pi-ux-ce/Reverse_proxy_Nginx
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

creating the configmap, not used yet by netdata
Gitea Actions Demo / Explore-Gitea-Actions (push) Failing after 57s
Details

Browse Source
This commit is contained in:
pi-ux-ce
2026-08-04 16:18:37 +01:00
parent 0b09d50e7f
commit 763788d455
5 changed files with 159 additions and 121 deletions
Download Patch File Download Diff File Expand all files Collapse all files
terraform/httpcheck.yaml.tftpl
+9
View File
@@ -0,0 +1,9 @@
update_every: 1
autodetection_retry: 0
jobs:
%{ for key, value in map_of_params ~}
%{ if value.enabled ~}
- name: ${key}
url: https://${key}.tryton.geeraert.eu
%{ endif ~}
%{ endfor ~}
terraform/module.tf
+10 -10
View File
@@ -55,17 +55,17 @@ resource "kubernetes_config_map" "deny_ip_configmap" {
} }
} }
#resource "kubernetes_config_map" "websites_configmap" { resource "kubernetes_config_map" "websites_configmap" {
# metadata { metadata {
# name = "sites-terraform" name = "sites-terraform"
# namespace = "django-python" namespace = "netdata"
# } }
# data = { data = {
# "websites.json" = templatefile("websites_terraform.json.tftpl", { "websites.json" = templatefile("httpcheck.yaml.tftpl", {
# map_of_params = var.nginx_sites }) map_of_params = var.nginx_sites })
# } }
#} }
resource "kubernetes_config_map" "automatic-configmap" { resource "kubernetes_config_map" "automatic-configmap" {
terraform/terraform.tfstate
+73 -37
View File
@@ -1,7 +1,7 @@
{ {
"version": 4, "version": 4,
"terraform_version": "1.13.1", "terraform_version": "1.14.4",
"serial": 1433, "serial": 1610,
"lineage": "a36de74c-83f8-01fe-0504-92c54a21d49e", "lineage": "a36de74c-83f8-01fe-0504-92c54a21d49e",
"outputs": { "outputs": {
"Nginx_status": { "Nginx_status": {
@@ -21,32 +21,31 @@
"attributes": { "attributes": {
"binary_data": {}, "binary_data": {},
"data": { "data": {
"bitwarden.conf": "############################################\n# config file for bitwarden\n############################################\n\nupstream bitwarden_backend {\n server nginx.bitwarden.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name bitwarden.tryton.geeraert.eu www.bitwarden.tryton.geeraert.eu;\n location / {\n proxy_pass http://bitwarden_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.bitwarden.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = bitwarden.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.bitwarden.tryton.geeraert.eu bitwarden.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "bitwarden.conf": "############################################\n# config file for bitwarden\n############################################\n\nupstream bitwarden_backend {\n server bitwarden-nginx-svc.bitwarden.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name bitwarden.tryton.geeraert.eu www.bitwarden.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://bitwarden_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.bitwarden.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = bitwarden.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.bitwarden.tryton.geeraert.eu bitwarden.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"bookstack.conf": "############################################\n# config file for bookstack\n############################################\n\nupstream bookstack_backend {\n server bookstack-svc.bookstack.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name bookstack.tryton.geeraert.eu www.bookstack.tryton.geeraert.eu;\n location / {\n proxy_pass http://bookstack_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.bookstack.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = bookstack.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.bookstack.tryton.geeraert.eu bookstack.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "django-testing.conf": "############################################\n# config file for django-testing\n############################################\n\nupstream django-testing_backend {\n server django-testing-svc.django-testing.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name django-testing.tryton.geeraert.eu www.django-testing.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://django-testing_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://django-testing_backend;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.django-testing.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = django-testing.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.django-testing.tryton.geeraert.eu django-testing.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"django-dev.conf": "############################################\n# config file for django-dev\n############################################\n\nupstream django-dev_backend {\n server webserver.django-dev.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name django-dev.tryton.geeraert.eu www.django-dev.tryton.geeraert.eu;\n location / {\n proxy_pass http://django-dev_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://django-dev_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.django-dev.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = django-dev.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.django-dev.tryton.geeraert.eu django-dev.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "django.conf": "############################################\n# config file for django\n############################################\n\nupstream django_backend {\n server django-svc.django:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name django.tryton.geeraert.eu www.django.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://django_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://django_backend;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.django.tryton.geeraert.eu django.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"django.conf": "############################################\n# config file for django\n############################################\n\nupstream django_backend {\n server django-svc.django:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name django.tryton.geeraert.eu www.django.tryton.geeraert.eu;\n location / {\n proxy_pass http://django_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://django_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.django.tryton.geeraert.eu django.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "gitea.conf": "############################################\n# config file for gitea\n############################################\n\nupstream gitea_backend {\n server webserver.gitea.svc:3000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name gitea.tryton.geeraert.eu www.gitea.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://gitea_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.gitea.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = gitea.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.gitea.tryton.geeraert.eu gitea.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"dupeguru.conf": "############################################\n# config file for dupeguru\n############################################\n\nupstream dupeguru_backend {\n server dupeguru.dupeguru.svc:5800;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name dupeguru.tryton.geeraert.eu www.dupeguru.tryton.geeraert.eu;\n location / {\n proxy_pass http://dupeguru_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n auth_basic \"Administrator’s Area\";\n auth_basic_user_file /authentication-htpasswd/.htpasswd;\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.dupeguru.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = dupeguru.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.dupeguru.tryton.geeraert.eu dupeguru.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "immich.conf": "############################################\n# config file for immich\n############################################\n\nupstream immich_backend {\n server immich-svc.immich.svc:2283;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name immich.tryton.geeraert.eu www.immich.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://immich_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n proxy_set_header X-Forwarded-Proto $scheme;\n proxy_read_timeout 60000s;\n\n\n #adding websocket , usefull for reverse proxy\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_cache_bypass $http_upgrade;\n #end of working\n\n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.immich.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = immich.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.immich.tryton.geeraert.eu immich.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"gitea.conf": "############################################\n# config file for gitea\n############################################\n\nupstream gitea_backend {\n server webserver.gitea.svc:3000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name gitea.tryton.geeraert.eu www.gitea.tryton.geeraert.eu;\n location / {\n proxy_pass http://gitea_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.gitea.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = gitea.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.gitea.tryton.geeraert.eu gitea.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "jellyfin.conf": "############################################\n# config file for jellyfin\n############################################\n\nupstream jellyfin_backend {\n server jellyfin-svc.jellyfin.svc:8096;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name jellyfin.tryton.geeraert.eu www.jellyfin.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://jellyfin_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.jellyfin.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = jellyfin.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.jellyfin.tryton.geeraert.eu jellyfin.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"gitlab.conf": "############################################\n# config file for gitlab\n############################################\n\nupstream gitlab_backend {\n server webserver.gitlab.svc:443;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name gitlab.tryton.geeraert.eu www.gitlab.tryton.geeraert.eu;\n location / {\n proxy_pass https://gitlab_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass https://gitlab_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\tclient_max_body_size 20m;\n\tproxy_request_buffering off;\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.gitlab.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = gitlab.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.gitlab.tryton.geeraert.eu gitlab.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "job-testing.conf": "############################################\n# config file for job-testing\n############################################\n\nupstream job-testing_backend {\n server django-testing-svc.django-testing.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name job-testing.tryton.geeraert.eu www.job-testing.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://job-testing_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://job-testing_backend;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.job-testing.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = job-testing.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.job-testing.tryton.geeraert.eu job-testing.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"immich.conf": "############################################\n# config file for immich\n############################################\n\nupstream immich_backend {\n server immich-svc.immich.svc:2283;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name immich.tryton.geeraert.eu www.immich.tryton.geeraert.eu;\n location / {\n proxy_pass http://immich_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n proxy_set_header X-Forwarded-Proto $scheme;\n proxy_read_timeout 60000s;\n\n\n #adding websocket , usefull for reverse proxy\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_cache_bypass $http_upgrade;\n #end of working\n\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.immich.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = immich.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.immich.tryton.geeraert.eu immich.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "nextcloud.conf": "############################################\n# config file for nextcloud\n############################################\n\nupstream nextcloud_backend {\n server webserver.nextcloud.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name nextcloud.tryton.geeraert.eu www.nextcloud.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://nextcloud_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://nextcloud_backend;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n location /.well-known/carddav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location /.well-known/caldav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location = /health {\n default_type text/html;\n return 200 \"\u003c!DOCTYPE html\u003e\u003ch2\u003ehealth check\u003c/h2\u003e\\n\";\n }\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.nextcloud.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = nextcloud.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.nextcloud.tryton.geeraert.eu nextcloud.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"jellyfin.conf": "############################################\n# config file for jellyfin\n############################################\n\nupstream jellyfin_backend {\n server jellyfin-svc.jellyfin.svc:8096;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name jellyfin.tryton.geeraert.eu www.jellyfin.tryton.geeraert.eu;\n location / {\n proxy_pass http://jellyfin_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.jellyfin.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = jellyfin.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.jellyfin.tryton.geeraert.eu jellyfin.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "octoprint.conf": "############################################\n# config file for octoprint\n############################################\n\nupstream octoprint_backend {\n server 192.168.1.28:5000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name octoprint.tryton.geeraert.eu www.octoprint.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://octoprint_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.octoprint.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = octoprint.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.octoprint.tryton.geeraert.eu octoprint.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"nextcloud.conf": "############################################\n# config file for nextcloud\n############################################\n\nupstream nextcloud_backend {\n server webserver.nextcloud.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name nextcloud.tryton.geeraert.eu www.nextcloud.tryton.geeraert.eu;\n location / {\n proxy_pass http://nextcloud_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://nextcloud_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n location /.well-known/carddav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location /.well-known/caldav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location = /health {\n default_type text/html;\n return 200 \"\u003c!DOCTYPE html\u003e\u003ch2\u003ehealth check\u003c/h2\u003e\\n\";\n }\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.nextcloud.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = nextcloud.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.nextcloud.tryton.geeraert.eu nextcloud.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "openmediavault.conf": "############################################\n# config file for openmediavault\n############################################\n\nupstream openmediavault_backend {\n server 192.168.88.29;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name openmediavault.tryton.geeraert.eu www.openmediavault.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://openmediavault_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.openmediavault.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = openmediavault.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.openmediavault.tryton.geeraert.eu openmediavault.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"octoprint.conf": "############################################\n# config file for octoprint\n############################################\n\nupstream octoprint_backend {\n server 192.168.1.28:5000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name octoprint.tryton.geeraert.eu www.octoprint.tryton.geeraert.eu;\n location / {\n proxy_pass http://octoprint_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.octoprint.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = octoprint.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.octoprint.tryton.geeraert.eu octoprint.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "paperless.conf": "############################################\n# config file for paperless\n############################################\n\nupstream paperless_backend {\n server paperless-svc.paperless.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name paperless.tryton.geeraert.eu www.paperless.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://paperless_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.paperless.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = paperless.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.paperless.tryton.geeraert.eu paperless.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"openmediavault.conf": "############################################\n# config file for openmediavault\n############################################\n\nupstream openmediavault_backend {\n server 192.168.88.29;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name openmediavault.tryton.geeraert.eu www.openmediavault.tryton.geeraert.eu;\n location / {\n proxy_pass http://openmediavault_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.openmediavault.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = openmediavault.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.openmediavault.tryton.geeraert.eu openmediavault.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "pihole.conf": "############################################\n# config file for pihole\n############################################\n\nupstream pihole_backend {\n server web.piholenew.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name pihole.tryton.geeraert.eu www.pihole.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://pihole_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.pihole.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = pihole.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.pihole.tryton.geeraert.eu pihole.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"paperless.conf": "############################################\n# config file for paperless\n############################################\n\nupstream paperless_backend {\n server paperless-svc.paperless.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name paperless.tryton.geeraert.eu www.paperless.tryton.geeraert.eu;\n location / {\n proxy_pass http://paperless_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.paperless.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = paperless.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.paperless.tryton.geeraert.eu paperless.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "portainer.conf": "############################################\n# config file for portainer\n############################################\n\nupstream portainer_backend {\n server portainer.portainer.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name portainer.tryton.geeraert.eu www.portainer.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://portainer_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.portainer.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = portainer.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.portainer.tryton.geeraert.eu portainer.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"pihole.conf": "############################################\n# config file for pihole\n############################################\n\nupstream pihole_backend {\n server web.piholenew.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name pihole.tryton.geeraert.eu www.pihole.tryton.geeraert.eu;\n location / {\n proxy_pass http://pihole_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.pihole.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = pihole.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.pihole.tryton.geeraert.eu pihole.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "prowlarr.conf": "############################################\n# config file for prowlarr\n############################################\n\nupstream prowlarr_backend {\n server prowlarr-svc.servarr.svc:9696;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name prowlarr.tryton.geeraert.eu www.prowlarr.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://prowlarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.prowlarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = prowlarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.prowlarr.tryton.geeraert.eu prowlarr.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"portainer.conf": "############################################\n# config file for portainer\n############################################\n\nupstream portainer_backend {\n server portainer.portainer.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name portainer.tryton.geeraert.eu www.portainer.tryton.geeraert.eu;\n location / {\n proxy_pass http://portainer_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.portainer.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = portainer.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.portainer.tryton.geeraert.eu portainer.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "radarr.conf": "############################################\n# config file for radarr\n############################################\n\nupstream radarr_backend {\n server radarr-svc.servarr.svc:7878;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name radarr.tryton.geeraert.eu www.radarr.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://radarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.radarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = radarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.radarr.tryton.geeraert.eu radarr.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"prowlarr.conf": "############################################\n# config file for prowlarr\n############################################\n\nupstream prowlarr_backend {\n server prowlarr-svc.servarr.svc:9696;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name prowlarr.tryton.geeraert.eu www.prowlarr.tryton.geeraert.eu;\n location / {\n proxy_pass http://prowlarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.prowlarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = prowlarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.prowlarr.tryton.geeraert.eu prowlarr.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "redirect-testing.conf": "############################################\n# config file for redirect-testing\n############################################\n\nupstream redirect-testing_backend {\n server django-testing-svc.django-testing.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name redirect-testing.tryton.geeraert.eu www.redirect-testing.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://redirect-testing_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://redirect-testing_backend;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.redirect-testing.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = redirect-testing.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.redirect-testing.tryton.geeraert.eu redirect-testing.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"qbittorrent.conf": "############################################\n# config file for qbittorrent\n############################################\n\nupstream qbittorrent_backend {\n server qbittorrent-svc.servarr.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name qbittorrent.tryton.geeraert.eu www.qbittorrent.tryton.geeraert.eu;\n location / {\n proxy_pass http://qbittorrent_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.qbittorrent.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = qbittorrent.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.qbittorrent.tryton.geeraert.eu qbittorrent.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "redirect.conf": "############################################\n# config file for redirect\n############################################\n\nupstream redirect_backend {\n server django-svc.django:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name redirect.tryton.geeraert.eu www.redirect.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://redirect_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://redirect_backend;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.redirect.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = redirect.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.redirect.tryton.geeraert.eu redirect.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"radarr.conf": "############################################\n# config file for radarr\n############################################\n\nupstream radarr_backend {\n server radarr-svc.servarr.svc:7878;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name radarr.tryton.geeraert.eu www.radarr.tryton.geeraert.eu;\n location / {\n proxy_pass http://radarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.radarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = radarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.radarr.tryton.geeraert.eu radarr.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "reverse.conf": "############################################\n# config file for reverse\n############################################\n\nupstream reverse_backend {\n server django-svc.django:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name reverse.tryton.geeraert.eu www.reverse.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://reverse_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://reverse_backend;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.reverse.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = reverse.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.reverse.tryton.geeraert.eu reverse.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"router.conf": "############################################\n# config file for router\n############################################\n\nupstream router_backend {\n server 192.168.88.1;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name router.tryton.geeraert.eu www.router.tryton.geeraert.eu;\n location / {\n proxy_pass http://router_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n auth_basic \"Administrator’s Area\";\n auth_basic_user_file /authentication-htpasswd/.htpasswd;\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.router.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = router.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.router.tryton.geeraert.eu router.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "router.conf": "############################################\n# config file for router\n############################################\n\nupstream router_backend {\n server 192.168.88.1;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name router.tryton.geeraert.eu www.router.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://router_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n auth_basic \"Administrator’s Area\";\n auth_basic_user_file /authentication-htpasswd/.htpasswd;\n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.router.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = router.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.router.tryton.geeraert.eu router.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"sonarr.conf": "############################################\n# config file for sonarr\n############################################\n\nupstream sonarr_backend {\n server sonarr-svc.servarr.svc:8989;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name sonarr.tryton.geeraert.eu www.sonarr.tryton.geeraert.eu;\n location / {\n proxy_pass http://sonarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.sonarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = sonarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.sonarr.tryton.geeraert.eu sonarr.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "sonarr.conf": "############################################\n# config file for sonarr\n############################################\n\nupstream sonarr_backend {\n server sonarr-svc.servarr.svc:8989;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name sonarr.tryton.geeraert.eu www.sonarr.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://sonarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.sonarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = sonarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.sonarr.tryton.geeraert.eu sonarr.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"stash.conf": "############################################\n# config file for stash\n############################################\n\nupstream stash_backend {\n server stash-svc.stash.svc:9999;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name stash.tryton.geeraert.eu www.stash.tryton.geeraert.eu;\n location / {\n proxy_pass http://stash_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n #don't use this as this needs to be run as root or have the CAP_NET_RAW capability) to bind to a non-local IP address.\n #Because the backend thinks the request is coming directly from the client, it will try to send the response directly back to that client IP. To prevent this (which would break the connection), you must force the response back through the NGINX server.\n #proxy_bind $remote_addr transparent;\n\n##used to be working\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n proxy_set_header X-Forwarded-Proto $scheme;\n proxy_read_timeout 60000s;\n #working\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_cache_bypass $http_upgrade;\n #end of working\n\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.stash.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = stash.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.stash.tryton.geeraert.eu stash.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "stash.conf": "############################################\n# config file for stash\n############################################\n\nupstream stash_backend {\n server stash-svc.stash.svc:9999;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name stash.tryton.geeraert.eu www.stash.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://stash_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n #don't use this as this needs to be run as root or have the CAP_NET_RAW capability) to bind to a non-local IP address.\n #Because the backend thinks the request is coming directly from the client, it will try to send the response directly back to that client IP. To prevent this (which would break the connection), you must force the response back through the NGINX server.\n #proxy_bind $remote_addr transparent;\n\n##used to be working\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n proxy_set_header X-Forwarded-Proto $scheme;\n proxy_read_timeout 60000s;\n #working\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_cache_bypass $http_upgrade;\n #end of working\n\n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.stash.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = stash.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.stash.tryton.geeraert.eu stash.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"synology.conf": "############################################\n# config file for synology\n############################################\n\nupstream synology_backend {\n server 192.168.88.39:5000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name synology.tryton.geeraert.eu www.synology.tryton.geeraert.eu;\n location / {\n proxy_pass http://synology_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.synology.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = synology.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.synology.tryton.geeraert.eu synology.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "synology.conf": "############################################\n# config file for synology\n############################################\n\nupstream synology_backend {\n server 192.168.88.39:5000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name synology.tryton.geeraert.eu www.synology.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://synology_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.synology.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = synology.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.synology.tryton.geeraert.eu synology.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"tdarr.conf": "############################################\n# config file for tdarr\n############################################\n\nupstream tdarr_backend {\n server tdarr-svc.servarr.svc:8265;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name tdarr.tryton.geeraert.eu www.tdarr.tryton.geeraert.eu;\n location / {\n proxy_pass http://tdarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n proxy_set_header X-Forwarded-Proto $scheme;\n proxy_read_timeout 60000s;\n#working\nproxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_cache_bypass $http_upgrade;\n#end of working\n\n\n\n\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.tdarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = tdarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.tdarr.tryton.geeraert.eu tdarr.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "unifi-inform.conf": "############################################\n# config file for unifi-inform\n############################################\n\nupstream unifi-inform_backend {\n server 192.168.88.50:8082;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name unifi-inform.tryton.geeraert.eu www.unifi-inform.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://unifi-inform_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.unifi-inform.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = unifi-inform.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.unifi-inform.tryton.geeraert.eu unifi-inform.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"unifi-inform.conf": "############################################\n# config file for unifi-inform\n############################################\n\nupstream unifi-inform_backend {\n server 192.168.88.50:8082;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name unifi-inform.tryton.geeraert.eu www.unifi-inform.tryton.geeraert.eu;\n location / {\n proxy_pass http://unifi-inform_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.unifi-inform.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = unifi-inform.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.unifi-inform.tryton.geeraert.eu unifi-inform.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "unifi.conf": "############################################\n# config file for unifi\n############################################\n\nupstream unifi_backend {\n server 192.168.88.244:8443;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name unifi.tryton.geeraert.eu www.unifi.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass https://unifi_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.unifi.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = unifi.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.unifi.tryton.geeraert.eu unifi.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"unifi.conf": "############################################\n# config file for unifi\n############################################\n\nupstream unifi_backend {\n server 192.168.88.244:8443;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name unifi.tryton.geeraert.eu www.unifi.tryton.geeraert.eu;\n location / {\n proxy_pass https://unifi_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.unifi.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = unifi.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.unifi.tryton.geeraert.eu unifi.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "wikijs.conf": "############################################\n# config file for wikijs\n############################################\n\nupstream wikijs_backend {\n server wikijs-svc.wikijs.svc:3000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name wikijs.tryton.geeraert.eu www.wikijs.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://wikijs_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\tclient_max_body_size 20m;\n proxy_request_buffering off;\n\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.wikijs.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = wikijs.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.wikijs.tryton.geeraert.eu wikijs.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}"
"wikijs.conf": "############################################\n# config file for wikijs\n############################################\n\nupstream wikijs_backend {\n server wikijs-svc.wikijs.svc:3000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name wikijs.tryton.geeraert.eu www.wikijs.tryton.geeraert.eu;\n location / {\n proxy_pass http://wikijs_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\tclient_max_body_size 20m;\n proxy_request_buffering off;\n\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.wikijs.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = wikijs.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.wikijs.tryton.geeraert.eu wikijs.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}"
}, },
"id": "reverse-proxy/sites-terraform", "id": "reverse-proxy/sites-terraform",
"immutable": false, "immutable": false,
@@ -60,7 +59,7 @@
"labels": {}, "labels": {},
"name": "sites-terraform", "name": "sites-terraform",
"namespace": "reverse-proxy", "namespace": "reverse-proxy",
"resource_version": "212969561", "resource_version": "274958265",
"uid": "08aa2108-9dce-4e67-b000-4dc7fbd1c23e" "uid": "08aa2108-9dce-4e67-b000-4dc7fbd1c23e"
} }
] ]
@@ -71,6 +70,43 @@
} }
] ]
}, },
{
"mode": "managed",
"type": "kubernetes_config_map",
"name": "automatic-geoip-allow",
"provider": "provider[\"registry.terraform.io/hashicorp/kubernetes\"]",
"instances": [
{
"schema_version": 0,
"attributes": {
"binary_data": {},
"data": {
"FR_GB.conf": "map $geoip2_data_country_iso_code $allowed_country_FR_GB {\n\tdefault no;\n\t\n\tFR yes;\n\t\n\tGB yes;\n\t}\n\nmap $allowed_country_FR_GB $should_log_blocked_FR_GB {\n no 1;\n default 0;\n}\n\n\n",
"FR_GB_NL.conf": "map $geoip2_data_country_iso_code $allowed_country_FR_GB_NL {\n\tdefault no;\n\t\n\tFR yes;\n\t\n\tGB yes;\n\t\n\tNL yes;\n\t}\n\nmap $allowed_country_FR_GB_NL $should_log_blocked_FR_GB_NL {\n no 1;\n default 0;\n}\n\n\n"
},
"id": "reverse-proxy/geoip-allow",
"immutable": false,
"metadata": [
{
"annotations": {
"reloader.stakater.com/match": "true"
},
"generate_name": "",
"generation": 0,
"labels": {},
"name": "geoip-allow",
"namespace": "reverse-proxy",
"resource_version": "260531190",
"uid": "1792e950-437f-4b68-bbf2-b5397baa4fae"
}
]
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "bnVsbA=="
}
]
},
{ {
"mode": "managed", "mode": "managed",
"type": "kubernetes_config_map", "type": "kubernetes_config_map",
@@ -116,22 +152,22 @@
{ {
"schema_version": 0, "schema_version": 0,
"attributes": { "attributes": {
"binary_data": {}, "binary_data": null,
"data": { "data": {
"websites.json": "\n\n{\n \"bitwarden\": {\n \"service\": \"nginx.bitwarden.svc:8080\"\n }\n}\n\n\n\n{\n \"bookstack\": {\n \"service\": \"bookstack-svc.bookstack.svc\"\n }\n}\n\n\n\n\n\n{\n \"django\": {\n \"service\": \"django-svc.django:8000\"\n }\n}\n\n\n\n{\n \"django-dev\": {\n \"service\": \"webserver.django-dev.svc:8000\"\n }\n}\n\n\n\n\n\n{\n \"dupeguru\": {\n \"service\": \"dupeguru.dupeguru.svc:5800\"\n }\n}\n\n\n\n\n\n\n\n{\n \"gitea\": {\n \"service\": \"webserver.gitea.svc:3000\"\n }\n}\n\n\n\n{\n \"gitlab\": {\n \"service\": \"webserver.gitlab.svc:443\"\n }\n}\n\n\n\n\n\n\n\n{\n \"immich\": {\n \"service\": \"immich-svc.immich.svc:2283\"\n }\n}\n\n\n\n\n\n{\n \"jellyfin\": {\n \"service\": \"jellyfin-svc.jellyfin.svc:8096\"\n }\n}\n\n\n\n\n\n\n\n\n\n\n\n\n\n{\n \"nextcloud\": {\n \"service\": \"webserver.nextcloud.svc\"\n }\n}\n\n\n\n\n\n\n\n\n\n{\n \"octoprint\": {\n \"service\": \"192.168.1.28:5000\"\n }\n}\n\n\n\n\n\n{\n \"openmediavault\": {\n \"service\": \"192.168.88.29\"\n }\n}\n\n\n\n\n\n\n\n{\n \"paperless\": {\n \"service\": \"paperless-svc.paperless.svc:8000\"\n }\n}\n\n\n\n{\n \"pihole\": {\n \"service\": \"web.piholenew.svc\"\n }\n}\n\n\n\n\n\n{\n \"portainer\": {\n \"service\": \"portainer.portainer.svc\"\n }\n}\n\n\n\n\n\n{\n \"prowlarr\": {\n \"service\": \"prowlarr-svc.servarr.svc:9696\"\n }\n}\n\n\n\n\n\n{\n \"qbittorrent\": {\n \"service\": \"qbittorrent-svc.servarr.svc:8080\"\n }\n}\n\n\n\n{\n \"radarr\": {\n \"service\": \"radarr-svc.servarr.svc:7878\"\n }\n}\n\n\n\n\n\n\n\n{\n \"router\": {\n \"service\": \"192.168.88.1\"\n }\n}\n\n\n\n\n\n\n\n{\n \"sonarr\": {\n \"service\": \"sonarr-svc.servarr.svc:8989\"\n }\n}\n\n\n\n\n\n{\n \"stash\": {\n \"service\": \"stash-svc.stash.svc:9999\"\n }\n}\n\n\n\n\n\n{\n \"synology\": {\n \"service\": \"192.168.88.39:5000\"\n }\n}\n\n\n\n{\n \"tdarr\": {\n \"service\": \"tdarr-svc.servarr.svc:8265\"\n }\n}\n\n\n\n\n\n\n\n\n\n\n\n\n\n{\n \"unifi\": {\n \"service\": \"192.168.88.244:8443\"\n }\n}\n\n\n\n{\n \"unifi-inform\": {\n \"service\": \"192.168.88.50:8082\"\n }\n}\n\n\n\n\n\n{\n \"wikijs\": {\n \"service\": \"wikijs-svc.wikijs.svc:3000\"\n }\n}\n\n" "websites.json": "update_every: 1\nautodetection_retry: 0\njobs:\n - name: bitwarden\n url: https://bitwarden.tryton.geeraert.eu\n - name: django\n url: https://django.tryton.geeraert.eu\n - name: django-testing\n url: https://django-testing.tryton.geeraert.eu\n - name: gitea\n url: https://gitea.tryton.geeraert.eu\n - name: immich\n url: https://immich.tryton.geeraert.eu\n - name: jellyfin\n url: https://jellyfin.tryton.geeraert.eu\n - name: job-testing\n url: https://job-testing.tryton.geeraert.eu\n - name: nextcloud\n url: https://nextcloud.tryton.geeraert.eu\n - name: octoprint\n url: https://octoprint.tryton.geeraert.eu\n - name: openmediavault\n url: https://openmediavault.tryton.geeraert.eu\n - name: paperless\n url: https://paperless.tryton.geeraert.eu\n - name: pihole\n url: https://pihole.tryton.geeraert.eu\n - name: portainer\n url: https://portainer.tryton.geeraert.eu\n - name: prowlarr\n url: https://prowlarr.tryton.geeraert.eu\n - name: radarr\n url: https://radarr.tryton.geeraert.eu\n - name: redirect\n url: https://redirect.tryton.geeraert.eu\n - name: redirect-testing\n url: https://redirect-testing.tryton.geeraert.eu\n - name: reverse\n url: https://reverse.tryton.geeraert.eu\n - name: router\n url: https://router.tryton.geeraert.eu\n - name: sonarr\n url: https://sonarr.tryton.geeraert.eu\n - name: stash\n url: https://stash.tryton.geeraert.eu\n - name: synology\n url: https://synology.tryton.geeraert.eu\n - name: unifi\n url: https://unifi.tryton.geeraert.eu\n - name: unifi-inform\n url: https://unifi-inform.tryton.geeraert.eu\n - name: wikijs\n url: https://wikijs.tryton.geeraert.eu\n"
}, },
"id": "django-python/sites-terraform", "id": "netdata/sites-terraform",
"immutable": false, "immutable": false,
"metadata": [ "metadata": [
{ {
"annotations": {}, "annotations": null,
"generate_name": "", "generate_name": "",
"generation": 0, "generation": 0,
"labels": {}, "labels": null,
"name": "sites-terraform", "name": "sites-terraform",
"namespace": "django-python", "namespace": "netdata",
"resource_version": "208986491", "resource_version": "277500383",
"uid": "5349fabc-956e-40d7-ba1d-a72f35e5330a" "uid": "8f41b07d-5fc0-4438-bde8-ca0c83b30ce2"
} }
] ]
}, },
terraform/terraform.tfstate.backup
+67 -65
View File
@@ -1,7 +1,7 @@
{ {
"version": 4, "version": 4,
"terraform_version": "1.13.1", "terraform_version": "1.14.4",
"serial": 1431, "serial": 1608,
"lineage": "a36de74c-83f8-01fe-0504-92c54a21d49e", "lineage": "a36de74c-83f8-01fe-0504-92c54a21d49e",
"outputs": { "outputs": {
"Nginx_status": { "Nginx_status": {
@@ -21,32 +21,31 @@
"attributes": { "attributes": {
"binary_data": {}, "binary_data": {},
"data": { "data": {
"bitwarden.conf": "############################################\n# config file for bitwarden\n############################################\n\nupstream bitwarden_backend {\n server nginx.bitwarden.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name bitwarden.tryton.geeraert.eu www.bitwarden.tryton.geeraert.eu;\n location / {\n proxy_pass http://bitwarden_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.bitwarden.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = bitwarden.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.bitwarden.tryton.geeraert.eu bitwarden.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "bitwarden.conf": "############################################\n# config file for bitwarden\n############################################\n\nupstream bitwarden_backend {\n server bitwarden-nginx-svc.bitwarden.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name bitwarden.tryton.geeraert.eu www.bitwarden.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://bitwarden_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.bitwarden.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = bitwarden.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.bitwarden.tryton.geeraert.eu bitwarden.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"bookstack.conf": "############################################\n# config file for bookstack\n############################################\n\nupstream bookstack_backend {\n server bookstack-svc.bookstack.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name bookstack.tryton.geeraert.eu www.bookstack.tryton.geeraert.eu;\n location / {\n proxy_pass http://bookstack_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.bookstack.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = bookstack.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.bookstack.tryton.geeraert.eu bookstack.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "django-testing.conf": "############################################\n# config file for django-testing\n############################################\n\nupstream django-testing_backend {\n server django-testing-svc.django-testing.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name django-testing.tryton.geeraert.eu www.django-testing.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://django-testing_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://django-testing_backend;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.django-testing.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = django-testing.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.django-testing.tryton.geeraert.eu django-testing.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"django-dev.conf": "############################################\n# config file for django-dev\n############################################\n\nupstream django-dev_backend {\n server webserver.django-dev.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name django-dev.tryton.geeraert.eu www.django-dev.tryton.geeraert.eu;\n location / {\n proxy_pass http://django-dev_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://django-dev_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.django-dev.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = django-dev.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.django-dev.tryton.geeraert.eu django-dev.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "django.conf": "############################################\n# config file for django\n############################################\n\nupstream django_backend {\n server django-svc.django:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name django.tryton.geeraert.eu www.django.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://django_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://django_backend;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.django.tryton.geeraert.eu django.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"django.conf": "############################################\n# config file for django\n############################################\n\nupstream django_backend {\n server django-svc.django:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name django.tryton.geeraert.eu www.django.tryton.geeraert.eu;\n location / {\n proxy_pass http://django_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://django_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.django.tryton.geeraert.eu django.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "gitea.conf": "############################################\n# config file for gitea\n############################################\n\nupstream gitea_backend {\n server webserver.gitea.svc:3000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name gitea.tryton.geeraert.eu www.gitea.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://gitea_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.gitea.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = gitea.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.gitea.tryton.geeraert.eu gitea.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"dupeguru.conf": "############################################\n# config file for dupeguru\n############################################\n\nupstream dupeguru_backend {\n server dupeguru.dupeguru.svc:5800;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name dupeguru.tryton.geeraert.eu www.dupeguru.tryton.geeraert.eu;\n location / {\n proxy_pass http://dupeguru_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n auth_basic \"Administrator’s Area\";\n auth_basic_user_file /authentication-htpasswd/.htpasswd;\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.dupeguru.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = dupeguru.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.dupeguru.tryton.geeraert.eu dupeguru.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "immich.conf": "############################################\n# config file for immich\n############################################\n\nupstream immich_backend {\n server immich-svc.immich.svc:2283;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name immich.tryton.geeraert.eu www.immich.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://immich_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n proxy_set_header X-Forwarded-Proto $scheme;\n proxy_read_timeout 60000s;\n\n\n #adding websocket , usefull for reverse proxy\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_cache_bypass $http_upgrade;\n #end of working\n\n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.immich.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = immich.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.immich.tryton.geeraert.eu immich.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"gitea.conf": "############################################\n# config file for gitea\n############################################\n\nupstream gitea_backend {\n server webserver.gitea.svc:3000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name gitea.tryton.geeraert.eu www.gitea.tryton.geeraert.eu;\n location / {\n proxy_pass http://gitea_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.gitea.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = gitea.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.gitea.tryton.geeraert.eu gitea.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "jellyfin.conf": "############################################\n# config file for jellyfin\n############################################\n\nupstream jellyfin_backend {\n server jellyfin-svc.jellyfin.svc:8096;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name jellyfin.tryton.geeraert.eu www.jellyfin.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://jellyfin_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.jellyfin.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = jellyfin.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.jellyfin.tryton.geeraert.eu jellyfin.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"gitlab.conf": "############################################\n# config file for gitlab\n############################################\n\nupstream gitlab_backend {\n server webserver.gitlab.svc:443;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name gitlab.tryton.geeraert.eu www.gitlab.tryton.geeraert.eu;\n location / {\n proxy_pass https://gitlab_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass https://gitlab_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\tclient_max_body_size 20m;\n\tproxy_request_buffering off;\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.gitlab.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = gitlab.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.gitlab.tryton.geeraert.eu gitlab.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "job-testing.conf": "############################################\n# config file for job-testing\n############################################\n\nupstream job-testing_backend {\n server django-testing-svc.django-testing.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name job-testing.tryton.geeraert.eu www.job-testing.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://job-testing_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://job-testing_backend;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.job-testing.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = job-testing.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.job-testing.tryton.geeraert.eu job-testing.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"immich.conf": "############################################\n# config file for immich\n############################################\n\nupstream immich_backend {\n server immich-svc.immich.svc:2283;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name immich.tryton.geeraert.eu www.immich.tryton.geeraert.eu;\n location / {\n proxy_pass http://immich_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n proxy_set_header X-Forwarded-Proto $scheme;\n proxy_read_timeout 60000s;\n\n\n #adding websocket , usefull for reverse proxy\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_cache_bypass $http_upgrade;\n #end of working\n\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.immich.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = immich.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.immich.tryton.geeraert.eu immich.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "nextcloud.conf": "############################################\n# config file for nextcloud\n############################################\n\nupstream nextcloud_backend {\n server webserver.nextcloud.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name nextcloud.tryton.geeraert.eu www.nextcloud.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://nextcloud_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://nextcloud_backend;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n location /.well-known/carddav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location /.well-known/caldav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location = /health {\n default_type text/html;\n return 200 \"\u003c!DOCTYPE html\u003e\u003ch2\u003ehealth check\u003c/h2\u003e\\n\";\n }\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.nextcloud.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = nextcloud.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.nextcloud.tryton.geeraert.eu nextcloud.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"jellyfin.conf": "############################################\n# config file for jellyfin\n############################################\n\nupstream jellyfin_backend {\n server jellyfin-svc.jellyfin.svc:8096;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name jellyfin.tryton.geeraert.eu www.jellyfin.tryton.geeraert.eu;\n location / {\n proxy_pass http://jellyfin_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.jellyfin.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = jellyfin.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.jellyfin.tryton.geeraert.eu jellyfin.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "octoprint.conf": "############################################\n# config file for octoprint\n############################################\n\nupstream octoprint_backend {\n server 192.168.1.28:5000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name octoprint.tryton.geeraert.eu www.octoprint.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://octoprint_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.octoprint.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = octoprint.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.octoprint.tryton.geeraert.eu octoprint.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"nextcloud.conf": "############################################\n# config file for nextcloud\n############################################\n\nupstream nextcloud_backend {\n server webserver.nextcloud.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name nextcloud.tryton.geeraert.eu www.nextcloud.tryton.geeraert.eu;\n location / {\n proxy_pass http://nextcloud_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://nextcloud_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n location /.well-known/carddav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location /.well-known/caldav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location = /health {\n default_type text/html;\n return 200 \"\u003c!DOCTYPE html\u003e\u003ch2\u003ehealth check\u003c/h2\u003e\\n\";\n }\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.nextcloud.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = nextcloud.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.nextcloud.tryton.geeraert.eu nextcloud.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "openmediavault.conf": "############################################\n# config file for openmediavault\n############################################\n\nupstream openmediavault_backend {\n server 192.168.88.29;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name openmediavault.tryton.geeraert.eu www.openmediavault.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://openmediavault_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.openmediavault.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = openmediavault.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.openmediavault.tryton.geeraert.eu openmediavault.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"octoprint.conf": "############################################\n# config file for octoprint\n############################################\n\nupstream octoprint_backend {\n server 192.168.1.28:5000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name octoprint.tryton.geeraert.eu www.octoprint.tryton.geeraert.eu;\n location / {\n proxy_pass http://octoprint_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.octoprint.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = octoprint.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.octoprint.tryton.geeraert.eu octoprint.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "paperless.conf": "############################################\n# config file for paperless\n############################################\n\nupstream paperless_backend {\n server paperless-svc.paperless.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name paperless.tryton.geeraert.eu www.paperless.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://paperless_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.paperless.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = paperless.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.paperless.tryton.geeraert.eu paperless.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"openmediavault.conf": "############################################\n# config file for openmediavault\n############################################\n\nupstream openmediavault_backend {\n server 192.168.88.29;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name openmediavault.tryton.geeraert.eu www.openmediavault.tryton.geeraert.eu;\n location / {\n proxy_pass http://openmediavault_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.openmediavault.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = openmediavault.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.openmediavault.tryton.geeraert.eu openmediavault.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "pihole.conf": "############################################\n# config file for pihole\n############################################\n\nupstream pihole_backend {\n server web.piholenew.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name pihole.tryton.geeraert.eu www.pihole.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://pihole_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.pihole.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = pihole.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.pihole.tryton.geeraert.eu pihole.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"paperless.conf": "############################################\n# config file for paperless\n############################################\n\nupstream paperless_backend {\n server paperless-svc.paperless.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name paperless.tryton.geeraert.eu www.paperless.tryton.geeraert.eu;\n location / {\n proxy_pass http://paperless_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.paperless.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = paperless.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.paperless.tryton.geeraert.eu paperless.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "portainer.conf": "############################################\n# config file for portainer\n############################################\n\nupstream portainer_backend {\n server portainer.portainer.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name portainer.tryton.geeraert.eu www.portainer.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://portainer_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.portainer.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = portainer.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.portainer.tryton.geeraert.eu portainer.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"pihole.conf": "############################################\n# config file for pihole\n############################################\n\nupstream pihole_backend {\n server web.piholenew.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name pihole.tryton.geeraert.eu www.pihole.tryton.geeraert.eu;\n location / {\n proxy_pass http://pihole_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.pihole.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = pihole.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.pihole.tryton.geeraert.eu pihole.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "prowlarr.conf": "############################################\n# config file for prowlarr\n############################################\n\nupstream prowlarr_backend {\n server prowlarr-svc.servarr.svc:9696;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name prowlarr.tryton.geeraert.eu www.prowlarr.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://prowlarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.prowlarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = prowlarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.prowlarr.tryton.geeraert.eu prowlarr.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"portainer.conf": "############################################\n# config file for portainer\n############################################\n\nupstream portainer_backend {\n server portainer.portainer.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name portainer.tryton.geeraert.eu www.portainer.tryton.geeraert.eu;\n location / {\n proxy_pass http://portainer_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.portainer.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = portainer.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.portainer.tryton.geeraert.eu portainer.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "radarr.conf": "############################################\n# config file for radarr\n############################################\n\nupstream radarr_backend {\n server radarr-svc.servarr.svc:7878;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name radarr.tryton.geeraert.eu www.radarr.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://radarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.radarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = radarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.radarr.tryton.geeraert.eu radarr.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"prowlarr.conf": "############################################\n# config file for prowlarr\n############################################\n\nupstream prowlarr_backend {\n server prowlarr-svc.servarr.svc:9696;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name prowlarr.tryton.geeraert.eu www.prowlarr.tryton.geeraert.eu;\n location / {\n proxy_pass http://prowlarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.prowlarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = prowlarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.prowlarr.tryton.geeraert.eu prowlarr.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "redirect-testing.conf": "############################################\n# config file for redirect-testing\n############################################\n\nupstream redirect-testing_backend {\n server django-testing-svc.django-testing.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name redirect-testing.tryton.geeraert.eu www.redirect-testing.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://redirect-testing_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://redirect-testing_backend;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.redirect-testing.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = redirect-testing.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.redirect-testing.tryton.geeraert.eu redirect-testing.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"qbittorrent.conf": "############################################\n# config file for qbittorrent\n############################################\n\nupstream qbittorrent_backend {\n server qbittorrent-svc.servarr.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name qbittorrent.tryton.geeraert.eu www.qbittorrent.tryton.geeraert.eu;\n location / {\n proxy_pass http://qbittorrent_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.qbittorrent.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = qbittorrent.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.qbittorrent.tryton.geeraert.eu qbittorrent.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "redirect.conf": "############################################\n# config file for redirect\n############################################\n\nupstream redirect_backend {\n server django-svc.django:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name redirect.tryton.geeraert.eu www.redirect.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://redirect_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://redirect_backend;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.redirect.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = redirect.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.redirect.tryton.geeraert.eu redirect.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"radarr.conf": "############################################\n# config file for radarr\n############################################\n\nupstream radarr_backend {\n server radarr-svc.servarr.svc:7878;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name radarr.tryton.geeraert.eu www.radarr.tryton.geeraert.eu;\n location / {\n proxy_pass http://radarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.radarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = radarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.radarr.tryton.geeraert.eu radarr.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "reverse.conf": "############################################\n# config file for reverse\n############################################\n\nupstream reverse_backend {\n server django-svc.django:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name reverse.tryton.geeraert.eu www.reverse.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://reverse_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://reverse_backend;\n\t\t}\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.reverse.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = reverse.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.reverse.tryton.geeraert.eu reverse.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"router.conf": "############################################\n# config file for router\n############################################\n\nupstream router_backend {\n server 192.168.88.1;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name router.tryton.geeraert.eu www.router.tryton.geeraert.eu;\n location / {\n proxy_pass http://router_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n auth_basic \"Administrator’s Area\";\n auth_basic_user_file /authentication-htpasswd/.htpasswd;\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.router.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = router.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.router.tryton.geeraert.eu router.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "router.conf": "############################################\n# config file for router\n############################################\n\nupstream router_backend {\n server 192.168.88.1;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name router.tryton.geeraert.eu www.router.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://router_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n auth_basic \"Administrator’s Area\";\n auth_basic_user_file /authentication-htpasswd/.htpasswd;\n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.router.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = router.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.router.tryton.geeraert.eu router.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"sonarr.conf": "############################################\n# config file for sonarr\n############################################\n\nupstream sonarr_backend {\n server sonarr-svc.servarr.svc:8989;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name sonarr.tryton.geeraert.eu www.sonarr.tryton.geeraert.eu;\n location / {\n proxy_pass http://sonarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.sonarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = sonarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.sonarr.tryton.geeraert.eu sonarr.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "sonarr.conf": "############################################\n# config file for sonarr\n############################################\n\nupstream sonarr_backend {\n server sonarr-svc.servarr.svc:8989;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name sonarr.tryton.geeraert.eu www.sonarr.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://sonarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.sonarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = sonarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.sonarr.tryton.geeraert.eu sonarr.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"stash.conf": "############################################\n# config file for stash\n############################################\n\nupstream stash_backend {\n server stash-svc.stash.svc:9999;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name stash.tryton.geeraert.eu www.stash.tryton.geeraert.eu;\n location / {\n proxy_pass http://stash_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n #don't use this as this needs to be run as root or have the CAP_NET_RAW capability) to bind to a non-local IP address.\n #Because the backend thinks the request is coming directly from the client, it will try to send the response directly back to that client IP. To prevent this (which would break the connection), you must force the response back through the NGINX server.\n #proxy_bind $remote_addr transparent;\n\n##used to be working\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n proxy_set_header X-Forwarded-Proto $scheme;\n proxy_read_timeout 60000s;\n #working\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_cache_bypass $http_upgrade;\n #end of working\n\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.stash.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = stash.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.stash.tryton.geeraert.eu stash.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "stash.conf": "############################################\n# config file for stash\n############################################\n\nupstream stash_backend {\n server stash-svc.stash.svc:9999;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name stash.tryton.geeraert.eu www.stash.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://stash_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n #don't use this as this needs to be run as root or have the CAP_NET_RAW capability) to bind to a non-local IP address.\n #Because the backend thinks the request is coming directly from the client, it will try to send the response directly back to that client IP. To prevent this (which would break the connection), you must force the response back through the NGINX server.\n #proxy_bind $remote_addr transparent;\n\n##used to be working\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n proxy_set_header X-Forwarded-Proto $scheme;\n proxy_read_timeout 60000s;\n #working\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_cache_bypass $http_upgrade;\n #end of working\n\n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB_NL; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.stash.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = stash.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.stash.tryton.geeraert.eu stash.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"synology.conf": "############################################\n# config file for synology\n############################################\n\nupstream synology_backend {\n server 192.168.88.39:5000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name synology.tryton.geeraert.eu www.synology.tryton.geeraert.eu;\n location / {\n proxy_pass http://synology_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.synology.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = synology.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.synology.tryton.geeraert.eu synology.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "synology.conf": "############################################\n# config file for synology\n############################################\n\nupstream synology_backend {\n server 192.168.88.39:5000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name synology.tryton.geeraert.eu www.synology.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://synology_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.synology.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = synology.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.synology.tryton.geeraert.eu synology.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"tdarr.conf": "############################################\n# config file for tdarr\n############################################\n\nupstream tdarr_backend {\n server tdarr-svc.servarr.svc:8265;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name tdarr.tryton.geeraert.eu www.tdarr.tryton.geeraert.eu;\n location / {\n proxy_pass http://tdarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n proxy_set_header X-Forwarded-Proto $scheme;\n proxy_read_timeout 60000s;\n#working\nproxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_cache_bypass $http_upgrade;\n#end of working\n\n\n\n\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.tdarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = tdarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.tdarr.tryton.geeraert.eu tdarr.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "unifi-inform.conf": "############################################\n# config file for unifi-inform\n############################################\n\nupstream unifi-inform_backend {\n server 192.168.88.50:8082;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name unifi-inform.tryton.geeraert.eu www.unifi-inform.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://unifi-inform_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.unifi-inform.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = unifi-inform.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.unifi-inform.tryton.geeraert.eu unifi-inform.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"unifi-inform.conf": "############################################\n# config file for unifi-inform\n############################################\n\nupstream unifi-inform_backend {\n server 192.168.88.50:8082;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name unifi-inform.tryton.geeraert.eu www.unifi-inform.tryton.geeraert.eu;\n location / {\n proxy_pass http://unifi-inform_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.unifi-inform.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = unifi-inform.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.unifi-inform.tryton.geeraert.eu unifi-inform.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "unifi.conf": "############################################\n# config file for unifi\n############################################\n\nupstream unifi_backend {\n server 192.168.88.244:8443;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name unifi.tryton.geeraert.eu www.unifi.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass https://unifi_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.unifi.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = unifi.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.unifi.tryton.geeraert.eu unifi.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"unifi.conf": "############################################\n# config file for unifi\n############################################\n\nupstream unifi_backend {\n server 192.168.88.244:8443;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name unifi.tryton.geeraert.eu www.unifi.tryton.geeraert.eu;\n location / {\n proxy_pass https://unifi_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.unifi.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = unifi.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.unifi.tryton.geeraert.eu unifi.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "wikijs.conf": "############################################\n# config file for wikijs\n############################################\n\nupstream wikijs_backend {\n server wikijs-svc.wikijs.svc:3000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name wikijs.tryton.geeraert.eu www.wikijs.tryton.geeraert.eu;\n\t\n\n location / {\n proxy_pass http://wikijs_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n\n\n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tlocation @f2b-banned {\n\t default_type text/html;\n\t return 403 \"\u003cbr/\u003e\u003ccenter\u003e\n\t \u003cb style=\\\"color:red; font-size:18pt; border:2pt solid black; padding:5pt;\\\"\u003e\n\t You are banned!\u003c/b\u003e\u003c/center\u003e\";\n\t }\n\t#location ^~ /wp-content {\n ## Logs the IP in \"deny IP;\" format to your specific file\n\t#\taccess_log /etc/nginx/blacklisted.d/blacklisted-sessions.conf deny_style;\n # access_log /etc/nginx/blacklisted.memory.d/blacklisted-sessions.conf deny_style;\n\t#\treturn 444; \n\t#}\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n access_log /var/log/nginx/blocked_countries.log blocked_fmt if=$should_log_blocked_FR_GB; \n\tclient_max_body_size 20m;\n proxy_request_buffering off;\n\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n\n\n}\nserver {\n if ($host = www.wikijs.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = wikijs.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.wikijs.tryton.geeraert.eu wikijs.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}"
"wikijs.conf": "############################################\n# config file for wikijs\n############################################\n\nupstream wikijs_backend {\n server wikijs-svc.wikijs.svc:3000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name wikijs.tryton.geeraert.eu www.wikijs.tryton.geeraert.eu;\n location / {\n proxy_pass http://wikijs_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\tclient_max_body_size 20m;\n proxy_request_buffering off;\n\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.wikijs.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = wikijs.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.wikijs.tryton.geeraert.eu wikijs.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}"
}, },
"id": "reverse-proxy/sites-terraform", "id": "reverse-proxy/sites-terraform",
"immutable": false, "immutable": false,
@@ -60,7 +59,7 @@
"labels": {}, "labels": {},
"name": "sites-terraform", "name": "sites-terraform",
"namespace": "reverse-proxy", "namespace": "reverse-proxy",
"resource_version": "212969561", "resource_version": "274958265",
"uid": "08aa2108-9dce-4e67-b000-4dc7fbd1c23e" "uid": "08aa2108-9dce-4e67-b000-4dc7fbd1c23e"
} }
] ]
@@ -71,6 +70,43 @@
} }
] ]
}, },
{
"mode": "managed",
"type": "kubernetes_config_map",
"name": "automatic-geoip-allow",
"provider": "provider[\"registry.terraform.io/hashicorp/kubernetes\"]",
"instances": [
{
"schema_version": 0,
"attributes": {
"binary_data": {},
"data": {
"FR_GB.conf": "map $geoip2_data_country_iso_code $allowed_country_FR_GB {\n\tdefault no;\n\t\n\tFR yes;\n\t\n\tGB yes;\n\t}\n\nmap $allowed_country_FR_GB $should_log_blocked_FR_GB {\n no 1;\n default 0;\n}\n\n\n",
"FR_GB_NL.conf": "map $geoip2_data_country_iso_code $allowed_country_FR_GB_NL {\n\tdefault no;\n\t\n\tFR yes;\n\t\n\tGB yes;\n\t\n\tNL yes;\n\t}\n\nmap $allowed_country_FR_GB_NL $should_log_blocked_FR_GB_NL {\n no 1;\n default 0;\n}\n\n\n"
},
"id": "reverse-proxy/geoip-allow",
"immutable": false,
"metadata": [
{
"annotations": {
"reloader.stakater.com/match": "true"
},
"generate_name": "",
"generation": 0,
"labels": {},
"name": "geoip-allow",
"namespace": "reverse-proxy",
"resource_version": "260531190",
"uid": "1792e950-437f-4b68-bbf2-b5397baa4fae"
}
]
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "bnVsbA=="
}
]
},
{ {
"mode": "managed", "mode": "managed",
"type": "kubernetes_config_map", "type": "kubernetes_config_map",
@@ -82,7 +118,7 @@
"attributes": { "attributes": {
"binary_data": {}, "binary_data": {},
"data": { "data": {
"deny.conf": "\n deny 1.2.3.4;\n\n deny 37.168.24.233;\n" "deny.conf": "\n deny 1.2.3.4;\n"
}, },
"id": "reverse-proxy/deny-ip-terraform", "id": "reverse-proxy/deny-ip-terraform",
"immutable": false, "immutable": false,
@@ -96,7 +132,7 @@
"labels": {}, "labels": {},
"name": "deny-ip-terraform", "name": "deny-ip-terraform",
"namespace": "reverse-proxy", "namespace": "reverse-proxy",
"resource_version": "213005153", "resource_version": "213005313",
"uid": "d78dd9b1-bac4-4680-afda-51d4217f59c9" "uid": "d78dd9b1-bac4-4680-afda-51d4217f59c9"
} }
] ]
@@ -106,40 +142,6 @@
"private": "bnVsbA==" "private": "bnVsbA=="
} }
] ]
},
{
"mode": "managed",
"type": "kubernetes_config_map",
"name": "websites_configmap",
"provider": "provider[\"registry.terraform.io/hashicorp/kubernetes\"]",
"instances": [
{
"schema_version": 0,
"attributes": {
"binary_data": {},
"data": {
"websites.json": "\n\n{\n \"bitwarden\": {\n \"service\": \"nginx.bitwarden.svc:8080\"\n }\n}\n\n\n\n{\n \"bookstack\": {\n \"service\": \"bookstack-svc.bookstack.svc\"\n }\n}\n\n\n\n\n\n{\n \"django\": {\n \"service\": \"django-svc.django:8000\"\n }\n}\n\n\n\n{\n \"django-dev\": {\n \"service\": \"webserver.django-dev.svc:8000\"\n }\n}\n\n\n\n\n\n{\n \"dupeguru\": {\n \"service\": \"dupeguru.dupeguru.svc:5800\"\n }\n}\n\n\n\n\n\n\n\n{\n \"gitea\": {\n \"service\": \"webserver.gitea.svc:3000\"\n }\n}\n\n\n\n{\n \"gitlab\": {\n \"service\": \"webserver.gitlab.svc:443\"\n }\n}\n\n\n\n\n\n\n\n{\n \"immich\": {\n \"service\": \"immich-svc.immich.svc:2283\"\n }\n}\n\n\n\n\n\n{\n \"jellyfin\": {\n \"service\": \"jellyfin-svc.jellyfin.svc:8096\"\n }\n}\n\n\n\n\n\n\n\n\n\n\n\n\n\n{\n \"nextcloud\": {\n \"service\": \"webserver.nextcloud.svc\"\n }\n}\n\n\n\n\n\n\n\n\n\n{\n \"octoprint\": {\n \"service\": \"192.168.1.28:5000\"\n }\n}\n\n\n\n\n\n{\n \"openmediavault\": {\n \"service\": \"192.168.88.29\"\n }\n}\n\n\n\n\n\n\n\n{\n \"paperless\": {\n \"service\": \"paperless-svc.paperless.svc:8000\"\n }\n}\n\n\n\n{\n \"pihole\": {\n \"service\": \"web.piholenew.svc\"\n }\n}\n\n\n\n\n\n{\n \"portainer\": {\n \"service\": \"portainer.portainer.svc\"\n }\n}\n\n\n\n\n\n{\n \"prowlarr\": {\n \"service\": \"prowlarr-svc.servarr.svc:9696\"\n }\n}\n\n\n\n\n\n{\n \"qbittorrent\": {\n \"service\": \"qbittorrent-svc.servarr.svc:8080\"\n }\n}\n\n\n\n{\n \"radarr\": {\n \"service\": \"radarr-svc.servarr.svc:7878\"\n }\n}\n\n\n\n\n\n\n\n{\n \"router\": {\n \"service\": \"192.168.88.1\"\n }\n}\n\n\n\n\n\n\n\n{\n \"sonarr\": {\n \"service\": \"sonarr-svc.servarr.svc:8989\"\n }\n}\n\n\n\n\n\n{\n \"stash\": {\n \"service\": \"stash-svc.stash.svc:9999\"\n }\n}\n\n\n\n\n\n{\n \"synology\": {\n \"service\": \"192.168.88.39:5000\"\n }\n}\n\n\n\n{\n \"tdarr\": {\n \"service\": \"tdarr-svc.servarr.svc:8265\"\n }\n}\n\n\n\n\n\n\n\n\n\n\n\n\n\n{\n \"unifi\": {\n \"service\": \"192.168.88.244:8443\"\n }\n}\n\n\n\n{\n \"unifi-inform\": {\n \"service\": \"192.168.88.50:8082\"\n }\n}\n\n\n\n\n\n{\n \"wikijs\": {\n \"service\": \"wikijs-svc.wikijs.svc:3000\"\n }\n}\n\n"
},
"id": "django-python/sites-terraform",
"immutable": false,
"metadata": [
{
"annotations": {},
"generate_name": "",
"generation": 0,
"labels": {},
"name": "sites-terraform",
"namespace": "django-python",
"resource_version": "208986491",
"uid": "5349fabc-956e-40d7-ba1d-a72f35e5330a"
}
]
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "bnVsbA=="
}
]
} }
], ],
"check_results": null "check_results": null
terraform/websites_terraform.json.tftpl
-9
View File
@@ -1,9 +0,0 @@
%{ for key, value in map_of_params }
%{ if value.enabled}
{
"${key}": {
"service": "${value.service}"
}
}
%{ endif }
%{ endfor ~}