This commit is contained in:
@@ -0,0 +1,3 @@
|
||||
%{ for ip in deny_ip }
|
||||
deny ${ip};
|
||||
%{ endfor ~}
|
||||
@@ -18,6 +18,24 @@ variable "nginx_sites" {
|
||||
}))
|
||||
|
||||
}
|
||||
variable "deny_ip" {
|
||||
type = list(string)
|
||||
}
|
||||
|
||||
resource "kubernetes_config_map" "deny_ip_configmap" {
|
||||
metadata {
|
||||
name = "deny-ip-terraform"
|
||||
namespace = "reverse-proxy"
|
||||
annotations = {
|
||||
"reloader.stakater.com/match" : "true",
|
||||
}
|
||||
}
|
||||
|
||||
data = {
|
||||
"deny.conf" = templatefile("deny_ip.json.tftpl", {
|
||||
deny_ip = var.deny_ip })
|
||||
}
|
||||
}
|
||||
|
||||
resource "kubernetes_config_map" "websites_configmap" {
|
||||
metadata {
|
||||
|
||||
@@ -34,7 +34,7 @@ server {
|
||||
|
||||
access_log /var/log/nginx/access.log my_custom_format;
|
||||
access_log /var/log/nginx/ip_audit.log ip_audit;
|
||||
|
||||
access_log /var/log/nginx/backend_debug.log backend_debug;
|
||||
${extra-value}
|
||||
%{~ if http2_bool~}
|
||||
http2 on;
|
||||
|
||||
+100
-29
@@ -1,7 +1,7 @@
|
||||
{
|
||||
"version": 4,
|
||||
"terraform_version": "1.9.2",
|
||||
"serial": 1104,
|
||||
"terraform_version": "1.13.1",
|
||||
"serial": 1433,
|
||||
"lineage": "a36de74c-83f8-01fe-0504-92c54a21d49e",
|
||||
"outputs": {
|
||||
"Nginx_status": {
|
||||
@@ -21,32 +21,32 @@
|
||||
"attributes": {
|
||||
"binary_data": {},
|
||||
"data": {
|
||||
"bitwarden.conf": "############################################\n# config file for bitwarden\n############################################\n\nupstream bitwarden_backend {\n server nginx.bitwarden.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name bitwarden.tryton.geeraert.eu www.bitwarden.tryton.geeraert.eu;\n location / {\n proxy_pass http://bitwarden_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n\n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.bitwarden.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = bitwarden.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.bitwarden.tryton.geeraert.eu bitwarden.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"bookstack.conf": "############################################\n# config file for bookstack\n############################################\n\nupstream bookstack_backend {\n server bookstack-svc.bookstack.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name bookstack.tryton.geeraert.eu www.bookstack.tryton.geeraert.eu;\n location / {\n proxy_pass http://bookstack_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.bookstack.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = bookstack.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.bookstack.tryton.geeraert.eu bookstack.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"django.conf": "############################################\n# config file for django\n############################################\n\nupstream django_backend {\n server webserver.django-python.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name django.tryton.geeraert.eu www.django.tryton.geeraert.eu;\n location / {\n proxy_pass http://django_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://django_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n\n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.django.tryton.geeraert.eu django.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"dupeguru.conf": "############################################\n# config file for dupeguru\n############################################\n\nupstream dupeguru_backend {\n server dupeguru.dupeguru.svc:5800;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name dupeguru.tryton.geeraert.eu www.dupeguru.tryton.geeraert.eu;\n location / {\n proxy_pass http://dupeguru_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n auth_basic \"Administrator’s Area\";\n auth_basic_user_file /authentication-htpasswd/.htpasswd;\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.dupeguru.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = dupeguru.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.dupeguru.tryton.geeraert.eu dupeguru.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"echo.conf": "############################################\n# config file for echo\n############################################\n\nupstream echo_backend {\n server echo-server.echo-server.svc:80;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name echo.tryton.geeraert.eu www.echo.tryton.geeraert.eu;\n location / {\n proxy_pass http://echo_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://echo_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n\n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.echo.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = echo.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.echo.tryton.geeraert.eu echo.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"gitea.conf": "############################################\n# config file for gitea\n############################################\n\nupstream gitea_backend {\n server webserver.gitea.svc:3000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name gitea.tryton.geeraert.eu www.gitea.tryton.geeraert.eu;\n location / {\n proxy_pass http://gitea_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.gitea.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = gitea.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.gitea.tryton.geeraert.eu gitea.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"gitlab.conf": "############################################\n# config file for gitlab\n############################################\n\nupstream gitlab_backend {\n server webserver.gitlab.svc:443;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name gitlab.tryton.geeraert.eu www.gitlab.tryton.geeraert.eu;\n location / {\n proxy_pass https://gitlab_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass https://gitlab_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n\n\tclient_max_body_size 20m;\n\tproxy_request_buffering off;\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.gitlab.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = gitlab.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.gitlab.tryton.geeraert.eu gitlab.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"immich.conf": "############################################\n# config file for immich\n############################################\n\nupstream immich_backend {\n server immich-server.immich.svc:3001;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name immich.tryton.geeraert.eu www.immich.tryton.geeraert.eu;\n location / {\n proxy_pass http://immich_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.immich.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = immich.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.immich.tryton.geeraert.eu immich.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"jellyfin.conf": "############################################\n# config file for jellyfin\n############################################\n\nupstream jellyfin_backend {\n server jellyfin-svc.jellyfin.svc:8096;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name jellyfin.tryton.geeraert.eu www.jellyfin.tryton.geeraert.eu;\n location / {\n proxy_pass http://jellyfin_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.jellyfin.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = jellyfin.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.jellyfin.tryton.geeraert.eu jellyfin.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"nextcloud.conf": "############################################\n# config file for nextcloud\n############################################\n\nupstream nextcloud_backend {\n server webserver.nextcloud.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name nextcloud.tryton.geeraert.eu www.nextcloud.tryton.geeraert.eu;\n location / {\n proxy_pass http://nextcloud_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://nextcloud_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n\n\t\n\n location /.well-known/carddav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location /.well-known/caldav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location = /health {\n default_type text/html;\n return 200 \"\u003c!DOCTYPE html\u003e\u003ch2\u003ehealth check\u003c/h2\u003e\\n\";\n }\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.nextcloud.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = nextcloud.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.nextcloud.tryton.geeraert.eu nextcloud.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"octoprint.conf": "############################################\n# config file for octoprint\n############################################\n\nupstream octoprint_backend {\n server 192.168.1.28:5000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name octoprint.tryton.geeraert.eu www.octoprint.tryton.geeraert.eu;\n location / {\n proxy_pass http://octoprint_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.octoprint.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = octoprint.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.octoprint.tryton.geeraert.eu octoprint.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"openmediavault.conf": "############################################\n# config file for openmediavault\n############################################\n\nupstream openmediavault_backend {\n server 192.168.88.29;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name openmediavault.tryton.geeraert.eu www.openmediavault.tryton.geeraert.eu;\n location / {\n proxy_pass http://openmediavault_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.openmediavault.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = openmediavault.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.openmediavault.tryton.geeraert.eu openmediavault.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"paperless.conf": "############################################\n# config file for paperless\n############################################\n\nupstream paperless_backend {\n server webserver.paperless.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name paperless.tryton.geeraert.eu www.paperless.tryton.geeraert.eu;\n location / {\n proxy_pass http://paperless_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.paperless.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = paperless.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.paperless.tryton.geeraert.eu paperless.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"pihole.conf": "############################################\n# config file for pihole\n############################################\n\nupstream pihole_backend {\n server web.piholenew.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name pihole.tryton.geeraert.eu www.pihole.tryton.geeraert.eu;\n location / {\n proxy_pass http://pihole_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.pihole.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = pihole.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.pihole.tryton.geeraert.eu pihole.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"portainer.conf": "############################################\n# config file for portainer\n############################################\n\nupstream portainer_backend {\n server portainer.portainer.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name portainer.tryton.geeraert.eu www.portainer.tryton.geeraert.eu;\n location / {\n proxy_pass http://portainer_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.portainer.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = portainer.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.portainer.tryton.geeraert.eu portainer.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"prowlarr.conf": "############################################\n# config file for prowlarr\n############################################\n\nupstream prowlarr_backend {\n server prowlarr.servarr.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name prowlarr.tryton.geeraert.eu www.prowlarr.tryton.geeraert.eu;\n location / {\n proxy_pass http://prowlarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.prowlarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = prowlarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.prowlarr.tryton.geeraert.eu prowlarr.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"qbittorrent.conf": "############################################\n# config file for qbittorrent\n############################################\n\nupstream qbittorrent_backend {\n server qbittorrent.servarr.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name qbittorrent.tryton.geeraert.eu www.qbittorrent.tryton.geeraert.eu;\n location / {\n proxy_pass http://qbittorrent_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.qbittorrent.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = qbittorrent.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.qbittorrent.tryton.geeraert.eu qbittorrent.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"radarr.conf": "############################################\n# config file for radarr\n############################################\n\nupstream radarr_backend {\n server radarr.servarr.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name radarr.tryton.geeraert.eu www.radarr.tryton.geeraert.eu;\n location / {\n proxy_pass http://radarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.radarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = radarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.radarr.tryton.geeraert.eu radarr.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"router.conf": "############################################\n# config file for router\n############################################\n\nupstream router_backend {\n server 192.168.88.1;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name router.tryton.geeraert.eu www.router.tryton.geeraert.eu;\n location / {\n proxy_pass http://router_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n auth_basic \"Administrator’s Area\";\n auth_basic_user_file /authentication-htpasswd/.htpasswd;\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.router.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = router.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.router.tryton.geeraert.eu router.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"screeps.conf": "############################################\n# config file for screeps\n############################################\n\nupstream screeps_backend {\n server screeps-svc.screeps.svc:21025;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name screeps.tryton.geeraert.eu www.screeps.tryton.geeraert.eu;\n location / {\n proxy_pass http://screeps_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n\n\t\n\n listen 443 ssl;\n listen 80;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}",
|
||||
"sickchill.conf": "############################################\n# config file for sickchill\n############################################\n\nupstream sickchill_backend {\n server sickchill.servarr.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name sickchill.tryton.geeraert.eu www.sickchill.tryton.geeraert.eu;\n location / {\n proxy_pass http://sickchill_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.sickchill.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = sickchill.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.sickchill.tryton.geeraert.eu sickchill.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"sonarr.conf": "############################################\n# config file for sonarr\n############################################\n\nupstream sonarr_backend {\n server sonarr.servarr.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name sonarr.tryton.geeraert.eu www.sonarr.tryton.geeraert.eu;\n location / {\n proxy_pass http://sonarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.sonarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = sonarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.sonarr.tryton.geeraert.eu sonarr.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"stash.conf": "############################################\n# config file for stash\n############################################\n\nupstream stash_backend {\n server stash-svc.stash.svc:9999;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name stash.tryton.geeraert.eu www.stash.tryton.geeraert.eu;\n location / {\n proxy_pass http://stash_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n proxy_set_header X-Forwarded-Proto $scheme;\n proxy_read_timeout 60000s;\n#working\nproxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_cache_bypass $http_upgrade;\n#end of working\n\n\n\n\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.stash.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = stash.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.stash.tryton.geeraert.eu stash.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"synology.conf": "############################################\n# config file for synology\n############################################\n\nupstream synology_backend {\n server 192.168.88.39:5000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name synology.tryton.geeraert.eu www.synology.tryton.geeraert.eu;\n location / {\n proxy_pass http://synology_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.synology.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = synology.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.synology.tryton.geeraert.eu synology.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"unifi-inform.conf": "############################################\n# config file for unifi-inform\n############################################\n\nupstream unifi-inform_backend {\n server 192.168.88.50:8082;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name unifi-inform.tryton.geeraert.eu www.unifi-inform.tryton.geeraert.eu;\n location / {\n proxy_pass http://unifi-inform_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.unifi-inform.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = unifi-inform.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.unifi-inform.tryton.geeraert.eu unifi-inform.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"unifi.conf": "############################################\n# config file for unifi\n############################################\n\nupstream unifi_backend {\n server 192.168.88.244:8443;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name unifi.tryton.geeraert.eu www.unifi.tryton.geeraert.eu;\n location / {\n proxy_pass https://unifi_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.unifi.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = unifi.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.unifi.tryton.geeraert.eu unifi.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}"
|
||||
"bitwarden.conf": "############################################\n# config file for bitwarden\n############################################\n\nupstream bitwarden_backend {\n server nginx.bitwarden.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name bitwarden.tryton.geeraert.eu www.bitwarden.tryton.geeraert.eu;\n location / {\n proxy_pass http://bitwarden_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.bitwarden.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = bitwarden.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.bitwarden.tryton.geeraert.eu bitwarden.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"bookstack.conf": "############################################\n# config file for bookstack\n############################################\n\nupstream bookstack_backend {\n server bookstack-svc.bookstack.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name bookstack.tryton.geeraert.eu www.bookstack.tryton.geeraert.eu;\n location / {\n proxy_pass http://bookstack_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.bookstack.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = bookstack.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.bookstack.tryton.geeraert.eu bookstack.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"django-dev.conf": "############################################\n# config file for django-dev\n############################################\n\nupstream django-dev_backend {\n server webserver.django-dev.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name django-dev.tryton.geeraert.eu www.django-dev.tryton.geeraert.eu;\n location / {\n proxy_pass http://django-dev_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://django-dev_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.django-dev.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = django-dev.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.django-dev.tryton.geeraert.eu django-dev.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"django.conf": "############################################\n# config file for django\n############################################\n\nupstream django_backend {\n server django-svc.django:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name django.tryton.geeraert.eu www.django.tryton.geeraert.eu;\n location / {\n proxy_pass http://django_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://django_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.django.tryton.geeraert.eu django.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"dupeguru.conf": "############################################\n# config file for dupeguru\n############################################\n\nupstream dupeguru_backend {\n server dupeguru.dupeguru.svc:5800;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name dupeguru.tryton.geeraert.eu www.dupeguru.tryton.geeraert.eu;\n location / {\n proxy_pass http://dupeguru_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n auth_basic \"Administrator’s Area\";\n auth_basic_user_file /authentication-htpasswd/.htpasswd;\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.dupeguru.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = dupeguru.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.dupeguru.tryton.geeraert.eu dupeguru.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"gitea.conf": "############################################\n# config file for gitea\n############################################\n\nupstream gitea_backend {\n server webserver.gitea.svc:3000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name gitea.tryton.geeraert.eu www.gitea.tryton.geeraert.eu;\n location / {\n proxy_pass http://gitea_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.gitea.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = gitea.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.gitea.tryton.geeraert.eu gitea.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"gitlab.conf": "############################################\n# config file for gitlab\n############################################\n\nupstream gitlab_backend {\n server webserver.gitlab.svc:443;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name gitlab.tryton.geeraert.eu www.gitlab.tryton.geeraert.eu;\n location / {\n proxy_pass https://gitlab_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass https://gitlab_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\tclient_max_body_size 20m;\n\tproxy_request_buffering off;\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.gitlab.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = gitlab.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.gitlab.tryton.geeraert.eu gitlab.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"immich.conf": "############################################\n# config file for immich\n############################################\n\nupstream immich_backend {\n server immich-svc.immich.svc:2283;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name immich.tryton.geeraert.eu www.immich.tryton.geeraert.eu;\n location / {\n proxy_pass http://immich_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n proxy_set_header X-Forwarded-Proto $scheme;\n proxy_read_timeout 60000s;\n\n\n #adding websocket , usefull for reverse proxy\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_cache_bypass $http_upgrade;\n #end of working\n\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.immich.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = immich.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.immich.tryton.geeraert.eu immich.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"jellyfin.conf": "############################################\n# config file for jellyfin\n############################################\n\nupstream jellyfin_backend {\n server jellyfin-svc.jellyfin.svc:8096;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name jellyfin.tryton.geeraert.eu www.jellyfin.tryton.geeraert.eu;\n location / {\n proxy_pass http://jellyfin_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.jellyfin.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = jellyfin.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.jellyfin.tryton.geeraert.eu jellyfin.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"nextcloud.conf": "############################################\n# config file for nextcloud\n############################################\n\nupstream nextcloud_backend {\n server webserver.nextcloud.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name nextcloud.tryton.geeraert.eu www.nextcloud.tryton.geeraert.eu;\n location / {\n proxy_pass http://nextcloud_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://nextcloud_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n location /.well-known/carddav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location /.well-known/caldav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location = /health {\n default_type text/html;\n return 200 \"\u003c!DOCTYPE html\u003e\u003ch2\u003ehealth check\u003c/h2\u003e\\n\";\n }\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.nextcloud.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = nextcloud.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.nextcloud.tryton.geeraert.eu nextcloud.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"octoprint.conf": "############################################\n# config file for octoprint\n############################################\n\nupstream octoprint_backend {\n server 192.168.1.28:5000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name octoprint.tryton.geeraert.eu www.octoprint.tryton.geeraert.eu;\n location / {\n proxy_pass http://octoprint_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.octoprint.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = octoprint.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.octoprint.tryton.geeraert.eu octoprint.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"openmediavault.conf": "############################################\n# config file for openmediavault\n############################################\n\nupstream openmediavault_backend {\n server 192.168.88.29;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name openmediavault.tryton.geeraert.eu www.openmediavault.tryton.geeraert.eu;\n location / {\n proxy_pass http://openmediavault_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.openmediavault.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = openmediavault.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.openmediavault.tryton.geeraert.eu openmediavault.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"paperless.conf": "############################################\n# config file for paperless\n############################################\n\nupstream paperless_backend {\n server paperless-svc.paperless.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name paperless.tryton.geeraert.eu www.paperless.tryton.geeraert.eu;\n location / {\n proxy_pass http://paperless_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.paperless.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = paperless.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.paperless.tryton.geeraert.eu paperless.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"pihole.conf": "############################################\n# config file for pihole\n############################################\n\nupstream pihole_backend {\n server web.piholenew.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name pihole.tryton.geeraert.eu www.pihole.tryton.geeraert.eu;\n location / {\n proxy_pass http://pihole_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.pihole.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = pihole.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.pihole.tryton.geeraert.eu pihole.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"portainer.conf": "############################################\n# config file for portainer\n############################################\n\nupstream portainer_backend {\n server portainer.portainer.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name portainer.tryton.geeraert.eu www.portainer.tryton.geeraert.eu;\n location / {\n proxy_pass http://portainer_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.portainer.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = portainer.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.portainer.tryton.geeraert.eu portainer.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"prowlarr.conf": "############################################\n# config file for prowlarr\n############################################\n\nupstream prowlarr_backend {\n server prowlarr-svc.servarr.svc:9696;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name prowlarr.tryton.geeraert.eu www.prowlarr.tryton.geeraert.eu;\n location / {\n proxy_pass http://prowlarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.prowlarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = prowlarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.prowlarr.tryton.geeraert.eu prowlarr.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"qbittorrent.conf": "############################################\n# config file for qbittorrent\n############################################\n\nupstream qbittorrent_backend {\n server qbittorrent-svc.servarr.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name qbittorrent.tryton.geeraert.eu www.qbittorrent.tryton.geeraert.eu;\n location / {\n proxy_pass http://qbittorrent_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.qbittorrent.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = qbittorrent.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.qbittorrent.tryton.geeraert.eu qbittorrent.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"radarr.conf": "############################################\n# config file for radarr\n############################################\n\nupstream radarr_backend {\n server radarr-svc.servarr.svc:7878;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name radarr.tryton.geeraert.eu www.radarr.tryton.geeraert.eu;\n location / {\n proxy_pass http://radarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.radarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = radarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.radarr.tryton.geeraert.eu radarr.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"router.conf": "############################################\n# config file for router\n############################################\n\nupstream router_backend {\n server 192.168.88.1;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name router.tryton.geeraert.eu www.router.tryton.geeraert.eu;\n location / {\n proxy_pass http://router_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n auth_basic \"Administrator’s Area\";\n auth_basic_user_file /authentication-htpasswd/.htpasswd;\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.router.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = router.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.router.tryton.geeraert.eu router.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"sonarr.conf": "############################################\n# config file for sonarr\n############################################\n\nupstream sonarr_backend {\n server sonarr-svc.servarr.svc:8989;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name sonarr.tryton.geeraert.eu www.sonarr.tryton.geeraert.eu;\n location / {\n proxy_pass http://sonarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.sonarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = sonarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.sonarr.tryton.geeraert.eu sonarr.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"stash.conf": "############################################\n# config file for stash\n############################################\n\nupstream stash_backend {\n server stash-svc.stash.svc:9999;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name stash.tryton.geeraert.eu www.stash.tryton.geeraert.eu;\n location / {\n proxy_pass http://stash_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n #don't use this as this needs to be run as root or have the CAP_NET_RAW capability) to bind to a non-local IP address.\n #Because the backend thinks the request is coming directly from the client, it will try to send the response directly back to that client IP. To prevent this (which would break the connection), you must force the response back through the NGINX server.\n #proxy_bind $remote_addr transparent;\n\n##used to be working\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n proxy_set_header X-Forwarded-Proto $scheme;\n proxy_read_timeout 60000s;\n #working\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_cache_bypass $http_upgrade;\n #end of working\n\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.stash.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = stash.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.stash.tryton.geeraert.eu stash.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"synology.conf": "############################################\n# config file for synology\n############################################\n\nupstream synology_backend {\n server 192.168.88.39:5000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name synology.tryton.geeraert.eu www.synology.tryton.geeraert.eu;\n location / {\n proxy_pass http://synology_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.synology.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = synology.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.synology.tryton.geeraert.eu synology.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"tdarr.conf": "############################################\n# config file for tdarr\n############################################\n\nupstream tdarr_backend {\n server tdarr-svc.servarr.svc:8265;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name tdarr.tryton.geeraert.eu www.tdarr.tryton.geeraert.eu;\n location / {\n proxy_pass http://tdarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n proxy_set_header X-Forwarded-Proto $scheme;\n proxy_read_timeout 60000s;\n#working\nproxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_cache_bypass $http_upgrade;\n#end of working\n\n\n\n\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.tdarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = tdarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.tdarr.tryton.geeraert.eu tdarr.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"unifi-inform.conf": "############################################\n# config file for unifi-inform\n############################################\n\nupstream unifi-inform_backend {\n server 192.168.88.50:8082;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name unifi-inform.tryton.geeraert.eu www.unifi-inform.tryton.geeraert.eu;\n location / {\n proxy_pass http://unifi-inform_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.unifi-inform.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = unifi-inform.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.unifi-inform.tryton.geeraert.eu unifi-inform.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"unifi.conf": "############################################\n# config file for unifi\n############################################\n\nupstream unifi_backend {\n server 192.168.88.244:8443;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name unifi.tryton.geeraert.eu www.unifi.tryton.geeraert.eu;\n location / {\n proxy_pass https://unifi_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.unifi.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = unifi.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.unifi.tryton.geeraert.eu unifi.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"wikijs.conf": "############################################\n# config file for wikijs\n############################################\n\nupstream wikijs_backend {\n server wikijs-svc.wikijs.svc:3000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name wikijs.tryton.geeraert.eu www.wikijs.tryton.geeraert.eu;\n location / {\n proxy_pass http://wikijs_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\tclient_max_body_size 20m;\n proxy_request_buffering off;\n\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.wikijs.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = wikijs.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.wikijs.tryton.geeraert.eu wikijs.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}"
|
||||
},
|
||||
"id": "reverse-proxy/sites-terraform",
|
||||
"immutable": false,
|
||||
@@ -60,12 +60,83 @@
|
||||
"labels": {},
|
||||
"name": "sites-terraform",
|
||||
"namespace": "reverse-proxy",
|
||||
"resource_version": "118208714",
|
||||
"resource_version": "212969561",
|
||||
"uid": "08aa2108-9dce-4e67-b000-4dc7fbd1c23e"
|
||||
}
|
||||
]
|
||||
},
|
||||
"sensitive_attributes": [],
|
||||
"identity_schema_version": 0,
|
||||
"private": "bnVsbA=="
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"mode": "managed",
|
||||
"type": "kubernetes_config_map",
|
||||
"name": "deny_ip_configmap",
|
||||
"provider": "provider[\"registry.terraform.io/hashicorp/kubernetes\"]",
|
||||
"instances": [
|
||||
{
|
||||
"schema_version": 0,
|
||||
"attributes": {
|
||||
"binary_data": {},
|
||||
"data": {
|
||||
"deny.conf": "\n deny 1.2.3.4;\n"
|
||||
},
|
||||
"id": "reverse-proxy/deny-ip-terraform",
|
||||
"immutable": false,
|
||||
"metadata": [
|
||||
{
|
||||
"annotations": {
|
||||
"reloader.stakater.com/match": "true"
|
||||
},
|
||||
"generate_name": "",
|
||||
"generation": 0,
|
||||
"labels": {},
|
||||
"name": "deny-ip-terraform",
|
||||
"namespace": "reverse-proxy",
|
||||
"resource_version": "213005313",
|
||||
"uid": "d78dd9b1-bac4-4680-afda-51d4217f59c9"
|
||||
}
|
||||
]
|
||||
},
|
||||
"sensitive_attributes": [],
|
||||
"identity_schema_version": 0,
|
||||
"private": "bnVsbA=="
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"mode": "managed",
|
||||
"type": "kubernetes_config_map",
|
||||
"name": "websites_configmap",
|
||||
"provider": "provider[\"registry.terraform.io/hashicorp/kubernetes\"]",
|
||||
"instances": [
|
||||
{
|
||||
"schema_version": 0,
|
||||
"attributes": {
|
||||
"binary_data": {},
|
||||
"data": {
|
||||
"websites.json": "\n\n{\n \"bitwarden\": {\n \"service\": \"nginx.bitwarden.svc:8080\"\n }\n}\n\n\n\n{\n \"bookstack\": {\n \"service\": \"bookstack-svc.bookstack.svc\"\n }\n}\n\n\n\n\n\n{\n \"django\": {\n \"service\": \"django-svc.django:8000\"\n }\n}\n\n\n\n{\n \"django-dev\": {\n \"service\": \"webserver.django-dev.svc:8000\"\n }\n}\n\n\n\n\n\n{\n \"dupeguru\": {\n \"service\": \"dupeguru.dupeguru.svc:5800\"\n }\n}\n\n\n\n\n\n\n\n{\n \"gitea\": {\n \"service\": \"webserver.gitea.svc:3000\"\n }\n}\n\n\n\n{\n \"gitlab\": {\n \"service\": \"webserver.gitlab.svc:443\"\n }\n}\n\n\n\n\n\n\n\n{\n \"immich\": {\n \"service\": \"immich-svc.immich.svc:2283\"\n }\n}\n\n\n\n\n\n{\n \"jellyfin\": {\n \"service\": \"jellyfin-svc.jellyfin.svc:8096\"\n }\n}\n\n\n\n\n\n\n\n\n\n\n\n\n\n{\n \"nextcloud\": {\n \"service\": \"webserver.nextcloud.svc\"\n }\n}\n\n\n\n\n\n\n\n\n\n{\n \"octoprint\": {\n \"service\": \"192.168.1.28:5000\"\n }\n}\n\n\n\n\n\n{\n \"openmediavault\": {\n \"service\": \"192.168.88.29\"\n }\n}\n\n\n\n\n\n\n\n{\n \"paperless\": {\n \"service\": \"paperless-svc.paperless.svc:8000\"\n }\n}\n\n\n\n{\n \"pihole\": {\n \"service\": \"web.piholenew.svc\"\n }\n}\n\n\n\n\n\n{\n \"portainer\": {\n \"service\": \"portainer.portainer.svc\"\n }\n}\n\n\n\n\n\n{\n \"prowlarr\": {\n \"service\": \"prowlarr-svc.servarr.svc:9696\"\n }\n}\n\n\n\n\n\n{\n \"qbittorrent\": {\n \"service\": \"qbittorrent-svc.servarr.svc:8080\"\n }\n}\n\n\n\n{\n \"radarr\": {\n \"service\": \"radarr-svc.servarr.svc:7878\"\n }\n}\n\n\n\n\n\n\n\n{\n \"router\": {\n \"service\": \"192.168.88.1\"\n }\n}\n\n\n\n\n\n\n\n{\n \"sonarr\": {\n \"service\": \"sonarr-svc.servarr.svc:8989\"\n }\n}\n\n\n\n\n\n{\n \"stash\": {\n \"service\": \"stash-svc.stash.svc:9999\"\n }\n}\n\n\n\n\n\n{\n \"synology\": {\n \"service\": \"192.168.88.39:5000\"\n }\n}\n\n\n\n{\n \"tdarr\": {\n \"service\": \"tdarr-svc.servarr.svc:8265\"\n }\n}\n\n\n\n\n\n\n\n\n\n\n\n\n\n{\n \"unifi\": {\n \"service\": \"192.168.88.244:8443\"\n }\n}\n\n\n\n{\n \"unifi-inform\": {\n \"service\": \"192.168.88.50:8082\"\n }\n}\n\n\n\n\n\n{\n \"wikijs\": {\n \"service\": \"wikijs-svc.wikijs.svc:3000\"\n }\n}\n\n"
|
||||
},
|
||||
"id": "django-python/sites-terraform",
|
||||
"immutable": false,
|
||||
"metadata": [
|
||||
{
|
||||
"annotations": {},
|
||||
"generate_name": "",
|
||||
"generation": 0,
|
||||
"labels": {},
|
||||
"name": "sites-terraform",
|
||||
"namespace": "django-python",
|
||||
"resource_version": "208986491",
|
||||
"uid": "5349fabc-956e-40d7-ba1d-a72f35e5330a"
|
||||
}
|
||||
]
|
||||
},
|
||||
"sensitive_attributes": [],
|
||||
"identity_schema_version": 0,
|
||||
"private": "bnVsbA=="
|
||||
}
|
||||
]
|
||||
|
||||
@@ -1,7 +1,7 @@
|
||||
{
|
||||
"version": 4,
|
||||
"terraform_version": "1.9.2",
|
||||
"serial": 1102,
|
||||
"terraform_version": "1.13.1",
|
||||
"serial": 1431,
|
||||
"lineage": "a36de74c-83f8-01fe-0504-92c54a21d49e",
|
||||
"outputs": {
|
||||
"Nginx_status": {
|
||||
@@ -21,32 +21,32 @@
|
||||
"attributes": {
|
||||
"binary_data": {},
|
||||
"data": {
|
||||
"bitwarden.conf": "############################################\n# config file for bitwarden\n############################################\n\nupstream bitwarden_backend {\n server nginx.bitwarden.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name bitwarden.tryton.geeraert.eu www.bitwarden.tryton.geeraert.eu;\n location / {\n proxy_pass http://bitwarden_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.bitwarden.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = bitwarden.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.bitwarden.tryton.geeraert.eu bitwarden.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"bookstack.conf": "############################################\n# config file for bookstack\n############################################\n\nupstream bookstack_backend {\n server bookstack-svc.bookstack.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name bookstack.tryton.geeraert.eu www.bookstack.tryton.geeraert.eu;\n location / {\n proxy_pass http://bookstack_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.bookstack.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = bookstack.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.bookstack.tryton.geeraert.eu bookstack.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"django.conf": "############################################\n# config file for django\n############################################\n\nupstream django_backend {\n server webserver.django-python.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name django.tryton.geeraert.eu www.django.tryton.geeraert.eu;\n location / {\n proxy_pass http://django_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://django_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.django.tryton.geeraert.eu django.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"dupeguru.conf": "############################################\n# config file for dupeguru\n############################################\n\nupstream dupeguru_backend {\n server dupeguru.dupeguru.svc:5800;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name dupeguru.tryton.geeraert.eu www.dupeguru.tryton.geeraert.eu;\n location / {\n proxy_pass http://dupeguru_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n auth_basic \"Administrator’s Area\";\n auth_basic_user_file /authentication-htpasswd/.htpasswd;\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.dupeguru.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = dupeguru.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.dupeguru.tryton.geeraert.eu dupeguru.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"echo.conf": "############################################\n# config file for echo\n############################################\n\nupstream echo_backend {\n server echo-server.echo-server.svc:80;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name echo.tryton.geeraert.eu www.echo.tryton.geeraert.eu;\n location / {\n proxy_pass http://echo_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://echo_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.echo.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = echo.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.echo.tryton.geeraert.eu echo.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"gitea.conf": "############################################\n# config file for gitea\n############################################\n\nupstream gitea_backend {\n server webserver.gitea.svc:3000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name gitea.tryton.geeraert.eu www.gitea.tryton.geeraert.eu;\n location / {\n proxy_pass http://gitea_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.gitea.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = gitea.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.gitea.tryton.geeraert.eu gitea.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"gitlab.conf": "############################################\n# config file for gitlab\n############################################\n\nupstream gitlab_backend {\n server webserver.gitlab.svc:443;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name gitlab.tryton.geeraert.eu www.gitlab.tryton.geeraert.eu;\n location / {\n proxy_pass https://gitlab_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass https://gitlab_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tclient_max_body_size 20m;\n\tproxy_request_buffering off;\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.gitlab.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = gitlab.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.gitlab.tryton.geeraert.eu gitlab.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"immich.conf": "############################################\n# config file for immich\n############################################\n\nupstream immich_backend {\n server immich-server.immich.svc:3001;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name immich.tryton.geeraert.eu www.immich.tryton.geeraert.eu;\n location / {\n proxy_pass http://immich_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.immich.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = immich.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.immich.tryton.geeraert.eu immich.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"jellyfin.conf": "############################################\n# config file for jellyfin\n############################################\n\nupstream jellyfin_backend {\n server jellyfin-svc.jellyfin.svc:8096;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name jellyfin.tryton.geeraert.eu www.jellyfin.tryton.geeraert.eu;\n location / {\n proxy_pass http://jellyfin_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.jellyfin.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = jellyfin.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.jellyfin.tryton.geeraert.eu jellyfin.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"nextcloud.conf": "############################################\n# config file for nextcloud\n############################################\n\nupstream nextcloud_backend {\n server webserver.nextcloud.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name nextcloud.tryton.geeraert.eu www.nextcloud.tryton.geeraert.eu;\n location / {\n proxy_pass http://nextcloud_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://nextcloud_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\t\n\n location /.well-known/carddav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location /.well-known/caldav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location = /health {\n default_type text/html;\n return 200 \"\u003c!DOCTYPE html\u003e\u003ch2\u003ehealth check\u003c/h2\u003e\\n\";\n }\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.nextcloud.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = nextcloud.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.nextcloud.tryton.geeraert.eu nextcloud.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"octoprint.conf": "############################################\n# config file for octoprint\n############################################\n\nupstream octoprint_backend {\n server 192.168.1.28:5000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name octoprint.tryton.geeraert.eu www.octoprint.tryton.geeraert.eu;\n location / {\n proxy_pass http://octoprint_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.octoprint.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = octoprint.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.octoprint.tryton.geeraert.eu octoprint.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"openmediavault.conf": "############################################\n# config file for openmediavault\n############################################\n\nupstream openmediavault_backend {\n server 192.168.88.29;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name openmediavault.tryton.geeraert.eu www.openmediavault.tryton.geeraert.eu;\n location / {\n proxy_pass http://openmediavault_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.openmediavault.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = openmediavault.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.openmediavault.tryton.geeraert.eu openmediavault.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"paperless.conf": "############################################\n# config file for paperless\n############################################\n\nupstream paperless_backend {\n server webserver.paperless.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name paperless.tryton.geeraert.eu www.paperless.tryton.geeraert.eu;\n location / {\n proxy_pass http://paperless_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.paperless.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = paperless.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.paperless.tryton.geeraert.eu paperless.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"pihole.conf": "############################################\n# config file for pihole\n############################################\n\nupstream pihole_backend {\n server web.piholenew.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name pihole.tryton.geeraert.eu www.pihole.tryton.geeraert.eu;\n location / {\n proxy_pass http://pihole_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.pihole.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = pihole.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.pihole.tryton.geeraert.eu pihole.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"portainer.conf": "############################################\n# config file for portainer\n############################################\n\nupstream portainer_backend {\n server portainer.portainer.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name portainer.tryton.geeraert.eu www.portainer.tryton.geeraert.eu;\n location / {\n proxy_pass http://portainer_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.portainer.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = portainer.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.portainer.tryton.geeraert.eu portainer.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"prowlarr.conf": "############################################\n# config file for prowlarr\n############################################\n\nupstream prowlarr_backend {\n server prowlarr.servarr.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name prowlarr.tryton.geeraert.eu www.prowlarr.tryton.geeraert.eu;\n location / {\n proxy_pass http://prowlarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.prowlarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = prowlarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.prowlarr.tryton.geeraert.eu prowlarr.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"qbittorrent.conf": "############################################\n# config file for qbittorrent\n############################################\n\nupstream qbittorrent_backend {\n server qbittorrent.servarr.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name qbittorrent.tryton.geeraert.eu www.qbittorrent.tryton.geeraert.eu;\n location / {\n proxy_pass http://qbittorrent_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.qbittorrent.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = qbittorrent.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.qbittorrent.tryton.geeraert.eu qbittorrent.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"radarr.conf": "############################################\n# config file for radarr\n############################################\n\nupstream radarr_backend {\n server radarr.servarr.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name radarr.tryton.geeraert.eu www.radarr.tryton.geeraert.eu;\n location / {\n proxy_pass http://radarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.radarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = radarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.radarr.tryton.geeraert.eu radarr.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"router.conf": "############################################\n# config file for router\n############################################\n\nupstream router_backend {\n server 192.168.88.1;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name router.tryton.geeraert.eu www.router.tryton.geeraert.eu;\n location / {\n proxy_pass http://router_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n auth_basic \"Administrator’s Area\";\n auth_basic_user_file /authentication-htpasswd/.htpasswd;\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.router.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = router.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.router.tryton.geeraert.eu router.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"screeps.conf": "############################################\n# config file for screeps\n############################################\n\nupstream screeps_backend {\n server screeps-svc.screeps.svc:21025;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name screeps.tryton.geeraert.eu www.screeps.tryton.geeraert.eu;\n location / {\n proxy_pass http://screeps_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\t\n\n listen 443 ssl;\n listen 80;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}",
|
||||
"sickchill.conf": "############################################\n# config file for sickchill\n############################################\n\nupstream sickchill_backend {\n server sickchill.servarr.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name sickchill.tryton.geeraert.eu www.sickchill.tryton.geeraert.eu;\n location / {\n proxy_pass http://sickchill_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.sickchill.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = sickchill.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.sickchill.tryton.geeraert.eu sickchill.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"sonarr.conf": "############################################\n# config file for sonarr\n############################################\n\nupstream sonarr_backend {\n server sonarr.servarr.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name sonarr.tryton.geeraert.eu www.sonarr.tryton.geeraert.eu;\n location / {\n proxy_pass http://sonarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.sonarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = sonarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.sonarr.tryton.geeraert.eu sonarr.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"stash.conf": "############################################\n# config file for stash\n############################################\n\nupstream stash_backend {\n server stash-svc.stash.svc:9999;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name stash.tryton.geeraert.eu www.stash.tryton.geeraert.eu;\n location / {\n proxy_pass http://stash_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n proxy_set_header X-Forwarded-Proto $scheme;\n proxy_read_timeout 60000s;\n#working\nproxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_cache_bypass $http_upgrade;\n#end of working\n\n\n\n\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.stash.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = stash.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.stash.tryton.geeraert.eu stash.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"synology.conf": "############################################\n# config file for synology\n############################################\n\nupstream synology_backend {\n server 192.168.88.39:5000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name synology.tryton.geeraert.eu www.synology.tryton.geeraert.eu;\n location / {\n proxy_pass http://synology_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.synology.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = synology.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.synology.tryton.geeraert.eu synology.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"unifi-inform.conf": "############################################\n# config file for unifi-inform\n############################################\n\nupstream unifi-inform_backend {\n server 192.168.88.50:8082;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name unifi-inform.tryton.geeraert.eu www.unifi-inform.tryton.geeraert.eu;\n location / {\n proxy_pass http://unifi-inform_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.unifi-inform.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = unifi-inform.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.unifi-inform.tryton.geeraert.eu unifi-inform.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"unifi.conf": "############################################\n# config file for unifi\n############################################\n\nupstream unifi_backend {\n server 192.168.88.244:8443;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name unifi.tryton.geeraert.eu www.unifi.tryton.geeraert.eu;\n location / {\n proxy_pass https://unifi_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.unifi.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = unifi.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.unifi.tryton.geeraert.eu unifi.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}"
|
||||
"bitwarden.conf": "############################################\n# config file for bitwarden\n############################################\n\nupstream bitwarden_backend {\n server nginx.bitwarden.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name bitwarden.tryton.geeraert.eu www.bitwarden.tryton.geeraert.eu;\n location / {\n proxy_pass http://bitwarden_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.bitwarden.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = bitwarden.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.bitwarden.tryton.geeraert.eu bitwarden.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"bookstack.conf": "############################################\n# config file for bookstack\n############################################\n\nupstream bookstack_backend {\n server bookstack-svc.bookstack.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name bookstack.tryton.geeraert.eu www.bookstack.tryton.geeraert.eu;\n location / {\n proxy_pass http://bookstack_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.bookstack.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = bookstack.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.bookstack.tryton.geeraert.eu bookstack.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"django-dev.conf": "############################################\n# config file for django-dev\n############################################\n\nupstream django-dev_backend {\n server webserver.django-dev.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name django-dev.tryton.geeraert.eu www.django-dev.tryton.geeraert.eu;\n location / {\n proxy_pass http://django-dev_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://django-dev_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.django-dev.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = django-dev.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.django-dev.tryton.geeraert.eu django-dev.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"django.conf": "############################################\n# config file for django\n############################################\n\nupstream django_backend {\n server django-svc.django:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name django.tryton.geeraert.eu www.django.tryton.geeraert.eu;\n location / {\n proxy_pass http://django_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://django_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.django.tryton.geeraert.eu django.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"dupeguru.conf": "############################################\n# config file for dupeguru\n############################################\n\nupstream dupeguru_backend {\n server dupeguru.dupeguru.svc:5800;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name dupeguru.tryton.geeraert.eu www.dupeguru.tryton.geeraert.eu;\n location / {\n proxy_pass http://dupeguru_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n auth_basic \"Administrator’s Area\";\n auth_basic_user_file /authentication-htpasswd/.htpasswd;\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.dupeguru.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = dupeguru.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.dupeguru.tryton.geeraert.eu dupeguru.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"gitea.conf": "############################################\n# config file for gitea\n############################################\n\nupstream gitea_backend {\n server webserver.gitea.svc:3000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name gitea.tryton.geeraert.eu www.gitea.tryton.geeraert.eu;\n location / {\n proxy_pass http://gitea_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.gitea.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = gitea.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.gitea.tryton.geeraert.eu gitea.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"gitlab.conf": "############################################\n# config file for gitlab\n############################################\n\nupstream gitlab_backend {\n server webserver.gitlab.svc:443;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name gitlab.tryton.geeraert.eu www.gitlab.tryton.geeraert.eu;\n location / {\n proxy_pass https://gitlab_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass https://gitlab_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\tclient_max_body_size 20m;\n\tproxy_request_buffering off;\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.gitlab.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = gitlab.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.gitlab.tryton.geeraert.eu gitlab.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"immich.conf": "############################################\n# config file for immich\n############################################\n\nupstream immich_backend {\n server immich-svc.immich.svc:2283;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name immich.tryton.geeraert.eu www.immich.tryton.geeraert.eu;\n location / {\n proxy_pass http://immich_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n proxy_set_header X-Forwarded-Proto $scheme;\n proxy_read_timeout 60000s;\n\n\n #adding websocket , usefull for reverse proxy\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_cache_bypass $http_upgrade;\n #end of working\n\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.immich.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = immich.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.immich.tryton.geeraert.eu immich.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"jellyfin.conf": "############################################\n# config file for jellyfin\n############################################\n\nupstream jellyfin_backend {\n server jellyfin-svc.jellyfin.svc:8096;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name jellyfin.tryton.geeraert.eu www.jellyfin.tryton.geeraert.eu;\n location / {\n proxy_pass http://jellyfin_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.jellyfin.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = jellyfin.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.jellyfin.tryton.geeraert.eu jellyfin.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"nextcloud.conf": "############################################\n# config file for nextcloud\n############################################\n\nupstream nextcloud_backend {\n server webserver.nextcloud.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name nextcloud.tryton.geeraert.eu www.nextcloud.tryton.geeraert.eu;\n location / {\n proxy_pass http://nextcloud_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://nextcloud_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n location /.well-known/carddav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location /.well-known/caldav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location = /health {\n default_type text/html;\n return 200 \"\u003c!DOCTYPE html\u003e\u003ch2\u003ehealth check\u003c/h2\u003e\\n\";\n }\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.nextcloud.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = nextcloud.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.nextcloud.tryton.geeraert.eu nextcloud.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"octoprint.conf": "############################################\n# config file for octoprint\n############################################\n\nupstream octoprint_backend {\n server 192.168.1.28:5000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name octoprint.tryton.geeraert.eu www.octoprint.tryton.geeraert.eu;\n location / {\n proxy_pass http://octoprint_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.octoprint.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = octoprint.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.octoprint.tryton.geeraert.eu octoprint.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"openmediavault.conf": "############################################\n# config file for openmediavault\n############################################\n\nupstream openmediavault_backend {\n server 192.168.88.29;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name openmediavault.tryton.geeraert.eu www.openmediavault.tryton.geeraert.eu;\n location / {\n proxy_pass http://openmediavault_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.openmediavault.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = openmediavault.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.openmediavault.tryton.geeraert.eu openmediavault.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"paperless.conf": "############################################\n# config file for paperless\n############################################\n\nupstream paperless_backend {\n server paperless-svc.paperless.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name paperless.tryton.geeraert.eu www.paperless.tryton.geeraert.eu;\n location / {\n proxy_pass http://paperless_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.paperless.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = paperless.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.paperless.tryton.geeraert.eu paperless.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"pihole.conf": "############################################\n# config file for pihole\n############################################\n\nupstream pihole_backend {\n server web.piholenew.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name pihole.tryton.geeraert.eu www.pihole.tryton.geeraert.eu;\n location / {\n proxy_pass http://pihole_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.pihole.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = pihole.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.pihole.tryton.geeraert.eu pihole.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"portainer.conf": "############################################\n# config file for portainer\n############################################\n\nupstream portainer_backend {\n server portainer.portainer.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name portainer.tryton.geeraert.eu www.portainer.tryton.geeraert.eu;\n location / {\n proxy_pass http://portainer_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.portainer.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = portainer.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.portainer.tryton.geeraert.eu portainer.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"prowlarr.conf": "############################################\n# config file for prowlarr\n############################################\n\nupstream prowlarr_backend {\n server prowlarr-svc.servarr.svc:9696;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name prowlarr.tryton.geeraert.eu www.prowlarr.tryton.geeraert.eu;\n location / {\n proxy_pass http://prowlarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.prowlarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = prowlarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.prowlarr.tryton.geeraert.eu prowlarr.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"qbittorrent.conf": "############################################\n# config file for qbittorrent\n############################################\n\nupstream qbittorrent_backend {\n server qbittorrent-svc.servarr.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name qbittorrent.tryton.geeraert.eu www.qbittorrent.tryton.geeraert.eu;\n location / {\n proxy_pass http://qbittorrent_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.qbittorrent.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = qbittorrent.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.qbittorrent.tryton.geeraert.eu qbittorrent.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"radarr.conf": "############################################\n# config file for radarr\n############################################\n\nupstream radarr_backend {\n server radarr-svc.servarr.svc:7878;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name radarr.tryton.geeraert.eu www.radarr.tryton.geeraert.eu;\n location / {\n proxy_pass http://radarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.radarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = radarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.radarr.tryton.geeraert.eu radarr.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"router.conf": "############################################\n# config file for router\n############################################\n\nupstream router_backend {\n server 192.168.88.1;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name router.tryton.geeraert.eu www.router.tryton.geeraert.eu;\n location / {\n proxy_pass http://router_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n auth_basic \"Administrator’s Area\";\n auth_basic_user_file /authentication-htpasswd/.htpasswd;\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.router.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = router.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.router.tryton.geeraert.eu router.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"sonarr.conf": "############################################\n# config file for sonarr\n############################################\n\nupstream sonarr_backend {\n server sonarr-svc.servarr.svc:8989;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name sonarr.tryton.geeraert.eu www.sonarr.tryton.geeraert.eu;\n location / {\n proxy_pass http://sonarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.sonarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = sonarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.sonarr.tryton.geeraert.eu sonarr.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"stash.conf": "############################################\n# config file for stash\n############################################\n\nupstream stash_backend {\n server stash-svc.stash.svc:9999;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name stash.tryton.geeraert.eu www.stash.tryton.geeraert.eu;\n location / {\n proxy_pass http://stash_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n #don't use this as this needs to be run as root or have the CAP_NET_RAW capability) to bind to a non-local IP address.\n #Because the backend thinks the request is coming directly from the client, it will try to send the response directly back to that client IP. To prevent this (which would break the connection), you must force the response back through the NGINX server.\n #proxy_bind $remote_addr transparent;\n\n##used to be working\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n proxy_set_header X-Forwarded-Proto $scheme;\n proxy_read_timeout 60000s;\n #working\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_cache_bypass $http_upgrade;\n #end of working\n\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.stash.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = stash.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.stash.tryton.geeraert.eu stash.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"synology.conf": "############################################\n# config file for synology\n############################################\n\nupstream synology_backend {\n server 192.168.88.39:5000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name synology.tryton.geeraert.eu www.synology.tryton.geeraert.eu;\n location / {\n proxy_pass http://synology_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.synology.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = synology.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.synology.tryton.geeraert.eu synology.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"tdarr.conf": "############################################\n# config file for tdarr\n############################################\n\nupstream tdarr_backend {\n server tdarr-svc.servarr.svc:8265;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name tdarr.tryton.geeraert.eu www.tdarr.tryton.geeraert.eu;\n location / {\n proxy_pass http://tdarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n proxy_set_header X-Forwarded-Proto $scheme;\n proxy_read_timeout 60000s;\n#working\nproxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_cache_bypass $http_upgrade;\n#end of working\n\n\n\n\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.tdarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = tdarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.tdarr.tryton.geeraert.eu tdarr.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"unifi-inform.conf": "############################################\n# config file for unifi-inform\n############################################\n\nupstream unifi-inform_backend {\n server 192.168.88.50:8082;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name unifi-inform.tryton.geeraert.eu www.unifi-inform.tryton.geeraert.eu;\n location / {\n proxy_pass http://unifi-inform_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.unifi-inform.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = unifi-inform.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.unifi-inform.tryton.geeraert.eu unifi-inform.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"unifi.conf": "############################################\n# config file for unifi\n############################################\n\nupstream unifi_backend {\n server 192.168.88.244:8443;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name unifi.tryton.geeraert.eu www.unifi.tryton.geeraert.eu;\n location / {\n proxy_pass https://unifi_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.unifi.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = unifi.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.unifi.tryton.geeraert.eu unifi.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
|
||||
"wikijs.conf": "############################################\n# config file for wikijs\n############################################\n\nupstream wikijs_backend {\n server wikijs-svc.wikijs.svc:3000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name wikijs.tryton.geeraert.eu www.wikijs.tryton.geeraert.eu;\n location / {\n proxy_pass http://wikijs_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\tclient_max_body_size 20m;\n proxy_request_buffering off;\n\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.wikijs.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = wikijs.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.wikijs.tryton.geeraert.eu wikijs.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}"
|
||||
},
|
||||
"id": "reverse-proxy/sites-terraform",
|
||||
"immutable": false,
|
||||
@@ -60,12 +60,83 @@
|
||||
"labels": {},
|
||||
"name": "sites-terraform",
|
||||
"namespace": "reverse-proxy",
|
||||
"resource_version": "118207889",
|
||||
"resource_version": "212969561",
|
||||
"uid": "08aa2108-9dce-4e67-b000-4dc7fbd1c23e"
|
||||
}
|
||||
]
|
||||
},
|
||||
"sensitive_attributes": [],
|
||||
"identity_schema_version": 0,
|
||||
"private": "bnVsbA=="
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"mode": "managed",
|
||||
"type": "kubernetes_config_map",
|
||||
"name": "deny_ip_configmap",
|
||||
"provider": "provider[\"registry.terraform.io/hashicorp/kubernetes\"]",
|
||||
"instances": [
|
||||
{
|
||||
"schema_version": 0,
|
||||
"attributes": {
|
||||
"binary_data": {},
|
||||
"data": {
|
||||
"deny.conf": "\n deny 1.2.3.4;\n\n deny 37.168.24.233;\n"
|
||||
},
|
||||
"id": "reverse-proxy/deny-ip-terraform",
|
||||
"immutable": false,
|
||||
"metadata": [
|
||||
{
|
||||
"annotations": {
|
||||
"reloader.stakater.com/match": "true"
|
||||
},
|
||||
"generate_name": "",
|
||||
"generation": 0,
|
||||
"labels": {},
|
||||
"name": "deny-ip-terraform",
|
||||
"namespace": "reverse-proxy",
|
||||
"resource_version": "213005153",
|
||||
"uid": "d78dd9b1-bac4-4680-afda-51d4217f59c9"
|
||||
}
|
||||
]
|
||||
},
|
||||
"sensitive_attributes": [],
|
||||
"identity_schema_version": 0,
|
||||
"private": "bnVsbA=="
|
||||
}
|
||||
]
|
||||
},
|
||||
{
|
||||
"mode": "managed",
|
||||
"type": "kubernetes_config_map",
|
||||
"name": "websites_configmap",
|
||||
"provider": "provider[\"registry.terraform.io/hashicorp/kubernetes\"]",
|
||||
"instances": [
|
||||
{
|
||||
"schema_version": 0,
|
||||
"attributes": {
|
||||
"binary_data": {},
|
||||
"data": {
|
||||
"websites.json": "\n\n{\n \"bitwarden\": {\n \"service\": \"nginx.bitwarden.svc:8080\"\n }\n}\n\n\n\n{\n \"bookstack\": {\n \"service\": \"bookstack-svc.bookstack.svc\"\n }\n}\n\n\n\n\n\n{\n \"django\": {\n \"service\": \"django-svc.django:8000\"\n }\n}\n\n\n\n{\n \"django-dev\": {\n \"service\": \"webserver.django-dev.svc:8000\"\n }\n}\n\n\n\n\n\n{\n \"dupeguru\": {\n \"service\": \"dupeguru.dupeguru.svc:5800\"\n }\n}\n\n\n\n\n\n\n\n{\n \"gitea\": {\n \"service\": \"webserver.gitea.svc:3000\"\n }\n}\n\n\n\n{\n \"gitlab\": {\n \"service\": \"webserver.gitlab.svc:443\"\n }\n}\n\n\n\n\n\n\n\n{\n \"immich\": {\n \"service\": \"immich-svc.immich.svc:2283\"\n }\n}\n\n\n\n\n\n{\n \"jellyfin\": {\n \"service\": \"jellyfin-svc.jellyfin.svc:8096\"\n }\n}\n\n\n\n\n\n\n\n\n\n\n\n\n\n{\n \"nextcloud\": {\n \"service\": \"webserver.nextcloud.svc\"\n }\n}\n\n\n\n\n\n\n\n\n\n{\n \"octoprint\": {\n \"service\": \"192.168.1.28:5000\"\n }\n}\n\n\n\n\n\n{\n \"openmediavault\": {\n \"service\": \"192.168.88.29\"\n }\n}\n\n\n\n\n\n\n\n{\n \"paperless\": {\n \"service\": \"paperless-svc.paperless.svc:8000\"\n }\n}\n\n\n\n{\n \"pihole\": {\n \"service\": \"web.piholenew.svc\"\n }\n}\n\n\n\n\n\n{\n \"portainer\": {\n \"service\": \"portainer.portainer.svc\"\n }\n}\n\n\n\n\n\n{\n \"prowlarr\": {\n \"service\": \"prowlarr-svc.servarr.svc:9696\"\n }\n}\n\n\n\n\n\n{\n \"qbittorrent\": {\n \"service\": \"qbittorrent-svc.servarr.svc:8080\"\n }\n}\n\n\n\n{\n \"radarr\": {\n \"service\": \"radarr-svc.servarr.svc:7878\"\n }\n}\n\n\n\n\n\n\n\n{\n \"router\": {\n \"service\": \"192.168.88.1\"\n }\n}\n\n\n\n\n\n\n\n{\n \"sonarr\": {\n \"service\": \"sonarr-svc.servarr.svc:8989\"\n }\n}\n\n\n\n\n\n{\n \"stash\": {\n \"service\": \"stash-svc.stash.svc:9999\"\n }\n}\n\n\n\n\n\n{\n \"synology\": {\n \"service\": \"192.168.88.39:5000\"\n }\n}\n\n\n\n{\n \"tdarr\": {\n \"service\": \"tdarr-svc.servarr.svc:8265\"\n }\n}\n\n\n\n\n\n\n\n\n\n\n\n\n\n{\n \"unifi\": {\n \"service\": \"192.168.88.244:8443\"\n }\n}\n\n\n\n{\n \"unifi-inform\": {\n \"service\": \"192.168.88.50:8082\"\n }\n}\n\n\n\n\n\n{\n \"wikijs\": {\n \"service\": \"wikijs-svc.wikijs.svc:3000\"\n }\n}\n\n"
|
||||
},
|
||||
"id": "django-python/sites-terraform",
|
||||
"immutable": false,
|
||||
"metadata": [
|
||||
{
|
||||
"annotations": {},
|
||||
"generate_name": "",
|
||||
"generation": 0,
|
||||
"labels": {},
|
||||
"name": "sites-terraform",
|
||||
"namespace": "django-python",
|
||||
"resource_version": "208986491",
|
||||
"uid": "5349fabc-956e-40d7-ba1d-a72f35e5330a"
|
||||
}
|
||||
]
|
||||
},
|
||||
"sensitive_attributes": [],
|
||||
"identity_schema_version": 0,
|
||||
"private": "bnVsbA=="
|
||||
}
|
||||
]
|
||||
|
||||
+109
-29
@@ -1,6 +1,13 @@
|
||||
nginx_sites = {
|
||||
bitwarden = {
|
||||
service = "nginx.bitwarden.svc:8080"
|
||||
service = "nginx.bitwarden.svc:8080"
|
||||
#extra-value-location = <<EOT
|
||||
#proxy_set_header Host $host;
|
||||
#proxy_set_header X-Real-IP $remote_addr;
|
||||
#proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
#proxy_set_header Proxy "";
|
||||
# EOT
|
||||
#service = "bitwarden-nginx-svc.bitwardent.svc:8080"
|
||||
http2_bool = true
|
||||
}
|
||||
|
||||
@@ -16,7 +23,14 @@ nginx_sites = {
|
||||
proxy_cache = true
|
||||
http2_bool = true
|
||||
}
|
||||
django-dev = {
|
||||
service = "webserver.django-dev.svc:8000"
|
||||
proxy_cache = true
|
||||
http2_bool = true
|
||||
}
|
||||
|
||||
echo = {
|
||||
enabled = false
|
||||
# service = "echo-server.echo-server.svc:80"
|
||||
service = "echo-svc.echo.svc"
|
||||
proxy_cache = true
|
||||
@@ -25,7 +39,7 @@ nginx_sites = {
|
||||
extra-value-location = <<EOT
|
||||
auth_request /oauth2/auth;
|
||||
error_page 401 = @oauth2_signin;
|
||||
proxy_set_header X-Auth-Request-Redirect $request_uri;
|
||||
proxy_set_header X-Auth-Request-Redirect $request_uri;
|
||||
EOT
|
||||
|
||||
extra-value = <<EOT
|
||||
@@ -39,12 +53,14 @@ proxy_pass http://oauthn_backend;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_set_header X-Scheme $scheme;
|
||||
}
|
||||
|
||||
location @oauth2_signin {
|
||||
return 302 https://$host/oauth2/start?rd=https://$host$request_uri;
|
||||
#return 302 https://oauthn.tryton.geeraert.eu/oauth2/start?rd=https://$host$request_uri;
|
||||
}
|
||||
|
||||
location /oauth2/ {
|
||||
proxy_pass http://oauthn_backend;
|
||||
proxy_pass http://oauthn_backend;
|
||||
proxy_set_header Host $host;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_set_header X-Scheme $scheme;
|
||||
@@ -127,7 +143,8 @@ client_max_body_size 20m;
|
||||
enabled = false
|
||||
}
|
||||
paperless = {
|
||||
service = "webserver.paperless.svc:8000"
|
||||
#service = "webserver.paperless.svc:8000"
|
||||
service = "paperless-svc.paperless.svc:8000"
|
||||
}
|
||||
pihole = {
|
||||
service = "172.16.0.60:8081"
|
||||
@@ -179,8 +196,22 @@ client_max_body_size 20m;
|
||||
}
|
||||
|
||||
immich = {
|
||||
#service = "immich-server.immich.svc:3001"
|
||||
service = "immich-server.immich.svc:2283"
|
||||
#service = "immich-server.immich.svc:2283"
|
||||
service = "immich-svc.immich.svc:2283"
|
||||
extra-value-location = <<EOT
|
||||
proxy_set_header Connection "upgrade";
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
proxy_read_timeout 60000s;
|
||||
|
||||
|
||||
#adding websocket , usefull for reverse proxy
|
||||
proxy_set_header Connection "upgrade";
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_cache_bypass $http_upgrade;
|
||||
#end of working
|
||||
EOT
|
||||
}
|
||||
immicht = {
|
||||
service = "immicht-svc.immicht.svc:2283"
|
||||
@@ -199,8 +230,23 @@ client_max_body_size 20m;
|
||||
}
|
||||
|
||||
stirling = {
|
||||
enabled = false
|
||||
service = "stirling-svc.stirling.svc:8080"
|
||||
enabled = false
|
||||
service = "stirling-svc.stirling.svc:8080"
|
||||
extra-value-location = <<EOT
|
||||
proxy_set_header Connection "upgrade";
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
proxy_read_timeout 60000s;
|
||||
#working
|
||||
proxy_set_header Connection "upgrade";
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_cache_bypass $http_upgrade;
|
||||
#end of working
|
||||
|
||||
|
||||
|
||||
EOT
|
||||
}
|
||||
vulcan = {
|
||||
service = "vulcan.vulcan.svc:80"
|
||||
@@ -283,22 +329,27 @@ client_max_body_size 20m;
|
||||
}
|
||||
stash = {
|
||||
# enabled = false
|
||||
service = "stash-svc.stash.svc:9999"
|
||||
service = "stash-svc.stash.svc:9999"
|
||||
#extra-value= <<EOT
|
||||
# proxy_protocol on;
|
||||
#EOT
|
||||
extra-value-location = <<EOT
|
||||
#don't use this as this needs to be run as root or have the CAP_NET_RAW capability) to bind to a non-local IP address.
|
||||
#Because the backend thinks the request is coming directly from the client, it will try to send the response directly back to that client IP. To prevent this (which would break the connection), you must force the response back through the NGINX server.
|
||||
#proxy_bind $remote_addr transparent;
|
||||
|
||||
##used to be working
|
||||
proxy_set_header Connection "upgrade";
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
proxy_read_timeout 60000s;
|
||||
#working
|
||||
proxy_set_header Connection "upgrade";
|
||||
#working
|
||||
proxy_set_header Connection "upgrade";
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_cache_bypass $http_upgrade;
|
||||
#end of working
|
||||
|
||||
|
||||
|
||||
EOT
|
||||
#end of working
|
||||
EOT
|
||||
|
||||
}
|
||||
neko = {
|
||||
@@ -339,7 +390,6 @@ proxy_set_header Connection "upgrade";
|
||||
service = "qbitorrent-svc.tservarr.svc:8080"
|
||||
}
|
||||
|
||||
|
||||
poste = {
|
||||
enabled = false
|
||||
service = "poste-svc.poste.svc:443"
|
||||
@@ -361,12 +411,16 @@ proxy_set_header Connection "upgrade";
|
||||
EOT
|
||||
}
|
||||
wikijs = {
|
||||
#enabled = false
|
||||
service = "wikijs-svc.wikijs.svc:3000"
|
||||
#enabled = false
|
||||
service = "wikijs-svc.wikijs.svc:3000"
|
||||
extra-value = <<EOT
|
||||
client_max_body_size 20m;
|
||||
proxy_request_buffering off;
|
||||
EOT
|
||||
}
|
||||
|
||||
keycloak = {
|
||||
#enabled = false
|
||||
enabled = false
|
||||
service = "keycloak-svc.keycloak.svc:8080"
|
||||
extra-value = <<EOT
|
||||
|
||||
@@ -376,18 +430,44 @@ proxy_set_header Connection "upgrade";
|
||||
EOT
|
||||
}
|
||||
oauthn = {
|
||||
#enabled = false
|
||||
enabled = false
|
||||
service = "oauth2-proxy-svc.oauth2-proxy.svc:4180"
|
||||
|
||||
# extra-value = <<EOT
|
||||
# location /oauth2/ {
|
||||
# proxy_pass http://oauthn_backend;
|
||||
# proxy_set_header Host $host;
|
||||
# proxy_set_header X-Real-IP $remote_addr;
|
||||
# proxy_set_header X-Scheme $scheme;
|
||||
# }
|
||||
# EOT
|
||||
# extra-value = <<EOT
|
||||
# location /oauth2/ {
|
||||
# proxy_pass http://oauthn_backend;
|
||||
# proxy_set_header Host $host;
|
||||
# proxy_set_header X-Real-IP $remote_addr;
|
||||
# proxy_set_header X-Scheme $scheme;
|
||||
# }
|
||||
# EOT
|
||||
|
||||
|
||||
}
|
||||
emailproxy = {
|
||||
enabled = false
|
||||
service = "emailproxy-svc.paper.svc:80"
|
||||
}
|
||||
tdarr = {
|
||||
#enabled = false
|
||||
service = "tdarr-svc.servarr.svc:8265"
|
||||
extra-value-location = <<EOT
|
||||
proxy_set_header Connection "upgrade";
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
proxy_read_timeout 60000s;
|
||||
#working
|
||||
proxy_set_header Connection "upgrade";
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_cache_bypass $http_upgrade;
|
||||
#end of working
|
||||
|
||||
|
||||
|
||||
EOT
|
||||
|
||||
}
|
||||
|
||||
}
|
||||
deny_ip = ["1.2.3.4"]
|
||||
|
||||
Reference in New Issue
Block a user