pi-ux-ce/Reverse_proxy_Nginx
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

adding before some work
Gitea Actions Demo / Explore-Gitea-Actions (push) Failing after 47s
Details

Browse Source
This commit is contained in:
pi-ux-ce
2026-01-26 22:17:14 +00:00
parent f3aa767cd5
commit 800d23ac8e
14 changed files with 349 additions and 159 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitignore
+3
View File
@@ -0,0 +1,3 @@
certbot/conf/archive/
certbot/conf/.certbot.lock
certbot/conf/live/tryton.geeraert.eu/cert.pem
+1 -1
View File
@@ -1 +1 @@
../../archive/tryton.geeraert.eu/cert6.pem ../../archive/tryton.geeraert.eu/cert10.pem
certbot/conf/live/tryton.geeraert.eu/chain.pem
+1 -1
View File
@@ -1 +1 @@
../../archive/tryton.geeraert.eu/chain6.pem ../../archive/tryton.geeraert.eu/chain10.pem
certbot/conf/live/tryton.geeraert.eu/fullchain.pem
+1 -1
View File
@@ -1 +1 @@
../../archive/tryton.geeraert.eu/fullchain6.pem ../../archive/tryton.geeraert.eu/fullchain10.pem
certbot/conf/live/tryton.geeraert.eu/privkey.pem
+1 -1
View File
@@ -1 +1 @@
../../archive/tryton.geeraert.eu/privkey6.pem ../../archive/tryton.geeraert.eu/privkey10.pem
certbot/conf/renewal/tryton.geeraert.eu.conf
+3 -1
View File
@@ -1,5 +1,5 @@
# renew_before_expiry = 30 days # renew_before_expiry = 30 days
version = 4.0.0 version = 5.2.2
archive_dir = /etc/letsencrypt/archive/tryton.geeraert.eu archive_dir = /etc/letsencrypt/archive/tryton.geeraert.eu
cert = /etc/letsencrypt/live/tryton.geeraert.eu/cert.pem cert = /etc/letsencrypt/live/tryton.geeraert.eu/cert.pem
privkey = /etc/letsencrypt/live/tryton.geeraert.eu/privkey.pem privkey = /etc/letsencrypt/live/tryton.geeraert.eu/privkey.pem
@@ -14,3 +14,5 @@ dns_ovh_propagation_seconds = 60
dns_ovh_credentials = /secret/ovh.ini dns_ovh_credentials = /secret/ovh.ini
server = https://acme-v02.api.letsencrypt.org/directory server = https://acme-v02.api.letsencrypt.org/directory
key_type = ecdsa key_type = ecdsa
[acme_renewal_info]
ari_retry_after = 2026-01-16T06:00:34
nginx-config.configmap.yaml
+8 -3
View File
@@ -10,7 +10,11 @@ data:
application/xml application/json image/svg+xml text/css;\n\tgzip_min_length 1000;\n application/xml application/json image/svg+xml text/css;\n\tgzip_min_length 1000;\n
\ \n\t#custom log format to display the webiste visited and the IP used\n\tlog_format \ \n\t#custom log format to display the webiste visited and the IP used\n\tlog_format
my_custom_format '$http_host \\t $remote_addr - $remote_user [$time_local] \"$request\" my_custom_format '$http_host \\t $remote_addr - $remote_user [$time_local] \"$request\"
$status $body_bytes_sent \"$http_referer\" \"$http_user_agent\"';\n\n\n\tserver $status $body_bytes_sent \"$http_referer\" \"$http_user_agent\"';\n log_format
ip_audit '$remote_addr [$time_local]';\n log_format backend_debug '$remote_addr
- $remote_user [$time_local] '\n '\"$request\" $status
$body_bytes_sent '\n '\"$http_referer\" \"$http_user_agent\"
'\n 'upstream_status=$upstream_status';\n\n\tserver
{\n\tlisten 80;\n listen 443 default ssl;\n\tssl_certificate /etc/nginx/ssl/live/default.tryton.geeraert.eu/fullchain.pem; {\n\tlisten 80;\n listen 443 default ssl;\n\tssl_certificate /etc/nginx/ssl/live/default.tryton.geeraert.eu/fullchain.pem;
# managed by$\n ssl_certificate_key /etc/nginx/ssl/live/default.tryton.geeraert.eu/privkey.pem; # managed by$\n ssl_certificate_key /etc/nginx/ssl/live/default.tryton.geeraert.eu/privkey.pem;
# managed $\n location / {\n proxy_pass http://1.1.1.1;\n # managed $\n location / {\n proxy_pass http://1.1.1.1;\n
@@ -19,8 +23,9 @@ data:
\ X-Forwarded-For $proxy_add_x_forwarded_for;\n proxy_set_header X-Forwarded-Host \ X-Forwarded-For $proxy_add_x_forwarded_for;\n proxy_set_header X-Forwarded-Host
$server_name;\n\t\t}\n\t}\n\n\t# Connection header for WebSocket reverse proxy\n\tmap $server_name;\n\t\t}\n\t}\n\n\t# Connection header for WebSocket reverse proxy\n\tmap
$http_upgrade $connection_upgrade {\n\t\tdefault upgrade;\n '' close;\n\t}\n\n\tinclude $http_upgrade $connection_upgrade {\n\t\tdefault upgrade;\n '' close;\n\t}\n\n\tinclude
/etc/nginx/conf.d/*.conf;\n\tresolver 127.0.0.1 ipv6=off valid=40s; # The DNS /etc/nginx/deny.d/*.conf;\n\tinclude /etc/nginx/conf.d/*.conf;\n\t\t\n\t#add extra
IP server\n\t\n\t#https://www.tweaked.io/guide/nginx-proxying/\n\tproxy_cache_path file for any extra work \n include /etc/nginx/extra.conf.d/*.conf;\n\n\n\tresolver
127.0.0.1 ipv6=off valid=40s; # The DNS IP server\n\t\n\t#https://www.tweaked.io/guide/nginx-proxying/\n\tproxy_cache_path
/tmp/cache levels=1:2 keys_zone=cache:60m max_size=1G;\n\n\n}\n\n\n" /tmp/cache levels=1:2 keys_zone=cache:60m max_size=1G;\n\n\n}\n\n\n"
kind: ConfigMap kind: ConfigMap
metadata: metadata:
nginx.conf.save
-63
View File
@@ -1,63 +0,0 @@
worker_processes 1;
events { worker_connections 1024; }
http {
#include /etc/nginx/conf.d/*.conf;
#resolver 127.0.0.1 ipv6=off valid=40s; # The DNS IP server
set_real_ip_from 10.0.0.0/8;
set_real_ip_from 172.16.0.0/12; # Includes Docker subnet
set_real_ip_from 192.168.88.0/24;
# NPM generated CDN ip ranges:
# include conf.d/include/ip_ranges.conf;
# always put the following 2 lines after ip subnets:
real_ip_header X-Real-IP;
real_ip_recursive on;
proxy_http_version 1.1;
proxy_set_header X-Forwarded-Scheme $scheme;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Accept-Encoding "";
proxy_headers_hash_max_size 2512
sendfile on;
client_max_body_size 500M;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Host $server_name;
#proxy_set_header Upgrade $http_upgrade;
#proxy_set_header Connection 'upgrade';
#proxy_cache_bypass $http_upgrade;
server {
listen 80;
listen 443 default ssl;
ssl_certificate /etc/nginx/ssl/live/default.tryton.geeraert.eu/fullchain.pem; # managed by$
ssl_certificate_key /etc/nginx/ssl/live/default.tryton.geeraert.eu/privkey.pem; # managed $
location / {
proxy_pass http://1.1.1.1;
proxy_redirect off;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Host $server_name;
}
}
##
# Connection header for WebSocket reverse proxy
##
map $http_upgrade $connection_upgrade {
default upgrade;
'' close;
}
include /etc/nginx/conf.d/*.conf;
resolver 127.0.0.1 ipv6=off valid=40s; # The DNS IP server
}
terraform/deny_ip.json.tftpl
+3
View File
@@ -0,0 +1,3 @@
%{ for ip in deny_ip }
deny ${ip};
%{ endfor ~}
terraform/module.tf
+18
View File
@@ -18,6 +18,24 @@ variable "nginx_sites" {
})) }))
} }
variable "deny_ip" {
type = list(string)
}
resource "kubernetes_config_map" "deny_ip_configmap" {
metadata {
name = "deny-ip-terraform"
namespace = "reverse-proxy"
annotations = {
"reloader.stakater.com/match" : "true",
}
}
data = {
"deny.conf" = templatefile("deny_ip.json.tftpl", {
deny_ip = var.deny_ip })
}
}
resource "kubernetes_config_map" "websites_configmap" { resource "kubernetes_config_map" "websites_configmap" {
metadata { metadata {
terraform/nginx_config.tftpl
+1 -1
View File
@@ -34,7 +34,7 @@ server {
access_log /var/log/nginx/access.log my_custom_format; access_log /var/log/nginx/access.log my_custom_format;
access_log /var/log/nginx/ip_audit.log ip_audit; access_log /var/log/nginx/ip_audit.log ip_audit;
access_log /var/log/nginx/backend_debug.log backend_debug;
${extra-value} ${extra-value}
%{~ if http2_bool~} %{~ if http2_bool~}
http2 on; http2 on;
terraform/terraform.tfstate
+100 -29
View File
@@ -1,7 +1,7 @@
{ {
"version": 4, "version": 4,
"terraform_version": "1.9.2", "terraform_version": "1.13.1",
"serial": 1104, "serial": 1433,
"lineage": "a36de74c-83f8-01fe-0504-92c54a21d49e", "lineage": "a36de74c-83f8-01fe-0504-92c54a21d49e",
"outputs": { "outputs": {
"Nginx_status": { "Nginx_status": {
@@ -21,32 +21,32 @@
"attributes": { "attributes": {
"binary_data": {}, "binary_data": {},
"data": { "data": {
"bitwarden.conf": "############################################\n# config file for bitwarden\n############################################\n\nupstream bitwarden_backend {\n server nginx.bitwarden.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name bitwarden.tryton.geeraert.eu www.bitwarden.tryton.geeraert.eu;\n location / {\n proxy_pass http://bitwarden_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n\n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.bitwarden.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = bitwarden.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.bitwarden.tryton.geeraert.eu bitwarden.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "bitwarden.conf": "############################################\n# config file for bitwarden\n############################################\n\nupstream bitwarden_backend {\n server nginx.bitwarden.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name bitwarden.tryton.geeraert.eu www.bitwarden.tryton.geeraert.eu;\n location / {\n proxy_pass http://bitwarden_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.bitwarden.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = bitwarden.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.bitwarden.tryton.geeraert.eu bitwarden.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"bookstack.conf": "############################################\n# config file for bookstack\n############################################\n\nupstream bookstack_backend {\n server bookstack-svc.bookstack.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name bookstack.tryton.geeraert.eu www.bookstack.tryton.geeraert.eu;\n location / {\n proxy_pass http://bookstack_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.bookstack.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = bookstack.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.bookstack.tryton.geeraert.eu bookstack.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "bookstack.conf": "############################################\n# config file for bookstack\n############################################\n\nupstream bookstack_backend {\n server bookstack-svc.bookstack.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name bookstack.tryton.geeraert.eu www.bookstack.tryton.geeraert.eu;\n location / {\n proxy_pass http://bookstack_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.bookstack.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = bookstack.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.bookstack.tryton.geeraert.eu bookstack.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"django.conf": "############################################\n# config file for django\n############################################\n\nupstream django_backend {\n server webserver.django-python.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name django.tryton.geeraert.eu www.django.tryton.geeraert.eu;\n location / {\n proxy_pass http://django_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://django_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n\n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.django.tryton.geeraert.eu django.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "django-dev.conf": "############################################\n# config file for django-dev\n############################################\n\nupstream django-dev_backend {\n server webserver.django-dev.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name django-dev.tryton.geeraert.eu www.django-dev.tryton.geeraert.eu;\n location / {\n proxy_pass http://django-dev_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://django-dev_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.django-dev.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = django-dev.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.django-dev.tryton.geeraert.eu django-dev.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"dupeguru.conf": "############################################\n# config file for dupeguru\n############################################\n\nupstream dupeguru_backend {\n server dupeguru.dupeguru.svc:5800;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name dupeguru.tryton.geeraert.eu www.dupeguru.tryton.geeraert.eu;\n location / {\n proxy_pass http://dupeguru_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n auth_basic \"Administrator’s Area\";\n auth_basic_user_file /authentication-htpasswd/.htpasswd;\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.dupeguru.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = dupeguru.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.dupeguru.tryton.geeraert.eu dupeguru.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "django.conf": "############################################\n# config file for django\n############################################\n\nupstream django_backend {\n server django-svc.django:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name django.tryton.geeraert.eu www.django.tryton.geeraert.eu;\n location / {\n proxy_pass http://django_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://django_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.django.tryton.geeraert.eu django.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"echo.conf": "############################################\n# config file for echo\n############################################\n\nupstream echo_backend {\n server echo-server.echo-server.svc:80;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name echo.tryton.geeraert.eu www.echo.tryton.geeraert.eu;\n location / {\n proxy_pass http://echo_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://echo_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n\n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.echo.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = echo.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.echo.tryton.geeraert.eu echo.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "dupeguru.conf": "############################################\n# config file for dupeguru\n############################################\n\nupstream dupeguru_backend {\n server dupeguru.dupeguru.svc:5800;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name dupeguru.tryton.geeraert.eu www.dupeguru.tryton.geeraert.eu;\n location / {\n proxy_pass http://dupeguru_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n auth_basic \"Administrator’s Area\";\n auth_basic_user_file /authentication-htpasswd/.htpasswd;\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.dupeguru.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = dupeguru.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.dupeguru.tryton.geeraert.eu dupeguru.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"gitea.conf": "############################################\n# config file for gitea\n############################################\n\nupstream gitea_backend {\n server webserver.gitea.svc:3000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name gitea.tryton.geeraert.eu www.gitea.tryton.geeraert.eu;\n location / {\n proxy_pass http://gitea_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.gitea.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = gitea.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.gitea.tryton.geeraert.eu gitea.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "gitea.conf": "############################################\n# config file for gitea\n############################################\n\nupstream gitea_backend {\n server webserver.gitea.svc:3000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name gitea.tryton.geeraert.eu www.gitea.tryton.geeraert.eu;\n location / {\n proxy_pass http://gitea_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.gitea.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = gitea.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.gitea.tryton.geeraert.eu gitea.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"gitlab.conf": "############################################\n# config file for gitlab\n############################################\n\nupstream gitlab_backend {\n server webserver.gitlab.svc:443;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name gitlab.tryton.geeraert.eu www.gitlab.tryton.geeraert.eu;\n location / {\n proxy_pass https://gitlab_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass https://gitlab_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n\n\tclient_max_body_size 20m;\n\tproxy_request_buffering off;\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.gitlab.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = gitlab.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.gitlab.tryton.geeraert.eu gitlab.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "gitlab.conf": "############################################\n# config file for gitlab\n############################################\n\nupstream gitlab_backend {\n server webserver.gitlab.svc:443;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name gitlab.tryton.geeraert.eu www.gitlab.tryton.geeraert.eu;\n location / {\n proxy_pass https://gitlab_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass https://gitlab_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\tclient_max_body_size 20m;\n\tproxy_request_buffering off;\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.gitlab.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = gitlab.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.gitlab.tryton.geeraert.eu gitlab.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"immich.conf": "############################################\n# config file for immich\n############################################\n\nupstream immich_backend {\n server immich-server.immich.svc:3001;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name immich.tryton.geeraert.eu www.immich.tryton.geeraert.eu;\n location / {\n proxy_pass http://immich_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.immich.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = immich.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.immich.tryton.geeraert.eu immich.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "immich.conf": "############################################\n# config file for immich\n############################################\n\nupstream immich_backend {\n server immich-svc.immich.svc:2283;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name immich.tryton.geeraert.eu www.immich.tryton.geeraert.eu;\n location / {\n proxy_pass http://immich_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n proxy_set_header X-Forwarded-Proto $scheme;\n proxy_read_timeout 60000s;\n\n\n #adding websocket , usefull for reverse proxy\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_cache_bypass $http_upgrade;\n #end of working\n\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.immich.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = immich.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.immich.tryton.geeraert.eu immich.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"jellyfin.conf": "############################################\n# config file for jellyfin\n############################################\n\nupstream jellyfin_backend {\n server jellyfin-svc.jellyfin.svc:8096;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name jellyfin.tryton.geeraert.eu www.jellyfin.tryton.geeraert.eu;\n location / {\n proxy_pass http://jellyfin_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.jellyfin.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = jellyfin.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.jellyfin.tryton.geeraert.eu jellyfin.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "jellyfin.conf": "############################################\n# config file for jellyfin\n############################################\n\nupstream jellyfin_backend {\n server jellyfin-svc.jellyfin.svc:8096;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name jellyfin.tryton.geeraert.eu www.jellyfin.tryton.geeraert.eu;\n location / {\n proxy_pass http://jellyfin_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.jellyfin.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = jellyfin.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.jellyfin.tryton.geeraert.eu jellyfin.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"nextcloud.conf": "############################################\n# config file for nextcloud\n############################################\n\nupstream nextcloud_backend {\n server webserver.nextcloud.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name nextcloud.tryton.geeraert.eu www.nextcloud.tryton.geeraert.eu;\n location / {\n proxy_pass http://nextcloud_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://nextcloud_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n\n\t\n\n location /.well-known/carddav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location /.well-known/caldav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location = /health {\n default_type text/html;\n return 200 \"\u003c!DOCTYPE html\u003e\u003ch2\u003ehealth check\u003c/h2\u003e\\n\";\n }\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.nextcloud.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = nextcloud.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.nextcloud.tryton.geeraert.eu nextcloud.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "nextcloud.conf": "############################################\n# config file for nextcloud\n############################################\n\nupstream nextcloud_backend {\n server webserver.nextcloud.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name nextcloud.tryton.geeraert.eu www.nextcloud.tryton.geeraert.eu;\n location / {\n proxy_pass http://nextcloud_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://nextcloud_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n location /.well-known/carddav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location /.well-known/caldav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location = /health {\n default_type text/html;\n return 200 \"\u003c!DOCTYPE html\u003e\u003ch2\u003ehealth check\u003c/h2\u003e\\n\";\n }\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.nextcloud.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = nextcloud.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.nextcloud.tryton.geeraert.eu nextcloud.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"octoprint.conf": "############################################\n# config file for octoprint\n############################################\n\nupstream octoprint_backend {\n server 192.168.1.28:5000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name octoprint.tryton.geeraert.eu www.octoprint.tryton.geeraert.eu;\n location / {\n proxy_pass http://octoprint_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.octoprint.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = octoprint.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.octoprint.tryton.geeraert.eu octoprint.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "octoprint.conf": "############################################\n# config file for octoprint\n############################################\n\nupstream octoprint_backend {\n server 192.168.1.28:5000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name octoprint.tryton.geeraert.eu www.octoprint.tryton.geeraert.eu;\n location / {\n proxy_pass http://octoprint_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.octoprint.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = octoprint.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.octoprint.tryton.geeraert.eu octoprint.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"openmediavault.conf": "############################################\n# config file for openmediavault\n############################################\n\nupstream openmediavault_backend {\n server 192.168.88.29;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name openmediavault.tryton.geeraert.eu www.openmediavault.tryton.geeraert.eu;\n location / {\n proxy_pass http://openmediavault_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.openmediavault.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = openmediavault.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.openmediavault.tryton.geeraert.eu openmediavault.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "openmediavault.conf": "############################################\n# config file for openmediavault\n############################################\n\nupstream openmediavault_backend {\n server 192.168.88.29;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name openmediavault.tryton.geeraert.eu www.openmediavault.tryton.geeraert.eu;\n location / {\n proxy_pass http://openmediavault_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.openmediavault.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = openmediavault.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.openmediavault.tryton.geeraert.eu openmediavault.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"paperless.conf": "############################################\n# config file for paperless\n############################################\n\nupstream paperless_backend {\n server webserver.paperless.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name paperless.tryton.geeraert.eu www.paperless.tryton.geeraert.eu;\n location / {\n proxy_pass http://paperless_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.paperless.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = paperless.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.paperless.tryton.geeraert.eu paperless.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "paperless.conf": "############################################\n# config file for paperless\n############################################\n\nupstream paperless_backend {\n server paperless-svc.paperless.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name paperless.tryton.geeraert.eu www.paperless.tryton.geeraert.eu;\n location / {\n proxy_pass http://paperless_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.paperless.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = paperless.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.paperless.tryton.geeraert.eu paperless.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"pihole.conf": "############################################\n# config file for pihole\n############################################\n\nupstream pihole_backend {\n server web.piholenew.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name pihole.tryton.geeraert.eu www.pihole.tryton.geeraert.eu;\n location / {\n proxy_pass http://pihole_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.pihole.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = pihole.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.pihole.tryton.geeraert.eu pihole.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "pihole.conf": "############################################\n# config file for pihole\n############################################\n\nupstream pihole_backend {\n server web.piholenew.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name pihole.tryton.geeraert.eu www.pihole.tryton.geeraert.eu;\n location / {\n proxy_pass http://pihole_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.pihole.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = pihole.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.pihole.tryton.geeraert.eu pihole.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"portainer.conf": "############################################\n# config file for portainer\n############################################\n\nupstream portainer_backend {\n server portainer.portainer.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name portainer.tryton.geeraert.eu www.portainer.tryton.geeraert.eu;\n location / {\n proxy_pass http://portainer_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.portainer.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = portainer.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.portainer.tryton.geeraert.eu portainer.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "portainer.conf": "############################################\n# config file for portainer\n############################################\n\nupstream portainer_backend {\n server portainer.portainer.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name portainer.tryton.geeraert.eu www.portainer.tryton.geeraert.eu;\n location / {\n proxy_pass http://portainer_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.portainer.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = portainer.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.portainer.tryton.geeraert.eu portainer.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"prowlarr.conf": "############################################\n# config file for prowlarr\n############################################\n\nupstream prowlarr_backend {\n server prowlarr.servarr.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name prowlarr.tryton.geeraert.eu www.prowlarr.tryton.geeraert.eu;\n location / {\n proxy_pass http://prowlarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.prowlarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = prowlarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.prowlarr.tryton.geeraert.eu prowlarr.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "prowlarr.conf": "############################################\n# config file for prowlarr\n############################################\n\nupstream prowlarr_backend {\n server prowlarr-svc.servarr.svc:9696;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name prowlarr.tryton.geeraert.eu www.prowlarr.tryton.geeraert.eu;\n location / {\n proxy_pass http://prowlarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.prowlarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = prowlarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.prowlarr.tryton.geeraert.eu prowlarr.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"qbittorrent.conf": "############################################\n# config file for qbittorrent\n############################################\n\nupstream qbittorrent_backend {\n server qbittorrent.servarr.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name qbittorrent.tryton.geeraert.eu www.qbittorrent.tryton.geeraert.eu;\n location / {\n proxy_pass http://qbittorrent_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.qbittorrent.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = qbittorrent.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.qbittorrent.tryton.geeraert.eu qbittorrent.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "qbittorrent.conf": "############################################\n# config file for qbittorrent\n############################################\n\nupstream qbittorrent_backend {\n server qbittorrent-svc.servarr.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name qbittorrent.tryton.geeraert.eu www.qbittorrent.tryton.geeraert.eu;\n location / {\n proxy_pass http://qbittorrent_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.qbittorrent.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = qbittorrent.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.qbittorrent.tryton.geeraert.eu qbittorrent.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"radarr.conf": "############################################\n# config file for radarr\n############################################\n\nupstream radarr_backend {\n server radarr.servarr.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name radarr.tryton.geeraert.eu www.radarr.tryton.geeraert.eu;\n location / {\n proxy_pass http://radarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.radarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = radarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.radarr.tryton.geeraert.eu radarr.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "radarr.conf": "############################################\n# config file for radarr\n############################################\n\nupstream radarr_backend {\n server radarr-svc.servarr.svc:7878;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name radarr.tryton.geeraert.eu www.radarr.tryton.geeraert.eu;\n location / {\n proxy_pass http://radarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.radarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = radarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.radarr.tryton.geeraert.eu radarr.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"router.conf": "############################################\n# config file for router\n############################################\n\nupstream router_backend {\n server 192.168.88.1;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name router.tryton.geeraert.eu www.router.tryton.geeraert.eu;\n location / {\n proxy_pass http://router_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n auth_basic \"Administrator’s Area\";\n auth_basic_user_file /authentication-htpasswd/.htpasswd;\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.router.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = router.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.router.tryton.geeraert.eu router.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "router.conf": "############################################\n# config file for router\n############################################\n\nupstream router_backend {\n server 192.168.88.1;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name router.tryton.geeraert.eu www.router.tryton.geeraert.eu;\n location / {\n proxy_pass http://router_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n auth_basic \"Administrator’s Area\";\n auth_basic_user_file /authentication-htpasswd/.htpasswd;\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.router.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = router.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.router.tryton.geeraert.eu router.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"screeps.conf": "############################################\n# config file for screeps\n############################################\n\nupstream screeps_backend {\n server screeps-svc.screeps.svc:21025;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name screeps.tryton.geeraert.eu www.screeps.tryton.geeraert.eu;\n location / {\n proxy_pass http://screeps_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n\n\t\n\n listen 443 ssl;\n listen 80;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}", "sonarr.conf": "############################################\n# config file for sonarr\n############################################\n\nupstream sonarr_backend {\n server sonarr-svc.servarr.svc:8989;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name sonarr.tryton.geeraert.eu www.sonarr.tryton.geeraert.eu;\n location / {\n proxy_pass http://sonarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.sonarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = sonarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.sonarr.tryton.geeraert.eu sonarr.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"sickchill.conf": "############################################\n# config file for sickchill\n############################################\n\nupstream sickchill_backend {\n server sickchill.servarr.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name sickchill.tryton.geeraert.eu www.sickchill.tryton.geeraert.eu;\n location / {\n proxy_pass http://sickchill_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.sickchill.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = sickchill.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.sickchill.tryton.geeraert.eu sickchill.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "stash.conf": "############################################\n# config file for stash\n############################################\n\nupstream stash_backend {\n server stash-svc.stash.svc:9999;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name stash.tryton.geeraert.eu www.stash.tryton.geeraert.eu;\n location / {\n proxy_pass http://stash_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n #don't use this as this needs to be run as root or have the CAP_NET_RAW capability) to bind to a non-local IP address.\n #Because the backend thinks the request is coming directly from the client, it will try to send the response directly back to that client IP. To prevent this (which would break the connection), you must force the response back through the NGINX server.\n #proxy_bind $remote_addr transparent;\n\n##used to be working\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n proxy_set_header X-Forwarded-Proto $scheme;\n proxy_read_timeout 60000s;\n #working\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_cache_bypass $http_upgrade;\n #end of working\n\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.stash.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = stash.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.stash.tryton.geeraert.eu stash.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"sonarr.conf": "############################################\n# config file for sonarr\n############################################\n\nupstream sonarr_backend {\n server sonarr.servarr.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name sonarr.tryton.geeraert.eu www.sonarr.tryton.geeraert.eu;\n location / {\n proxy_pass http://sonarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.sonarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = sonarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.sonarr.tryton.geeraert.eu sonarr.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "synology.conf": "############################################\n# config file for synology\n############################################\n\nupstream synology_backend {\n server 192.168.88.39:5000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name synology.tryton.geeraert.eu www.synology.tryton.geeraert.eu;\n location / {\n proxy_pass http://synology_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.synology.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = synology.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.synology.tryton.geeraert.eu synology.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"stash.conf": "############################################\n# config file for stash\n############################################\n\nupstream stash_backend {\n server stash-svc.stash.svc:9999;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name stash.tryton.geeraert.eu www.stash.tryton.geeraert.eu;\n location / {\n proxy_pass http://stash_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n proxy_set_header X-Forwarded-Proto $scheme;\n proxy_read_timeout 60000s;\n#working\nproxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_cache_bypass $http_upgrade;\n#end of working\n\n\n\n\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.stash.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = stash.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.stash.tryton.geeraert.eu stash.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "tdarr.conf": "############################################\n# config file for tdarr\n############################################\n\nupstream tdarr_backend {\n server tdarr-svc.servarr.svc:8265;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name tdarr.tryton.geeraert.eu www.tdarr.tryton.geeraert.eu;\n location / {\n proxy_pass http://tdarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n proxy_set_header X-Forwarded-Proto $scheme;\n proxy_read_timeout 60000s;\n#working\nproxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_cache_bypass $http_upgrade;\n#end of working\n\n\n\n\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.tdarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = tdarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.tdarr.tryton.geeraert.eu tdarr.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"synology.conf": "############################################\n# config file for synology\n############################################\n\nupstream synology_backend {\n server 192.168.88.39:5000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name synology.tryton.geeraert.eu www.synology.tryton.geeraert.eu;\n location / {\n proxy_pass http://synology_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.synology.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = synology.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.synology.tryton.geeraert.eu synology.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "unifi-inform.conf": "############################################\n# config file for unifi-inform\n############################################\n\nupstream unifi-inform_backend {\n server 192.168.88.50:8082;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name unifi-inform.tryton.geeraert.eu www.unifi-inform.tryton.geeraert.eu;\n location / {\n proxy_pass http://unifi-inform_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.unifi-inform.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = unifi-inform.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.unifi-inform.tryton.geeraert.eu unifi-inform.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"unifi-inform.conf": "############################################\n# config file for unifi-inform\n############################################\n\nupstream unifi-inform_backend {\n server 192.168.88.50:8082;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name unifi-inform.tryton.geeraert.eu www.unifi-inform.tryton.geeraert.eu;\n location / {\n proxy_pass http://unifi-inform_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.unifi-inform.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = unifi-inform.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.unifi-inform.tryton.geeraert.eu unifi-inform.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "unifi.conf": "############################################\n# config file for unifi\n############################################\n\nupstream unifi_backend {\n server 192.168.88.244:8443;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name unifi.tryton.geeraert.eu www.unifi.tryton.geeraert.eu;\n location / {\n proxy_pass https://unifi_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.unifi.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = unifi.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.unifi.tryton.geeraert.eu unifi.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"unifi.conf": "############################################\n# config file for unifi\n############################################\n\nupstream unifi_backend {\n server 192.168.88.244:8443;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name unifi.tryton.geeraert.eu www.unifi.tryton.geeraert.eu;\n location / {\n proxy_pass https://unifi_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.unifi.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = unifi.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.unifi.tryton.geeraert.eu unifi.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}" "wikijs.conf": "############################################\n# config file for wikijs\n############################################\n\nupstream wikijs_backend {\n server wikijs-svc.wikijs.svc:3000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name wikijs.tryton.geeraert.eu www.wikijs.tryton.geeraert.eu;\n location / {\n proxy_pass http://wikijs_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\tclient_max_body_size 20m;\n proxy_request_buffering off;\n\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.wikijs.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = wikijs.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.wikijs.tryton.geeraert.eu wikijs.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}"
}, },
"id": "reverse-proxy/sites-terraform", "id": "reverse-proxy/sites-terraform",
"immutable": false, "immutable": false,
@@ -60,12 +60,83 @@
"labels": {}, "labels": {},
"name": "sites-terraform", "name": "sites-terraform",
"namespace": "reverse-proxy", "namespace": "reverse-proxy",
"resource_version": "118208714", "resource_version": "212969561",
"uid": "08aa2108-9dce-4e67-b000-4dc7fbd1c23e" "uid": "08aa2108-9dce-4e67-b000-4dc7fbd1c23e"
} }
] ]
}, },
"sensitive_attributes": [], "sensitive_attributes": [],
"identity_schema_version": 0,
"private": "bnVsbA=="
}
]
},
{
"mode": "managed",
"type": "kubernetes_config_map",
"name": "deny_ip_configmap",
"provider": "provider[\"registry.terraform.io/hashicorp/kubernetes\"]",
"instances": [
{
"schema_version": 0,
"attributes": {
"binary_data": {},
"data": {
"deny.conf": "\n deny 1.2.3.4;\n"
},
"id": "reverse-proxy/deny-ip-terraform",
"immutable": false,
"metadata": [
{
"annotations": {
"reloader.stakater.com/match": "true"
},
"generate_name": "",
"generation": 0,
"labels": {},
"name": "deny-ip-terraform",
"namespace": "reverse-proxy",
"resource_version": "213005313",
"uid": "d78dd9b1-bac4-4680-afda-51d4217f59c9"
}
]
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "bnVsbA=="
}
]
},
{
"mode": "managed",
"type": "kubernetes_config_map",
"name": "websites_configmap",
"provider": "provider[\"registry.terraform.io/hashicorp/kubernetes\"]",
"instances": [
{
"schema_version": 0,
"attributes": {
"binary_data": {},
"data": {
"websites.json": "\n\n{\n \"bitwarden\": {\n \"service\": \"nginx.bitwarden.svc:8080\"\n }\n}\n\n\n\n{\n \"bookstack\": {\n \"service\": \"bookstack-svc.bookstack.svc\"\n }\n}\n\n\n\n\n\n{\n \"django\": {\n \"service\": \"django-svc.django:8000\"\n }\n}\n\n\n\n{\n \"django-dev\": {\n \"service\": \"webserver.django-dev.svc:8000\"\n }\n}\n\n\n\n\n\n{\n \"dupeguru\": {\n \"service\": \"dupeguru.dupeguru.svc:5800\"\n }\n}\n\n\n\n\n\n\n\n{\n \"gitea\": {\n \"service\": \"webserver.gitea.svc:3000\"\n }\n}\n\n\n\n{\n \"gitlab\": {\n \"service\": \"webserver.gitlab.svc:443\"\n }\n}\n\n\n\n\n\n\n\n{\n \"immich\": {\n \"service\": \"immich-svc.immich.svc:2283\"\n }\n}\n\n\n\n\n\n{\n \"jellyfin\": {\n \"service\": \"jellyfin-svc.jellyfin.svc:8096\"\n }\n}\n\n\n\n\n\n\n\n\n\n\n\n\n\n{\n \"nextcloud\": {\n \"service\": \"webserver.nextcloud.svc\"\n }\n}\n\n\n\n\n\n\n\n\n\n{\n \"octoprint\": {\n \"service\": \"192.168.1.28:5000\"\n }\n}\n\n\n\n\n\n{\n \"openmediavault\": {\n \"service\": \"192.168.88.29\"\n }\n}\n\n\n\n\n\n\n\n{\n \"paperless\": {\n \"service\": \"paperless-svc.paperless.svc:8000\"\n }\n}\n\n\n\n{\n \"pihole\": {\n \"service\": \"web.piholenew.svc\"\n }\n}\n\n\n\n\n\n{\n \"portainer\": {\n \"service\": \"portainer.portainer.svc\"\n }\n}\n\n\n\n\n\n{\n \"prowlarr\": {\n \"service\": \"prowlarr-svc.servarr.svc:9696\"\n }\n}\n\n\n\n\n\n{\n \"qbittorrent\": {\n \"service\": \"qbittorrent-svc.servarr.svc:8080\"\n }\n}\n\n\n\n{\n \"radarr\": {\n \"service\": \"radarr-svc.servarr.svc:7878\"\n }\n}\n\n\n\n\n\n\n\n{\n \"router\": {\n \"service\": \"192.168.88.1\"\n }\n}\n\n\n\n\n\n\n\n{\n \"sonarr\": {\n \"service\": \"sonarr-svc.servarr.svc:8989\"\n }\n}\n\n\n\n\n\n{\n \"stash\": {\n \"service\": \"stash-svc.stash.svc:9999\"\n }\n}\n\n\n\n\n\n{\n \"synology\": {\n \"service\": \"192.168.88.39:5000\"\n }\n}\n\n\n\n{\n \"tdarr\": {\n \"service\": \"tdarr-svc.servarr.svc:8265\"\n }\n}\n\n\n\n\n\n\n\n\n\n\n\n\n\n{\n \"unifi\": {\n \"service\": \"192.168.88.244:8443\"\n }\n}\n\n\n\n{\n \"unifi-inform\": {\n \"service\": \"192.168.88.50:8082\"\n }\n}\n\n\n\n\n\n{\n \"wikijs\": {\n \"service\": \"wikijs-svc.wikijs.svc:3000\"\n }\n}\n\n"
},
"id": "django-python/sites-terraform",
"immutable": false,
"metadata": [
{
"annotations": {},
"generate_name": "",
"generation": 0,
"labels": {},
"name": "sites-terraform",
"namespace": "django-python",
"resource_version": "208986491",
"uid": "5349fabc-956e-40d7-ba1d-a72f35e5330a"
}
]
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "bnVsbA==" "private": "bnVsbA=="
} }
] ]
terraform/terraform.tfstate.backup
+100 -29
View File
@@ -1,7 +1,7 @@
{ {
"version": 4, "version": 4,
"terraform_version": "1.9.2", "terraform_version": "1.13.1",
"serial": 1102, "serial": 1431,
"lineage": "a36de74c-83f8-01fe-0504-92c54a21d49e", "lineage": "a36de74c-83f8-01fe-0504-92c54a21d49e",
"outputs": { "outputs": {
"Nginx_status": { "Nginx_status": {
@@ -21,32 +21,32 @@
"attributes": { "attributes": {
"binary_data": {}, "binary_data": {},
"data": { "data": {
"bitwarden.conf": "############################################\n# config file for bitwarden\n############################################\n\nupstream bitwarden_backend {\n server nginx.bitwarden.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name bitwarden.tryton.geeraert.eu www.bitwarden.tryton.geeraert.eu;\n location / {\n proxy_pass http://bitwarden_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.bitwarden.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = bitwarden.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.bitwarden.tryton.geeraert.eu bitwarden.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "bitwarden.conf": "############################################\n# config file for bitwarden\n############################################\n\nupstream bitwarden_backend {\n server nginx.bitwarden.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name bitwarden.tryton.geeraert.eu www.bitwarden.tryton.geeraert.eu;\n location / {\n proxy_pass http://bitwarden_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.bitwarden.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = bitwarden.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.bitwarden.tryton.geeraert.eu bitwarden.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"bookstack.conf": "############################################\n# config file for bookstack\n############################################\n\nupstream bookstack_backend {\n server bookstack-svc.bookstack.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name bookstack.tryton.geeraert.eu www.bookstack.tryton.geeraert.eu;\n location / {\n proxy_pass http://bookstack_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.bookstack.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = bookstack.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.bookstack.tryton.geeraert.eu bookstack.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "bookstack.conf": "############################################\n# config file for bookstack\n############################################\n\nupstream bookstack_backend {\n server bookstack-svc.bookstack.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name bookstack.tryton.geeraert.eu www.bookstack.tryton.geeraert.eu;\n location / {\n proxy_pass http://bookstack_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.bookstack.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = bookstack.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.bookstack.tryton.geeraert.eu bookstack.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"django.conf": "############################################\n# config file for django\n############################################\n\nupstream django_backend {\n server webserver.django-python.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name django.tryton.geeraert.eu www.django.tryton.geeraert.eu;\n location / {\n proxy_pass http://django_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://django_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.django.tryton.geeraert.eu django.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "django-dev.conf": "############################################\n# config file for django-dev\n############################################\n\nupstream django-dev_backend {\n server webserver.django-dev.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name django-dev.tryton.geeraert.eu www.django-dev.tryton.geeraert.eu;\n location / {\n proxy_pass http://django-dev_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://django-dev_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.django-dev.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = django-dev.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.django-dev.tryton.geeraert.eu django-dev.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"dupeguru.conf": "############################################\n# config file for dupeguru\n############################################\n\nupstream dupeguru_backend {\n server dupeguru.dupeguru.svc:5800;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name dupeguru.tryton.geeraert.eu www.dupeguru.tryton.geeraert.eu;\n location / {\n proxy_pass http://dupeguru_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n auth_basic \"Administrator’s Area\";\n auth_basic_user_file /authentication-htpasswd/.htpasswd;\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.dupeguru.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = dupeguru.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.dupeguru.tryton.geeraert.eu dupeguru.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "django.conf": "############################################\n# config file for django\n############################################\n\nupstream django_backend {\n server django-svc.django:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name django.tryton.geeraert.eu www.django.tryton.geeraert.eu;\n location / {\n proxy_pass http://django_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://django_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = django.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.django.tryton.geeraert.eu django.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"echo.conf": "############################################\n# config file for echo\n############################################\n\nupstream echo_backend {\n server echo-server.echo-server.svc:80;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name echo.tryton.geeraert.eu www.echo.tryton.geeraert.eu;\n location / {\n proxy_pass http://echo_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://echo_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\t\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.echo.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = echo.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.echo.tryton.geeraert.eu echo.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "dupeguru.conf": "############################################\n# config file for dupeguru\n############################################\n\nupstream dupeguru_backend {\n server dupeguru.dupeguru.svc:5800;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name dupeguru.tryton.geeraert.eu www.dupeguru.tryton.geeraert.eu;\n location / {\n proxy_pass http://dupeguru_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n auth_basic \"Administrator’s Area\";\n auth_basic_user_file /authentication-htpasswd/.htpasswd;\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.dupeguru.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = dupeguru.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.dupeguru.tryton.geeraert.eu dupeguru.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"gitea.conf": "############################################\n# config file for gitea\n############################################\n\nupstream gitea_backend {\n server webserver.gitea.svc:3000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name gitea.tryton.geeraert.eu www.gitea.tryton.geeraert.eu;\n location / {\n proxy_pass http://gitea_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.gitea.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = gitea.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.gitea.tryton.geeraert.eu gitea.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "gitea.conf": "############################################\n# config file for gitea\n############################################\n\nupstream gitea_backend {\n server webserver.gitea.svc:3000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name gitea.tryton.geeraert.eu www.gitea.tryton.geeraert.eu;\n location / {\n proxy_pass http://gitea_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.gitea.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = gitea.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.gitea.tryton.geeraert.eu gitea.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"gitlab.conf": "############################################\n# config file for gitlab\n############################################\n\nupstream gitlab_backend {\n server webserver.gitlab.svc:443;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name gitlab.tryton.geeraert.eu www.gitlab.tryton.geeraert.eu;\n location / {\n proxy_pass https://gitlab_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass https://gitlab_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\tclient_max_body_size 20m;\n\tproxy_request_buffering off;\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.gitlab.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = gitlab.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.gitlab.tryton.geeraert.eu gitlab.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "gitlab.conf": "############################################\n# config file for gitlab\n############################################\n\nupstream gitlab_backend {\n server webserver.gitlab.svc:443;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name gitlab.tryton.geeraert.eu www.gitlab.tryton.geeraert.eu;\n location / {\n proxy_pass https://gitlab_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass https://gitlab_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\tclient_max_body_size 20m;\n\tproxy_request_buffering off;\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.gitlab.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = gitlab.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.gitlab.tryton.geeraert.eu gitlab.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"immich.conf": "############################################\n# config file for immich\n############################################\n\nupstream immich_backend {\n server immich-server.immich.svc:3001;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name immich.tryton.geeraert.eu www.immich.tryton.geeraert.eu;\n location / {\n proxy_pass http://immich_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.immich.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = immich.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.immich.tryton.geeraert.eu immich.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "immich.conf": "############################################\n# config file for immich\n############################################\n\nupstream immich_backend {\n server immich-svc.immich.svc:2283;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name immich.tryton.geeraert.eu www.immich.tryton.geeraert.eu;\n location / {\n proxy_pass http://immich_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n proxy_set_header X-Forwarded-Proto $scheme;\n proxy_read_timeout 60000s;\n\n\n #adding websocket , usefull for reverse proxy\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_cache_bypass $http_upgrade;\n #end of working\n\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.immich.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = immich.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.immich.tryton.geeraert.eu immich.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"jellyfin.conf": "############################################\n# config file for jellyfin\n############################################\n\nupstream jellyfin_backend {\n server jellyfin-svc.jellyfin.svc:8096;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name jellyfin.tryton.geeraert.eu www.jellyfin.tryton.geeraert.eu;\n location / {\n proxy_pass http://jellyfin_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.jellyfin.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = jellyfin.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.jellyfin.tryton.geeraert.eu jellyfin.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "jellyfin.conf": "############################################\n# config file for jellyfin\n############################################\n\nupstream jellyfin_backend {\n server jellyfin-svc.jellyfin.svc:8096;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name jellyfin.tryton.geeraert.eu www.jellyfin.tryton.geeraert.eu;\n location / {\n proxy_pass http://jellyfin_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.jellyfin.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = jellyfin.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.jellyfin.tryton.geeraert.eu jellyfin.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"nextcloud.conf": "############################################\n# config file for nextcloud\n############################################\n\nupstream nextcloud_backend {\n server webserver.nextcloud.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name nextcloud.tryton.geeraert.eu www.nextcloud.tryton.geeraert.eu;\n location / {\n proxy_pass http://nextcloud_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://nextcloud_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\t\n\n location /.well-known/carddav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location /.well-known/caldav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location = /health {\n default_type text/html;\n return 200 \"\u003c!DOCTYPE html\u003e\u003ch2\u003ehealth check\u003c/h2\u003e\\n\";\n }\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.nextcloud.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = nextcloud.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.nextcloud.tryton.geeraert.eu nextcloud.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "nextcloud.conf": "############################################\n# config file for nextcloud\n############################################\n\nupstream nextcloud_backend {\n server webserver.nextcloud.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name nextcloud.tryton.geeraert.eu www.nextcloud.tryton.geeraert.eu;\n location / {\n proxy_pass http://nextcloud_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n location ~* \\.(html|css|jpg|gif|ico|js)$ {\n\t proxy_cache cache;\n\t proxy_cache_key $host$uri$is_args$args;\n\t proxy_cache_valid 200 301 302 30m;\n\t expires 30m;\n\t proxy_pass http://nextcloud_backend;\n\t\t}\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n location /.well-known/carddav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location /.well-known/caldav {\n return 301 $scheme://$host/remote.php/dav;\n }\n\n location = /health {\n default_type text/html;\n return 200 \"\u003c!DOCTYPE html\u003e\u003ch2\u003ehealth check\u003c/h2\u003e\\n\";\n }\n\n http2 on;\n ssl_protocols TLSv1.2;\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.nextcloud.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = nextcloud.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.nextcloud.tryton.geeraert.eu nextcloud.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"octoprint.conf": "############################################\n# config file for octoprint\n############################################\n\nupstream octoprint_backend {\n server 192.168.1.28:5000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name octoprint.tryton.geeraert.eu www.octoprint.tryton.geeraert.eu;\n location / {\n proxy_pass http://octoprint_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.octoprint.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = octoprint.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.octoprint.tryton.geeraert.eu octoprint.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "octoprint.conf": "############################################\n# config file for octoprint\n############################################\n\nupstream octoprint_backend {\n server 192.168.1.28:5000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name octoprint.tryton.geeraert.eu www.octoprint.tryton.geeraert.eu;\n location / {\n proxy_pass http://octoprint_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.octoprint.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = octoprint.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.octoprint.tryton.geeraert.eu octoprint.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"openmediavault.conf": "############################################\n# config file for openmediavault\n############################################\n\nupstream openmediavault_backend {\n server 192.168.88.29;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name openmediavault.tryton.geeraert.eu www.openmediavault.tryton.geeraert.eu;\n location / {\n proxy_pass http://openmediavault_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.openmediavault.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = openmediavault.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.openmediavault.tryton.geeraert.eu openmediavault.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "openmediavault.conf": "############################################\n# config file for openmediavault\n############################################\n\nupstream openmediavault_backend {\n server 192.168.88.29;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name openmediavault.tryton.geeraert.eu www.openmediavault.tryton.geeraert.eu;\n location / {\n proxy_pass http://openmediavault_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.openmediavault.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = openmediavault.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.openmediavault.tryton.geeraert.eu openmediavault.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"paperless.conf": "############################################\n# config file for paperless\n############################################\n\nupstream paperless_backend {\n server webserver.paperless.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name paperless.tryton.geeraert.eu www.paperless.tryton.geeraert.eu;\n location / {\n proxy_pass http://paperless_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.paperless.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = paperless.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.paperless.tryton.geeraert.eu paperless.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "paperless.conf": "############################################\n# config file for paperless\n############################################\n\nupstream paperless_backend {\n server paperless-svc.paperless.svc:8000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name paperless.tryton.geeraert.eu www.paperless.tryton.geeraert.eu;\n location / {\n proxy_pass http://paperless_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.paperless.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = paperless.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.paperless.tryton.geeraert.eu paperless.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"pihole.conf": "############################################\n# config file for pihole\n############################################\n\nupstream pihole_backend {\n server web.piholenew.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name pihole.tryton.geeraert.eu www.pihole.tryton.geeraert.eu;\n location / {\n proxy_pass http://pihole_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.pihole.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = pihole.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.pihole.tryton.geeraert.eu pihole.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "pihole.conf": "############################################\n# config file for pihole\n############################################\n\nupstream pihole_backend {\n server web.piholenew.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name pihole.tryton.geeraert.eu www.pihole.tryton.geeraert.eu;\n location / {\n proxy_pass http://pihole_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.pihole.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = pihole.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.pihole.tryton.geeraert.eu pihole.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"portainer.conf": "############################################\n# config file for portainer\n############################################\n\nupstream portainer_backend {\n server portainer.portainer.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name portainer.tryton.geeraert.eu www.portainer.tryton.geeraert.eu;\n location / {\n proxy_pass http://portainer_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.portainer.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = portainer.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.portainer.tryton.geeraert.eu portainer.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "portainer.conf": "############################################\n# config file for portainer\n############################################\n\nupstream portainer_backend {\n server portainer.portainer.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name portainer.tryton.geeraert.eu www.portainer.tryton.geeraert.eu;\n location / {\n proxy_pass http://portainer_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.portainer.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = portainer.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.portainer.tryton.geeraert.eu portainer.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"prowlarr.conf": "############################################\n# config file for prowlarr\n############################################\n\nupstream prowlarr_backend {\n server prowlarr.servarr.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name prowlarr.tryton.geeraert.eu www.prowlarr.tryton.geeraert.eu;\n location / {\n proxy_pass http://prowlarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.prowlarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = prowlarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.prowlarr.tryton.geeraert.eu prowlarr.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "prowlarr.conf": "############################################\n# config file for prowlarr\n############################################\n\nupstream prowlarr_backend {\n server prowlarr-svc.servarr.svc:9696;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name prowlarr.tryton.geeraert.eu www.prowlarr.tryton.geeraert.eu;\n location / {\n proxy_pass http://prowlarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.prowlarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = prowlarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.prowlarr.tryton.geeraert.eu prowlarr.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"qbittorrent.conf": "############################################\n# config file for qbittorrent\n############################################\n\nupstream qbittorrent_backend {\n server qbittorrent.servarr.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name qbittorrent.tryton.geeraert.eu www.qbittorrent.tryton.geeraert.eu;\n location / {\n proxy_pass http://qbittorrent_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.qbittorrent.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = qbittorrent.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.qbittorrent.tryton.geeraert.eu qbittorrent.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "qbittorrent.conf": "############################################\n# config file for qbittorrent\n############################################\n\nupstream qbittorrent_backend {\n server qbittorrent-svc.servarr.svc:8080;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name qbittorrent.tryton.geeraert.eu www.qbittorrent.tryton.geeraert.eu;\n location / {\n proxy_pass http://qbittorrent_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.qbittorrent.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = qbittorrent.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.qbittorrent.tryton.geeraert.eu qbittorrent.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"radarr.conf": "############################################\n# config file for radarr\n############################################\n\nupstream radarr_backend {\n server radarr.servarr.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name radarr.tryton.geeraert.eu www.radarr.tryton.geeraert.eu;\n location / {\n proxy_pass http://radarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.radarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = radarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.radarr.tryton.geeraert.eu radarr.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "radarr.conf": "############################################\n# config file for radarr\n############################################\n\nupstream radarr_backend {\n server radarr-svc.servarr.svc:7878;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name radarr.tryton.geeraert.eu www.radarr.tryton.geeraert.eu;\n location / {\n proxy_pass http://radarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.radarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = radarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.radarr.tryton.geeraert.eu radarr.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"router.conf": "############################################\n# config file for router\n############################################\n\nupstream router_backend {\n server 192.168.88.1;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name router.tryton.geeraert.eu www.router.tryton.geeraert.eu;\n location / {\n proxy_pass http://router_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n auth_basic \"Administrator’s Area\";\n auth_basic_user_file /authentication-htpasswd/.htpasswd;\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.router.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = router.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.router.tryton.geeraert.eu router.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "router.conf": "############################################\n# config file for router\n############################################\n\nupstream router_backend {\n server 192.168.88.1;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name router.tryton.geeraert.eu www.router.tryton.geeraert.eu;\n location / {\n proxy_pass http://router_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n auth_basic \"Administrator’s Area\";\n auth_basic_user_file /authentication-htpasswd/.htpasswd;\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.router.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = router.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.router.tryton.geeraert.eu router.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"screeps.conf": "############################################\n# config file for screeps\n############################################\n\nupstream screeps_backend {\n server screeps-svc.screeps.svc:21025;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name screeps.tryton.geeraert.eu www.screeps.tryton.geeraert.eu;\n location / {\n proxy_pass http://screeps_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\t\n\n listen 443 ssl;\n listen 80;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}", "sonarr.conf": "############################################\n# config file for sonarr\n############################################\n\nupstream sonarr_backend {\n server sonarr-svc.servarr.svc:8989;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name sonarr.tryton.geeraert.eu www.sonarr.tryton.geeraert.eu;\n location / {\n proxy_pass http://sonarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.sonarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = sonarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.sonarr.tryton.geeraert.eu sonarr.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"sickchill.conf": "############################################\n# config file for sickchill\n############################################\n\nupstream sickchill_backend {\n server sickchill.servarr.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name sickchill.tryton.geeraert.eu www.sickchill.tryton.geeraert.eu;\n location / {\n proxy_pass http://sickchill_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.sickchill.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = sickchill.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.sickchill.tryton.geeraert.eu sickchill.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "stash.conf": "############################################\n# config file for stash\n############################################\n\nupstream stash_backend {\n server stash-svc.stash.svc:9999;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name stash.tryton.geeraert.eu www.stash.tryton.geeraert.eu;\n location / {\n proxy_pass http://stash_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n #don't use this as this needs to be run as root or have the CAP_NET_RAW capability) to bind to a non-local IP address.\n #Because the backend thinks the request is coming directly from the client, it will try to send the response directly back to that client IP. To prevent this (which would break the connection), you must force the response back through the NGINX server.\n #proxy_bind $remote_addr transparent;\n\n##used to be working\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n proxy_set_header X-Forwarded-Proto $scheme;\n proxy_read_timeout 60000s;\n #working\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_cache_bypass $http_upgrade;\n #end of working\n\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.stash.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = stash.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.stash.tryton.geeraert.eu stash.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"sonarr.conf": "############################################\n# config file for sonarr\n############################################\n\nupstream sonarr_backend {\n server sonarr.servarr.svc;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name sonarr.tryton.geeraert.eu www.sonarr.tryton.geeraert.eu;\n location / {\n proxy_pass http://sonarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.sonarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = sonarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.sonarr.tryton.geeraert.eu sonarr.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "synology.conf": "############################################\n# config file for synology\n############################################\n\nupstream synology_backend {\n server 192.168.88.39:5000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name synology.tryton.geeraert.eu www.synology.tryton.geeraert.eu;\n location / {\n proxy_pass http://synology_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.synology.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = synology.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.synology.tryton.geeraert.eu synology.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"stash.conf": "############################################\n# config file for stash\n############################################\n\nupstream stash_backend {\n server stash-svc.stash.svc:9999;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name stash.tryton.geeraert.eu www.stash.tryton.geeraert.eu;\n location / {\n proxy_pass http://stash_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n proxy_set_header X-Forwarded-Proto $scheme;\n proxy_read_timeout 60000s;\n#working\nproxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_cache_bypass $http_upgrade;\n#end of working\n\n\n\n\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.stash.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = stash.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.stash.tryton.geeraert.eu stash.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "tdarr.conf": "############################################\n# config file for tdarr\n############################################\n\nupstream tdarr_backend {\n server tdarr-svc.servarr.svc:8265;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name tdarr.tryton.geeraert.eu www.tdarr.tryton.geeraert.eu;\n location / {\n proxy_pass http://tdarr_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n proxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n proxy_set_header X-Forwarded-Proto $scheme;\n proxy_read_timeout 60000s;\n#working\nproxy_set_header Connection \"upgrade\";\n proxy_set_header X-Real-IP $remote_addr;\n proxy_cache_bypass $http_upgrade;\n#end of working\n\n\n\n\n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.tdarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = tdarr.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.tdarr.tryton.geeraert.eu tdarr.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"synology.conf": "############################################\n# config file for synology\n############################################\n\nupstream synology_backend {\n server 192.168.88.39:5000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name synology.tryton.geeraert.eu www.synology.tryton.geeraert.eu;\n location / {\n proxy_pass http://synology_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.synology.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = synology.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.synology.tryton.geeraert.eu synology.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "unifi-inform.conf": "############################################\n# config file for unifi-inform\n############################################\n\nupstream unifi-inform_backend {\n server 192.168.88.50:8082;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name unifi-inform.tryton.geeraert.eu www.unifi-inform.tryton.geeraert.eu;\n location / {\n proxy_pass http://unifi-inform_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.unifi-inform.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = unifi-inform.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.unifi-inform.tryton.geeraert.eu unifi-inform.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"unifi-inform.conf": "############################################\n# config file for unifi-inform\n############################################\n\nupstream unifi-inform_backend {\n server 192.168.88.50:8082;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name unifi-inform.tryton.geeraert.eu www.unifi-inform.tryton.geeraert.eu;\n location / {\n proxy_pass http://unifi-inform_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.unifi-inform.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = unifi-inform.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.unifi-inform.tryton.geeraert.eu unifi-inform.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}", "unifi.conf": "############################################\n# config file for unifi\n############################################\n\nupstream unifi_backend {\n server 192.168.88.244:8443;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name unifi.tryton.geeraert.eu www.unifi.tryton.geeraert.eu;\n location / {\n proxy_pass https://unifi_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.unifi.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = unifi.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.unifi.tryton.geeraert.eu unifi.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}",
"unifi.conf": "############################################\n# config file for unifi\n############################################\n\nupstream unifi_backend {\n server 192.168.88.244:8443;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name unifi.tryton.geeraert.eu www.unifi.tryton.geeraert.eu;\n location / {\n proxy_pass https://unifi_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\t\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.unifi.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = unifi.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.unifi.tryton.geeraert.eu unifi.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}" "wikijs.conf": "############################################\n# config file for wikijs\n############################################\n\nupstream wikijs_backend {\n server wikijs-svc.wikijs.svc:3000;\n server 1.1.1.1 backup;\n }\n\nserver {\n server_name wikijs.tryton.geeraert.eu www.wikijs.tryton.geeraert.eu;\n location / {\n proxy_pass http://wikijs_backend;\n proxy_set_header Upgrade $http_upgrade;\n\t\tproxy_set_header Host $host;\n \n\t\t\n \n }\n location /.well-known/acme-challenge/ {\n root /var/www/certbot;\n }\n\n\taccess_log /var/log/nginx/access.log my_custom_format;\n access_log /var/log/nginx/ip_audit.log ip_audit;\n access_log /var/log/nginx/backend_debug.log backend_debug;\n\tclient_max_body_size 20m;\n proxy_request_buffering off;\n\n\n listen 443 ssl;\n\n ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;\n ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;\n\n}\nserver {\n if ($host = www.wikijs.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n\n if ($host = wikijs.tryton.geeraert.eu) {\n return 301 https://$host$request_uri;\n }\n\n server_name www.wikijs.tryton.geeraert.eu wikijs.tryton.geeraert.eu;\n listen 80;\n return 404;\n\n}"
}, },
"id": "reverse-proxy/sites-terraform", "id": "reverse-proxy/sites-terraform",
"immutable": false, "immutable": false,
@@ -60,12 +60,83 @@
"labels": {}, "labels": {},
"name": "sites-terraform", "name": "sites-terraform",
"namespace": "reverse-proxy", "namespace": "reverse-proxy",
"resource_version": "118207889", "resource_version": "212969561",
"uid": "08aa2108-9dce-4e67-b000-4dc7fbd1c23e" "uid": "08aa2108-9dce-4e67-b000-4dc7fbd1c23e"
} }
] ]
}, },
"sensitive_attributes": [], "sensitive_attributes": [],
"identity_schema_version": 0,
"private": "bnVsbA=="
}
]
},
{
"mode": "managed",
"type": "kubernetes_config_map",
"name": "deny_ip_configmap",
"provider": "provider[\"registry.terraform.io/hashicorp/kubernetes\"]",
"instances": [
{
"schema_version": 0,
"attributes": {
"binary_data": {},
"data": {
"deny.conf": "\n deny 1.2.3.4;\n\n deny 37.168.24.233;\n"
},
"id": "reverse-proxy/deny-ip-terraform",
"immutable": false,
"metadata": [
{
"annotations": {
"reloader.stakater.com/match": "true"
},
"generate_name": "",
"generation": 0,
"labels": {},
"name": "deny-ip-terraform",
"namespace": "reverse-proxy",
"resource_version": "213005153",
"uid": "d78dd9b1-bac4-4680-afda-51d4217f59c9"
}
]
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "bnVsbA=="
}
]
},
{
"mode": "managed",
"type": "kubernetes_config_map",
"name": "websites_configmap",
"provider": "provider[\"registry.terraform.io/hashicorp/kubernetes\"]",
"instances": [
{
"schema_version": 0,
"attributes": {
"binary_data": {},
"data": {
"websites.json": "\n\n{\n \"bitwarden\": {\n \"service\": \"nginx.bitwarden.svc:8080\"\n }\n}\n\n\n\n{\n \"bookstack\": {\n \"service\": \"bookstack-svc.bookstack.svc\"\n }\n}\n\n\n\n\n\n{\n \"django\": {\n \"service\": \"django-svc.django:8000\"\n }\n}\n\n\n\n{\n \"django-dev\": {\n \"service\": \"webserver.django-dev.svc:8000\"\n }\n}\n\n\n\n\n\n{\n \"dupeguru\": {\n \"service\": \"dupeguru.dupeguru.svc:5800\"\n }\n}\n\n\n\n\n\n\n\n{\n \"gitea\": {\n \"service\": \"webserver.gitea.svc:3000\"\n }\n}\n\n\n\n{\n \"gitlab\": {\n \"service\": \"webserver.gitlab.svc:443\"\n }\n}\n\n\n\n\n\n\n\n{\n \"immich\": {\n \"service\": \"immich-svc.immich.svc:2283\"\n }\n}\n\n\n\n\n\n{\n \"jellyfin\": {\n \"service\": \"jellyfin-svc.jellyfin.svc:8096\"\n }\n}\n\n\n\n\n\n\n\n\n\n\n\n\n\n{\n \"nextcloud\": {\n \"service\": \"webserver.nextcloud.svc\"\n }\n}\n\n\n\n\n\n\n\n\n\n{\n \"octoprint\": {\n \"service\": \"192.168.1.28:5000\"\n }\n}\n\n\n\n\n\n{\n \"openmediavault\": {\n \"service\": \"192.168.88.29\"\n }\n}\n\n\n\n\n\n\n\n{\n \"paperless\": {\n \"service\": \"paperless-svc.paperless.svc:8000\"\n }\n}\n\n\n\n{\n \"pihole\": {\n \"service\": \"web.piholenew.svc\"\n }\n}\n\n\n\n\n\n{\n \"portainer\": {\n \"service\": \"portainer.portainer.svc\"\n }\n}\n\n\n\n\n\n{\n \"prowlarr\": {\n \"service\": \"prowlarr-svc.servarr.svc:9696\"\n }\n}\n\n\n\n\n\n{\n \"qbittorrent\": {\n \"service\": \"qbittorrent-svc.servarr.svc:8080\"\n }\n}\n\n\n\n{\n \"radarr\": {\n \"service\": \"radarr-svc.servarr.svc:7878\"\n }\n}\n\n\n\n\n\n\n\n{\n \"router\": {\n \"service\": \"192.168.88.1\"\n }\n}\n\n\n\n\n\n\n\n{\n \"sonarr\": {\n \"service\": \"sonarr-svc.servarr.svc:8989\"\n }\n}\n\n\n\n\n\n{\n \"stash\": {\n \"service\": \"stash-svc.stash.svc:9999\"\n }\n}\n\n\n\n\n\n{\n \"synology\": {\n \"service\": \"192.168.88.39:5000\"\n }\n}\n\n\n\n{\n \"tdarr\": {\n \"service\": \"tdarr-svc.servarr.svc:8265\"\n }\n}\n\n\n\n\n\n\n\n\n\n\n\n\n\n{\n \"unifi\": {\n \"service\": \"192.168.88.244:8443\"\n }\n}\n\n\n\n{\n \"unifi-inform\": {\n \"service\": \"192.168.88.50:8082\"\n }\n}\n\n\n\n\n\n{\n \"wikijs\": {\n \"service\": \"wikijs-svc.wikijs.svc:3000\"\n }\n}\n\n"
},
"id": "django-python/sites-terraform",
"immutable": false,
"metadata": [
{
"annotations": {},
"generate_name": "",
"generation": 0,
"labels": {},
"name": "sites-terraform",
"namespace": "django-python",
"resource_version": "208986491",
"uid": "5349fabc-956e-40d7-ba1d-a72f35e5330a"
}
]
},
"sensitive_attributes": [],
"identity_schema_version": 0,
"private": "bnVsbA==" "private": "bnVsbA=="
} }
] ]
terraform/variables.auto.tfvars
+109 -29
View File
@@ -1,6 +1,13 @@
nginx_sites = { nginx_sites = {
bitwarden = { bitwarden = {
service = "nginx.bitwarden.svc:8080" service = "nginx.bitwarden.svc:8080"
#extra-value-location = <<EOT
#proxy_set_header Host $host;
#proxy_set_header X-Real-IP $remote_addr;
#proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
#proxy_set_header Proxy "";
# EOT
#service = "bitwarden-nginx-svc.bitwardent.svc:8080"
http2_bool = true http2_bool = true
} }
@@ -16,7 +23,14 @@ nginx_sites = {
proxy_cache = true proxy_cache = true
http2_bool = true http2_bool = true
} }
django-dev = {
service = "webserver.django-dev.svc:8000"
proxy_cache = true
http2_bool = true
}
echo = { echo = {
enabled = false
# service = "echo-server.echo-server.svc:80" # service = "echo-server.echo-server.svc:80"
service = "echo-svc.echo.svc" service = "echo-svc.echo.svc"
proxy_cache = true proxy_cache = true
@@ -25,7 +39,7 @@ nginx_sites = {
extra-value-location = <<EOT extra-value-location = <<EOT
auth_request /oauth2/auth; auth_request /oauth2/auth;
error_page 401 = @oauth2_signin; error_page 401 = @oauth2_signin;
proxy_set_header X-Auth-Request-Redirect $request_uri; proxy_set_header X-Auth-Request-Redirect $request_uri;
EOT EOT
extra-value = <<EOT extra-value = <<EOT
@@ -39,12 +53,14 @@ proxy_pass http://oauthn_backend;
proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Scheme $scheme; proxy_set_header X-Scheme $scheme;
} }
location @oauth2_signin { location @oauth2_signin {
return 302 https://$host/oauth2/start?rd=https://$host$request_uri; return 302 https://$host/oauth2/start?rd=https://$host$request_uri;
#return 302 https://oauthn.tryton.geeraert.eu/oauth2/start?rd=https://$host$request_uri;
} }
location /oauth2/ { location /oauth2/ {
proxy_pass http://oauthn_backend; proxy_pass http://oauthn_backend;
proxy_set_header Host $host; proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Scheme $scheme; proxy_set_header X-Scheme $scheme;
@@ -127,7 +143,8 @@ client_max_body_size 20m;
enabled = false enabled = false
} }
paperless = { paperless = {
service = "webserver.paperless.svc:8000" #service = "webserver.paperless.svc:8000"
service = "paperless-svc.paperless.svc:8000"
} }
pihole = { pihole = {
service = "172.16.0.60:8081" service = "172.16.0.60:8081"
@@ -179,8 +196,22 @@ client_max_body_size 20m;
} }
immich = { immich = {
#service = "immich-server.immich.svc:3001" #service = "immich-server.immich.svc:2283"
service = "immich-server.immich.svc:2283" service = "immich-svc.immich.svc:2283"
extra-value-location = <<EOT
proxy_set_header Connection "upgrade";
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_read_timeout 60000s;
#adding websocket , usefull for reverse proxy
proxy_set_header Connection "upgrade";
proxy_set_header X-Real-IP $remote_addr;
proxy_cache_bypass $http_upgrade;
#end of working
EOT
} }
immicht = { immicht = {
service = "immicht-svc.immicht.svc:2283" service = "immicht-svc.immicht.svc:2283"
@@ -199,8 +230,23 @@ client_max_body_size 20m;
} }
stirling = { stirling = {
enabled = false enabled = false
service = "stirling-svc.stirling.svc:8080" service = "stirling-svc.stirling.svc:8080"
extra-value-location = <<EOT
proxy_set_header Connection "upgrade";
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_read_timeout 60000s;
#working
proxy_set_header Connection "upgrade";
proxy_set_header X-Real-IP $remote_addr;
proxy_cache_bypass $http_upgrade;
#end of working
EOT
} }
vulcan = { vulcan = {
service = "vulcan.vulcan.svc:80" service = "vulcan.vulcan.svc:80"
@@ -283,22 +329,27 @@ client_max_body_size 20m;
} }
stash = { stash = {
# enabled = false # enabled = false
service = "stash-svc.stash.svc:9999" service = "stash-svc.stash.svc:9999"
#extra-value= <<EOT
# proxy_protocol on;
#EOT
extra-value-location = <<EOT extra-value-location = <<EOT
#don't use this as this needs to be run as root or have the CAP_NET_RAW capability) to bind to a non-local IP address.
#Because the backend thinks the request is coming directly from the client, it will try to send the response directly back to that client IP. To prevent this (which would break the connection), you must force the response back through the NGINX server.
#proxy_bind $remote_addr transparent;
##used to be working
proxy_set_header Connection "upgrade"; proxy_set_header Connection "upgrade";
proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme; proxy_set_header X-Forwarded-Proto $scheme;
proxy_read_timeout 60000s; proxy_read_timeout 60000s;
#working #working
proxy_set_header Connection "upgrade"; proxy_set_header Connection "upgrade";
proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Real-IP $remote_addr;
proxy_cache_bypass $http_upgrade; proxy_cache_bypass $http_upgrade;
#end of working #end of working
EOT
EOT
} }
neko = { neko = {
@@ -339,7 +390,6 @@ proxy_set_header Connection "upgrade";
service = "qbitorrent-svc.tservarr.svc:8080" service = "qbitorrent-svc.tservarr.svc:8080"
} }
poste = { poste = {
enabled = false enabled = false
service = "poste-svc.poste.svc:443" service = "poste-svc.poste.svc:443"
@@ -361,12 +411,16 @@ proxy_set_header Connection "upgrade";
EOT EOT
} }
wikijs = { wikijs = {
#enabled = false #enabled = false
service = "wikijs-svc.wikijs.svc:3000" service = "wikijs-svc.wikijs.svc:3000"
extra-value = <<EOT
client_max_body_size 20m;
proxy_request_buffering off;
EOT
} }
keycloak = { keycloak = {
#enabled = false enabled = false
service = "keycloak-svc.keycloak.svc:8080" service = "keycloak-svc.keycloak.svc:8080"
extra-value = <<EOT extra-value = <<EOT
@@ -376,18 +430,44 @@ proxy_set_header Connection "upgrade";
EOT EOT
} }
oauthn = { oauthn = {
#enabled = false enabled = false
service = "oauth2-proxy-svc.oauth2-proxy.svc:4180" service = "oauth2-proxy-svc.oauth2-proxy.svc:4180"
# extra-value = <<EOT # extra-value = <<EOT
# location /oauth2/ { # location /oauth2/ {
# proxy_pass http://oauthn_backend; # proxy_pass http://oauthn_backend;
# proxy_set_header Host $host; # proxy_set_header Host $host;
# proxy_set_header X-Real-IP $remote_addr; # proxy_set_header X-Real-IP $remote_addr;
# proxy_set_header X-Scheme $scheme; # proxy_set_header X-Scheme $scheme;
# } # }
# EOT # EOT
} }
emailproxy = {
enabled = false
service = "emailproxy-svc.paper.svc:80"
}
tdarr = {
#enabled = false
service = "tdarr-svc.servarr.svc:8265"
extra-value-location = <<EOT
proxy_set_header Connection "upgrade";
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_read_timeout 60000s;
#working
proxy_set_header Connection "upgrade";
proxy_set_header X-Real-IP $remote_addr;
proxy_cache_bypass $http_upgrade;
#end of working
EOT
}
} }
deny_ip = ["1.2.3.4"]