @@
upstream portainer_backend {
server localhost:9000;
server 1.1.1.1 backup;
}
server {
server_name portainer.tryton.geeraert.eu www.portainer.tryton.geeraert.eu;
location / {
proxy_pass http://portainer_backend;
}
location /.well-known/acme-challenge/ {
root /var/www/certbot;
}
listen 443 ssl; # managed by Certbot
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
# managed by Certbot
# managed by Certbot
}
server {
if ($host = www.portainer.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
if ($host = portainer.tryton.geeraert.eu) {
return 301 https://$host$request_uri;
} # managed by Certbot
server_name www.portainer.tryton.geeraert.eu portainer.tryton.geeraert.eu;
listen 80;
return 404; # managed by Certbot
}
conf.d/proxmox.tryton.geeraert.eu.conf.bak → conf.d/proxmox.tryton.geeraert.eu.conf
View File