add just in case

conf.d/bitwarden.tryton.geeraert.eu.conf

@@ -1,46 +0,0 @@
-############################################
-#       config file for bitwarden
-############################################
-
-upstream bitwarden_backend {
-        server nginx.bitwarden.svc:8080;
-        server 1.1.1.1 backup;
-    }
-
-server {
-        server_name bitwarden.tryton.geeraert.eu www.bitwarden.tryton.geeraert.eu;
-        location / {
-                proxy_pass http://bitwarden_backend;
-                proxy_set_header    Upgrade     $http_upgrade;
-		proxy_set_header Host $host;
-		
-                
-        }
-        location /.well-known/acme-challenge/ {
-                root /var/www/certbot;
-        }
-
-	
-        http2 on;
-        ssl_protocols TLSv1.2;
-
-        listen 443 ssl;
-        ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
-        ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
-
-}
-server {
-        if ($host = www.bitwarden.tryton.geeraert.eu) {
-                return 301 https://$host$request_uri;
-        }
-
-
-        if ($host = bitwarden.tryton.geeraert.eu) {
-                return 301 https://$host$request_uri;
-        }
-
-        server_name www.bitwarden.tryton.geeraert.eu bitwarden.tryton.geeraert.eu;
-        listen 80;
-        return 404;
-
-}

conf.d/bookstack.tryton.geeraert.eu.conf

@@ -1,44 +0,0 @@
-############################################
-#       config file for bookstack
-############################################
-
-upstream bookstack_backend {
-        server webserver.bookstack.svc;
-        server 1.1.1.1 backup;
-    }
-
-server {
-        server_name bookstack.tryton.geeraert.eu www.bookstack.tryton.geeraert.eu;
-        location / {
-                proxy_pass http://bookstack_backend;
-                proxy_set_header    Upgrade     $http_upgrade;
-		proxy_set_header Host $host;
-		
-                
-        }
-        location /.well-known/acme-challenge/ {
-                root /var/www/certbot;
-        }
-
-	
-
-        listen 443 ssl;
-        ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
-        ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
-
-}
-server {
-        if ($host = www.bookstack.tryton.geeraert.eu) {
-                return 301 https://$host$request_uri;
-        }
-
-
-        if ($host = bookstack.tryton.geeraert.eu) {
-                return 301 https://$host$request_uri;
-        }
-
-        server_name www.bookstack.tryton.geeraert.eu bookstack.tryton.geeraert.eu;
-        listen 80;
-        return 404;
-
-}

conf.d/default.conf

@@ -1 +0,0 @@
-

conf.d/django.tryton.geeraert.eu.conf

@@ -1,54 +0,0 @@
-############################################
-#       config file for django
-############################################
-
-upstream django_backend {
-        server webserver.django-python.svc:8000;
-        server 1.1.1.1 backup;
-    }
-
-server {
-        server_name django.tryton.geeraert.eu www.django.tryton.geeraert.eu;
-        location / {
-                proxy_pass http://django_backend;
-                proxy_set_header    Upgrade     $http_upgrade;
-		proxy_set_header Host $host;
-		
-                
-                location ~* \.(html|css|jpg|gif|ico|js)$ {
-	                proxy_cache          cache;
-	                proxy_cache_key      $host$uri$is_args$args;
-	                proxy_cache_valid    200 301 302 30m;
-	                expires              30m;
-	                proxy_pass  http://django_backend;
-		}
-                
-        }
-        location /.well-known/acme-challenge/ {
-                root /var/www/certbot;
-        }
-
-	
-        http2 on;
-        ssl_protocols TLSv1.2;
-
-        listen 443 ssl;
-        ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
-        ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
-
-}
-server {
-        if ($host = www.django.tryton.geeraert.eu) {
-                return 301 https://$host$request_uri;
-        }
-
-
-        if ($host = django.tryton.geeraert.eu) {
-                return 301 https://$host$request_uri;
-        }
-
-        server_name www.django.tryton.geeraert.eu django.tryton.geeraert.eu;
-        listen 80;
-        return 404;
-
-}

conf.d/echo.tryton.geeraert.eu.conf

@@ -1,54 +0,0 @@
-############################################
-#       config file for echo
-############################################
-
-upstream echo_backend {
-        server echo-server.echo-server.svc:80;
-        server 1.1.1.1 backup;
-    }
-
-server {
-        server_name echo.tryton.geeraert.eu www.echo.tryton.geeraert.eu;
-        location / {
-                proxy_pass http://echo_backend;
-                proxy_set_header    Upgrade     $http_upgrade;
-		proxy_set_header Host $host;
-		
-                
-                location ~* \.(html|css|jpg|gif|ico|js)$ {
-	                proxy_cache          cache;
-	                proxy_cache_key      $host$uri$is_args$args;
-	                proxy_cache_valid    200 301 302 30m;
-	                expires              30m;
-	                proxy_pass  http://echo_backend;
-		}
-                
-        }
-        location /.well-known/acme-challenge/ {
-                root /var/www/certbot;
-        }
-
-	
-        http2 on;
-        ssl_protocols TLSv1.2;
-
-        listen 443 ssl;
-        ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
-        ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
-
-}
-server {
-        if ($host = www.echo.tryton.geeraert.eu) {
-                return 301 https://$host$request_uri;
-        }
-
-
-        if ($host = echo.tryton.geeraert.eu) {
-                return 301 https://$host$request_uri;
-        }
-
-        server_name www.echo.tryton.geeraert.eu echo.tryton.geeraert.eu;
-        listen 80;
-        return 404;
-
-}

conf.d/esp-home.tryton.geeraert.eu.conf

@@ -1,17 +0,0 @@
-upstream esp-home_backend {
-       server 192.168.88.50:6052;
-       server 1.1.1.1 backup;
-    }
-
-server {
-	server_name esp-home.tryton.geeraert.eu www.esp-home.tryton.geeraert.eu;
-        location / {
-		proxy_pass http://esp-home_backend;
-        }
-        location /.well-known/acme-challenge/ {
-		root /var/www/certbot;
-        }
-	
-	listen 80 ; 
-}
-

conf.d/firefox.tryton.geeraert.eu.conf

@@ -1,48 +0,0 @@
-map $http_upgrade $connection_upgrade {
-        default upgrade;
-        '' close;
-    }
-upstream firefox_backend {
-       server 192.168.88.52:32487;
-       server 1.1.1.1 backup;
-    }
-
-server {
-	server_name firefox.tryton.geeraert.eu www.firefox.tryton.geeraert.eu;
-        location / {
-	    proxy_pass https://firefox_backend;
-            proxy_http_version 1.1;
-            proxy_set_header Upgrade $http_upgrade;
-            proxy_set_header Connection $connection_upgrade;
-            proxy_set_header Host $host;
-        }
-        location /.well-known/acme-challenge/ {
-		root /var/www/certbot;
-        }
-	
-	listen 443 ssl; # managed by Certbot
-        ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
-        ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
-	#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
-	#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
-
-
-}
-server {
-    if ($host = www.firefox.tryton.geeraert.eu) {
-        return 301 https://$host$request_uri;
-    } # managed by Certbot
-
-
-    if ($host = firefox.tryton.geeraert.eu) {
-        return 301 https://$host$request_uri;
-    } # managed by Certbot
-
-
-        server_name www.firefox.tryton.geeraert.eu firefox.tryton.geeraert.eu;
-    listen 80;
-    return 404; # managed by Certbot
-
-}
-
-

conf.d/gitlab.tryton.geeraert.eu.conf

@@ -1,56 +0,0 @@
-############################################
-#       config file for gitlab
-############################################
-
-upstream gitlab_backend {
-        server webserver.gitlab.svc:443;
-        server 1.1.1.1 backup;
-    }
-
-server {
-        server_name gitlab.tryton.geeraert.eu www.gitlab.tryton.geeraert.eu;
-        location / {
-                proxy_pass https://gitlab_backend;
-                proxy_set_header    Upgrade     $http_upgrade;
-		proxy_set_header Host $host;
-		
-                
-                location ~* \.(html|css|jpg|gif|ico|js)$ {
-	                proxy_cache          cache;
-	                proxy_cache_key      $host$uri$is_args$args;
-	                proxy_cache_valid    200 301 302 30m;
-	                expires              30m;
-	                proxy_pass  https://gitlab_backend;
-		}
-                
-        }
-        location /.well-known/acme-challenge/ {
-                root /var/www/certbot;
-        }
-
-	client_max_body_size 20m;
-	proxy_request_buffering off;
-
-        http2 on;
-        ssl_protocols TLSv1.2;
-
-        listen 443 ssl;
-        ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
-        ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
-
-}
-server {
-        if ($host = www.gitlab.tryton.geeraert.eu) {
-                return 301 https://$host$request_uri;
-        }
-
-
-        if ($host = gitlab.tryton.geeraert.eu) {
-                return 301 https://$host$request_uri;
-        }
-
-        server_name www.gitlab.tryton.geeraert.eu gitlab.tryton.geeraert.eu;
-        listen 80;
-        return 404;
-
-}

conf.d/homeassistant.tryton.geeraert.eu.conf

@@ -1,44 +0,0 @@
-############################################
-#       config file for homeassistant
-############################################
-
-upstream homeassistant_backend {
-        server homeassistant.homeassistant.svc:8123;
-        server 1.1.1.1 backup;
-    }
-
-server {
-        server_name homeassistant.tryton.geeraert.eu www.homeassistant.tryton.geeraert.eu;
-        location / {
-                proxy_pass http://homeassistant_backend;
-                proxy_set_header    Upgrade     $http_upgrade;
-		proxy_set_header Host $host;
-		
-                
-        }
-        location /.well-known/acme-challenge/ {
-                root /var/www/certbot;
-        }
-
-	
-
-        listen 443 ssl;
-        ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
-        ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
-
-}
-server {
-        if ($host = www.homeassistant.tryton.geeraert.eu) {
-                return 301 https://$host$request_uri;
-        }
-
-
-        if ($host = homeassistant.tryton.geeraert.eu) {
-                return 301 https://$host$request_uri;
-        }
-
-        server_name www.homeassistant.tryton.geeraert.eu homeassistant.tryton.geeraert.eu;
-        listen 80;
-        return 404;
-
-}

conf.d/keycloak.tryton.geeraert.eu.conf

@@ -1,48 +0,0 @@
-############################################
-#       config file for keycloak
-############################################
-
-upstream keycloak_backend {
-        server keycloak.keycloak.svc:8080;
-        server 1.1.1.1 backup;
-    }
-
-server {
-        server_name keycloak.tryton.geeraert.eu www.keycloak.tryton.geeraert.eu;
-        location / {
-                proxy_pass http://keycloak_backend;
-                proxy_set_header    Upgrade     $http_upgrade;
-		proxy_set_header Host $host;
-		
-                
-        }
-        location /.well-known/acme-challenge/ {
-                root /var/www/certbot;
-        }
-
-	
-        set_real_ip_from 0.0.0.0/0;
-        real_ip_header X-Real-IP;
-        real_ip_recursive on;
-
-
-        listen 443 ssl;
-        ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
-        ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
-
-}
-server {
-        if ($host = www.keycloak.tryton.geeraert.eu) {
-                return 301 https://$host$request_uri;
-        }
-
-
-        if ($host = keycloak.tryton.geeraert.eu) {
-                return 301 https://$host$request_uri;
-        }
-
-        server_name www.keycloak.tryton.geeraert.eu keycloak.tryton.geeraert.eu;
-        listen 80;
-        return 404;
-
-}

conf.d/machinemanager.tryton.geeraert.eu.conf

@@ -1,17 +0,0 @@
-upstream machinemanager_backend {
-       server 192.168.88.50:9050;
-       server 1.1.1.1 backup;
-    }
-
-server {
-	server_name machinemanager.tryton.geeraert.eu www.machinemanager.tryton.geeraert.eu;
-        location / {
-		proxy_pass http://machinemanager_backend;
-        }
-        location /.well-known/acme-challenge/ {
-		root /var/www/certbot;
-        }
-	
-	listen 80 ; 
-}
-

conf.d/mediawiki.tryton.geeraert.eu.conf

@@ -1,17 +0,0 @@
-upstream mediawiki_backend {
-       server 192.168.49.2:30002;
-       server 1.1.1.1 backup;
-    }
-
-server {
-	server_name mediawiki.tryton.geeraert.eu www.mediawiki.tryton.geeraert.eu;
-        location / {
-		proxy_pass http://mediawiki_backend;
-        }
-        location /.well-known/acme-challenge/ {
-		root /var/www/certbot;
-        }
-	
-	listen 80 ; 
-}
-

conf.d/nextcloud.tryton.geeraert.eu.conf

@@ -1,68 +0,0 @@
-############################################
-#       config file for nextcloud
-############################################
-
-upstream nextcloud_backend {
-        server webserver.nextcloud.svc;
-        server 1.1.1.1 backup;
-    }
-
-server {
-        server_name nextcloud.tryton.geeraert.eu www.nextcloud.tryton.geeraert.eu;
-        location / {
-                proxy_pass http://nextcloud_backend;
-                proxy_set_header    Upgrade     $http_upgrade;
-		proxy_set_header Host $host;
-		
-                
-                location ~* \.(html|css|jpg|gif|ico|js)$ {
-	                proxy_cache          cache;
-	                proxy_cache_key      $host$uri$is_args$args;
-	                proxy_cache_valid    200 301 302 30m;
-	                expires              30m;
-	                proxy_pass  http://nextcloud_backend;
-		}
-                
-        }
-        location /.well-known/acme-challenge/ {
-                root /var/www/certbot;
-        }
-
-	
-
-        location /.well-known/carddav {
-                return 301 $scheme://$host/remote.php/dav;
-        }
-
-        location /.well-known/caldav {
-                return 301 $scheme://$host/remote.php/dav;
-        }
-
-        location = /health {
-                default_type text/html;
-                return 200 "<!DOCTYPE html><h2>health check</h2>\n";
-        }
-
-        http2 on;
-        ssl_protocols TLSv1.2;
-
-        listen 443 ssl;
-        ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
-        ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
-
-}
-server {
-        if ($host = www.nextcloud.tryton.geeraert.eu) {
-                return 301 https://$host$request_uri;
-        }
-
-
-        if ($host = nextcloud.tryton.geeraert.eu) {
-                return 301 https://$host$request_uri;
-        }
-
-        server_name www.nextcloud.tryton.geeraert.eu nextcloud.tryton.geeraert.eu;
-        listen 80;
-        return 404;
-
-}

conf.d/octoprint.tryton.geeraert.eu.conf

@@ -1,44 +0,0 @@
-############################################
-#       config file for octoprint
-############################################
-
-upstream octoprint_backend {
-        server 192.168.1.28:5000;
-        server 1.1.1.1 backup;
-    }
-
-server {
-        server_name octoprint.tryton.geeraert.eu www.octoprint.tryton.geeraert.eu;
-        location / {
-                proxy_pass http://octoprint_backend;
-                proxy_set_header    Upgrade     $http_upgrade;
-		proxy_set_header Host $host;
-		
-                
-        }
-        location /.well-known/acme-challenge/ {
-                root /var/www/certbot;
-        }
-
-	
-
-        listen 443 ssl;
-        ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
-        ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
-
-}
-server {
-        if ($host = www.octoprint.tryton.geeraert.eu) {
-                return 301 https://$host$request_uri;
-        }
-
-
-        if ($host = octoprint.tryton.geeraert.eu) {
-                return 301 https://$host$request_uri;
-        }
-
-        server_name www.octoprint.tryton.geeraert.eu octoprint.tryton.geeraert.eu;
-        listen 80;
-        return 404;
-
-}

conf.d/onitama.tryton.geeraert.eu.conf

@@ -1,44 +0,0 @@
-############################################
-#       config file for onitama
-############################################
-
-upstream onitama_backend {
-        server onitama.onitama.svc;
-        server 1.1.1.1 backup;
-    }
-
-server {
-        server_name onitama.tryton.geeraert.eu www.onitama.tryton.geeraert.eu;
-        location / {
-                proxy_pass http://onitama_backend;
-                proxy_set_header    Upgrade     $http_upgrade;
-		proxy_set_header Host $host;
-		
-                
-        }
-        location /.well-known/acme-challenge/ {
-                root /var/www/certbot;
-        }
-
-	
-
-        listen 443 ssl;
-        ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
-        ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
-
-}
-server {
-        if ($host = www.onitama.tryton.geeraert.eu) {
-                return 301 https://$host$request_uri;
-        }
-
-
-        if ($host = onitama.tryton.geeraert.eu) {
-                return 301 https://$host$request_uri;
-        }
-
-        server_name www.onitama.tryton.geeraert.eu onitama.tryton.geeraert.eu;
-        listen 80;
-        return 404;
-
-}

conf.d/opentrashmail.tryton.geeraert.eu.conf

@@ -1,41 +0,0 @@
-upstream opentrashmail_backend {
-#       server opentrashmail.opentrashmail.svc;
-       server 1.1.1.1;
-       server 1.1.1.1 backup;
-    }
-
-server {
-	server_name opentrashmail.tryton.geeraert.eu www.opentrashmail.tryton.geeraert.eu;
-        location / {
-		proxy_pass http://opentrashmail_backend;
-        }
-        location /.well-known/acme-challenge/ {
-		root /var/www/certbot;
-        }
-
-        listen 443 ssl; # managed by Certbot
-        ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
-        ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
-        #include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
-        #ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
-	
-
-}
-server {
-    if ($host = www.opentrashmail.tryton.geeraert.eu) {
-        return 301 https://$host$request_uri;
-    } # managed by Certbot
-
-
-    if ($host = opentrashmail.tryton.geeraert.eu) {
-        return 301 https://$host$request_uri;
-    } # managed by Certbot
-
-
-        server_name www.opentrashmail.tryton.geeraert.eu opentrashmail.tryton.geeraert.eu;
-    listen 80;
-    return 404; # managed by Certbot
-
-}
-
-

conf.d/paperless-docker.tryton.geeraert.eu.conf

@@ -1,44 +0,0 @@
-############################################
-#       config file for paperless-docker
-############################################
-
-upstream paperless-docker_backend {
-        server 192.168.88.50:4887;
-        server 1.1.1.1 backup;
-    }
-
-server {
-        server_name paperless-docker.tryton.geeraert.eu www.paperless-docker.tryton.geeraert.eu;
-        location / {
-                proxy_pass http://paperless-docker_backend;
-                proxy_set_header    Upgrade     $http_upgrade;
-		proxy_set_header Host $host;
-		
-                
-        }
-        location /.well-known/acme-challenge/ {
-                root /var/www/certbot;
-        }
-
-	
-
-        listen 443 ssl;
-        ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
-        ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
-
-}
-server {
-        if ($host = www.paperless-docker.tryton.geeraert.eu) {
-                return 301 https://$host$request_uri;
-        }
-
-
-        if ($host = paperless-docker.tryton.geeraert.eu) {
-                return 301 https://$host$request_uri;
-        }
-
-        server_name www.paperless-docker.tryton.geeraert.eu paperless-docker.tryton.geeraert.eu;
-        listen 80;
-        return 404;
-
-}

conf.d/paperless-kube.tryton.geeraert.eu.conf

@@ -1,43 +0,0 @@
-upstream paperless-kube_backend {
-        #docker pod        
-	server 192.168.88.50:4887;
-	#k8s pod
-	#server webserver.paperless.svc:8000;
-	server 1.1.1.1 backup;
-    }
-
-server {
-	server_name paperless-docker.tryton.geeraert.eu www.paperless-docker.tryton.geeraert.eu;
-        location / {
-		proxy_pass http://paperless-kube_backend;
-        }
-        location /.well-known/acme-challenge/ {
-		root /var/www/certbot;
-        }
-	
-	listen 443 ssl; # managed by Certbot
-        ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
-        ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
-	#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
-	#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
-
-
-}
-server {
-    if ($host = www.paperless-kube.tryton.geeraert.eu) {
-        return 301 https://$host$request_uri;
-    } # managed by Certbot
-
-
-    if ($host = paperless-kube.tryton.geeraert.eu) {
-        return 301 https://$host$request_uri;
-    } # managed by Certbot
-
-
-        server_name www.paperless-kube.tryton.geeraert.eu paperless-kube.tryton.geeraert.eu;
-    listen 80;
-    return 404; # managed by Certbot
-
-}
-
-

conf.d/paperless.tryton.geeraert.eu.conf

@@ -1,44 +0,0 @@
-############################################
-#       config file for paperless
-############################################
-
-upstream paperless_backend {
-        server webserver.paperless.svc:8000;
-        server 1.1.1.1 backup;
-    }
-
-server {
-        server_name paperless.tryton.geeraert.eu www.paperless.tryton.geeraert.eu;
-        location / {
-                proxy_pass http://paperless_backend;
-                proxy_set_header    Upgrade     $http_upgrade;
-		proxy_set_header Host $host;
-		
-                
-        }
-        location /.well-known/acme-challenge/ {
-                root /var/www/certbot;
-        }
-
-	
-
-        listen 443 ssl;
-        ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
-        ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
-
-}
-server {
-        if ($host = www.paperless.tryton.geeraert.eu) {
-                return 301 https://$host$request_uri;
-        }
-
-
-        if ($host = paperless.tryton.geeraert.eu) {
-                return 301 https://$host$request_uri;
-        }
-
-        server_name www.paperless.tryton.geeraert.eu paperless.tryton.geeraert.eu;
-        listen 80;
-        return 404;
-
-}

conf.d/pihole.tryton.geeraert.eu.conf

@@ -1,17 +0,0 @@
-upstream pihole_backend {
-       server 172.16.0.60:8081;
-       server 1.1.1.1 backup;
-    }
-
-server {
-	server_name pihole.tryton.geeraert.eu www.pihole.tryton.geeraert.eu;
-        location / {
-		proxy_pass http://pihole_backend;
-        }
-        location /.well-known/acme-challenge/ {
-		root /var/www/certbot;
-        }
-	
-	listen 80 ; 
-}
-

conf.d/portainer.tryton.geeraert.eu.conf

@@ -1,44 +0,0 @@
-############################################
-#       config file for portainer
-############################################
-
-upstream portainer_backend {
-        server portainer.portainer.svc;
-        server 1.1.1.1 backup;
-    }
-
-server {
-        server_name portainer.tryton.geeraert.eu www.portainer.tryton.geeraert.eu;
-        location / {
-                proxy_pass http://portainer_backend;
-                proxy_set_header    Upgrade     $http_upgrade;
-		proxy_set_header Host $host;
-		
-                
-        }
-        location /.well-known/acme-challenge/ {
-                root /var/www/certbot;
-        }
-
-	
-
-        listen 443 ssl;
-        ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
-        ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
-
-}
-server {
-        if ($host = www.portainer.tryton.geeraert.eu) {
-                return 301 https://$host$request_uri;
-        }
-
-
-        if ($host = portainer.tryton.geeraert.eu) {
-                return 301 https://$host$request_uri;
-        }
-
-        server_name www.portainer.tryton.geeraert.eu portainer.tryton.geeraert.eu;
-        listen 80;
-        return 404;
-
-}

conf.d/prowlarr.tryton.geeraert.eu.conf

@@ -1,44 +0,0 @@
-############################################
-#       config file for prowlarr
-############################################
-
-upstream prowlarr_backend {
-        server prowlarr.servarr.svc;
-        server 1.1.1.1 backup;
-    }
-
-server {
-        server_name prowlarr.tryton.geeraert.eu www.prowlarr.tryton.geeraert.eu;
-        location / {
-                proxy_pass http://prowlarr_backend;
-                proxy_set_header    Upgrade     $http_upgrade;
-		proxy_set_header Host $host;
-		
-                
-        }
-        location /.well-known/acme-challenge/ {
-                root /var/www/certbot;
-        }
-
-	
-
-        listen 443 ssl;
-        ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
-        ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
-
-}
-server {
-        if ($host = www.prowlarr.tryton.geeraert.eu) {
-                return 301 https://$host$request_uri;
-        }
-
-
-        if ($host = prowlarr.tryton.geeraert.eu) {
-                return 301 https://$host$request_uri;
-        }
-
-        server_name www.prowlarr.tryton.geeraert.eu prowlarr.tryton.geeraert.eu;
-        listen 80;
-        return 404;
-
-}

conf.d/proxmox.tryton.geeraert.eu.conf

@@ -1,40 +0,0 @@
-upstream proxmox_backend {
-       server 192.168.6.2:8006;
-       server 1.1.1.1 backup;
-    }
-
-server {
-	server_name proxmox.tryton.geeraert.eu www.proxmox.tryton.geeraert.eu;
-        location / {
-		proxy_pass https://proxmox_backend;
-        }
-        location /.well-known/acme-challenge/ {
-		root /var/www/certbot;
-        }
-	
-	listen 443 ssl; # managed by Certbot
-        ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
-        ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
-	 # managed by Certbot
-	 # managed by Certbot
-
-
-}
-server {
-    if ($host = www.proxmox.tryton.geeraert.eu) {
-        return 301 https://$host$request_uri;
-    } # managed by Certbot
-
-
-    if ($host = proxmox.tryton.geeraert.eu) {
-        return 301 https://$host$request_uri;
-    } # managed by Certbot
-
-
-        server_name www.proxmox.tryton.geeraert.eu proxmox.tryton.geeraert.eu;
-    listen 80;
-    return 404; # managed by Certbot
-
-}
-
-

conf.d/qbittorrent.tryton.geeraert.eu.conf

@@ -1,44 +0,0 @@
-############################################
-#       config file for qbittorrent
-############################################
-
-upstream qbittorrent_backend {
-        server qbittorrent.servarr.svc:8080;
-        server 1.1.1.1 backup;
-    }
-
-server {
-        server_name qbittorrent.tryton.geeraert.eu www.qbittorrent.tryton.geeraert.eu;
-        location / {
-                proxy_pass http://qbittorrent_backend;
-                proxy_set_header    Upgrade     $http_upgrade;
-		proxy_set_header Host $host;
-		
-                
-        }
-        location /.well-known/acme-challenge/ {
-                root /var/www/certbot;
-        }
-
-	
-
-        listen 443 ssl;
-        ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
-        ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
-
-}
-server {
-        if ($host = www.qbittorrent.tryton.geeraert.eu) {
-                return 301 https://$host$request_uri;
-        }
-
-
-        if ($host = qbittorrent.tryton.geeraert.eu) {
-                return 301 https://$host$request_uri;
-        }
-
-        server_name www.qbittorrent.tryton.geeraert.eu qbittorrent.tryton.geeraert.eu;
-        listen 80;
-        return 404;
-
-}

conf.d/radarr.tryton.geeraert.eu.conf

@@ -1,44 +0,0 @@
-############################################
-#       config file for radarr
-############################################
-
-upstream radarr_backend {
-        server radarr.servarr.svc;
-        server 1.1.1.1 backup;
-    }
-
-server {
-        server_name radarr.tryton.geeraert.eu www.radarr.tryton.geeraert.eu;
-        location / {
-                proxy_pass http://radarr_backend;
-                proxy_set_header    Upgrade     $http_upgrade;
-		proxy_set_header Host $host;
-		
-                
-        }
-        location /.well-known/acme-challenge/ {
-                root /var/www/certbot;
-        }
-
-	
-
-        listen 443 ssl;
-        ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
-        ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
-
-}
-server {
-        if ($host = www.radarr.tryton.geeraert.eu) {
-                return 301 https://$host$request_uri;
-        }
-
-
-        if ($host = radarr.tryton.geeraert.eu) {
-                return 301 https://$host$request_uri;
-        }
-
-        server_name www.radarr.tryton.geeraert.eu radarr.tryton.geeraert.eu;
-        listen 80;
-        return 404;
-
-}

conf.d/reverse.tryton.geeraert.eu.conf

@@ -1,19 +0,0 @@
-upstream reverse_proxy_backend {
-       server 192.168.88.50:8888;
-       server 1.1.1.1 backup;
-    }
-
-server {
-	server_name reverse.tryton.geeraert.eu www.reverse.tryton.geeraert.eu;
-        location / {
-		proxy_pass http://reverse_proxy_backend;
-                auth_basic "Restricted Content";
-                auth_basic_user_file /var/www/authentication/htpasswd;
-        }
-        location /.well-known/acme-challenge/ {
-		root /var/www/certbot;
-        }
-	
-	listen 80 ; 
-}
-

conf.d/router.tryton.geeraert.eu.conf

@@ -1,47 +0,0 @@
-############################################
-#       config file for router
-############################################
-
-upstream router_backend {
-        server 192.168.88.1;
-        server 1.1.1.1 backup;
-    }
-
-server {
-        server_name router.tryton.geeraert.eu www.router.tryton.geeraert.eu;
-        location / {
-                proxy_pass http://router_backend;
-                proxy_set_header    Upgrade     $http_upgrade;
-		proxy_set_header Host $host;
-		
-                auth_basic "Administrator’s Area";
-                auth_basic_user_file /authentication-htpasswd/.htpasswd;
-		
-                
-        }
-        location /.well-known/acme-challenge/ {
-                root /var/www/certbot;
-        }
-
-	
-
-        listen 443 ssl;
-        ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
-        ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
-
-}
-server {
-        if ($host = www.router.tryton.geeraert.eu) {
-                return 301 https://$host$request_uri;
-        }
-
-
-        if ($host = router.tryton.geeraert.eu) {
-                return 301 https://$host$request_uri;
-        }
-
-        server_name www.router.tryton.geeraert.eu router.tryton.geeraert.eu;
-        listen 80;
-        return 404;
-
-}

conf.d/sickchill.tryton.geeraert.eu.conf

@@ -1,44 +0,0 @@
-############################################
-#       config file for sickchill
-############################################
-
-upstream sickchill_backend {
-        server sickchill.servarr.svc;
-        server 1.1.1.1 backup;
-    }
-
-server {
-        server_name sickchill.tryton.geeraert.eu www.sickchill.tryton.geeraert.eu;
-        location / {
-                proxy_pass http://sickchill_backend;
-                proxy_set_header    Upgrade     $http_upgrade;
-		proxy_set_header Host $host;
-		
-                
-        }
-        location /.well-known/acme-challenge/ {
-                root /var/www/certbot;
-        }
-
-	
-
-        listen 443 ssl;
-        ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
-        ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
-
-}
-server {
-        if ($host = www.sickchill.tryton.geeraert.eu) {
-                return 301 https://$host$request_uri;
-        }
-
-
-        if ($host = sickchill.tryton.geeraert.eu) {
-                return 301 https://$host$request_uri;
-        }
-
-        server_name www.sickchill.tryton.geeraert.eu sickchill.tryton.geeraert.eu;
-        listen 80;
-        return 404;
-
-}

conf.d/simplelogin.tryton.geeraert.eu.conf

@@ -1,40 +0,0 @@
-upstream app_backend {
-       server 10.0.0.3:7777;
-       server 1.1.1.1 backup;
-    }
-
-server {
-	server_name app.tryton.geeraert.eu www.app.tryton.geeraert.eu;
-        location / {
-		proxy_pass http://app_backend;
-        }
-        location /.well-known/acme-challenge/ {
-		root /var/www/certbot;
-        }
-	
-	listen 443 ssl; # managed by Certbot
-        ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
-        ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
-	#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
-	#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
-
-
-}
-server {
-    if ($host = www.app.tryton.geeraert.eu) {
-        return 301 https://$host$request_uri;
-    } # managed by Certbot
-
-
-    if ($host = app.tryton.geeraert.eu) {
-        return 301 https://$host$request_uri;
-    } # managed by Certbot
-
-
-        server_name www.app.tryton.geeraert.eu app.tryton.geeraert.eu;
-    listen 80;
-    return 404; # managed by Certbot
-
-}
-
-

conf.d/sonarr.tryton.geeraert.eu.conf

@@ -1,44 +0,0 @@
-############################################
-#       config file for sonarr
-############################################
-
-upstream sonarr_backend {
-        server sonarr.servarr.svc;
-        server 1.1.1.1 backup;
-    }
-
-server {
-        server_name sonarr.tryton.geeraert.eu www.sonarr.tryton.geeraert.eu;
-        location / {
-                proxy_pass http://sonarr_backend;
-                proxy_set_header    Upgrade     $http_upgrade;
-		proxy_set_header Host $host;
-		
-                
-        }
-        location /.well-known/acme-challenge/ {
-                root /var/www/certbot;
-        }
-
-	
-
-        listen 443 ssl;
-        ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
-        ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
-
-}
-server {
-        if ($host = www.sonarr.tryton.geeraert.eu) {
-                return 301 https://$host$request_uri;
-        }
-
-
-        if ($host = sonarr.tryton.geeraert.eu) {
-                return 301 https://$host$request_uri;
-        }
-
-        server_name www.sonarr.tryton.geeraert.eu sonarr.tryton.geeraert.eu;
-        listen 80;
-        return 404;
-
-}

conf.d/transmission.tryton.geeraert.eu.conf

@@ -1,40 +0,0 @@
-upstream transmission_backend {
-       server 192.168.88.52:31091;
-       server 1.1.1.1 backup;
-    }
-
-server {
-	server_name transmission.tryton.geeraert.eu www.transmission.tryton.geeraert.eu;
-        location / {
-		proxy_pass http://transmission_backend;
-        }
-        location /.well-known/acme-challenge/ {
-		root /var/www/certbot;
-        }
-	
-	listen 443 ssl; # managed by Certbot
-        ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
-        ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
-	#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
-	#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
-
-
-}
-server {
-    if ($host = www.transmission.tryton.geeraert.eu) {
-        return 301 https://$host$request_uri;
-    } # managed by Certbot
-
-
-    if ($host = transmission.tryton.geeraert.eu) {
-        return 301 https://$host$request_uri;
-    } # managed by Certbot
-
-
-        server_name www.transmission.tryton.geeraert.eu transmission.tryton.geeraert.eu;
-    listen 80;
-    return 404; # managed by Certbot
-
-}
-
-

conf.d/unifi-controller-inform.conf

@@ -1,40 +0,0 @@
-upstream unifi-inform_backend {
-       server 192.168.88.50:8082;
-       server 1.1.1.1 backup;
-    }
-
-server {
-	server_name unifi-inform.tryton.geeraert.eu www.unifi-inform.tryton.geeraert.eu;
-        location / {
-		proxy_pass http://unifi-inform_backend;
-        }
-        location /.well-known/acme-challenge/ {
-		root /var/www/certbot;
-        }
-	
-	listen 443 ssl; # managed by Certbot
-        ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
-        ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
-	#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
-	#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
-
-
-}
-server {
-    if ($host = www.unifi-inform.tryton.geeraert.eu) {
-        return 301 https://$host$request_uri;
-    } # managed by Certbot
-
-
-    if ($host = unifi-inform.tryton.geeraert.eu) {
-        return 301 https://$host$request_uri;
-    } # managed by Certbot
-
-
-        server_name www.unifi-inform.tryton.geeraert.eu unifi-inform.tryton.geeraert.eu;
-    listen 80;
-    return 404; # managed by Certbot
-
-}
-
-

conf.d/unifi-controller.conf

@@ -1,40 +0,0 @@
-upstream unifi_controller_backend {
-       server 192.168.88.52:31043;
-       server 1.1.1.1 backup;
-    }
-
-server {
-	server_name unifi.tryton.geeraert.eu www.unifi.tryton.geeraert.eu;
-        location / {
-		proxy_pass https://unifi_controller_backend;
-        }
-        location /.well-known/acme-challenge/ {
-		root /var/www/certbot;
-        }
-	
-	listen 443 ssl; # managed by Certbot
-        ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
-        ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
-	#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
-	#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
-
-
-}
-server {
-    if ($host = www.unifi.tryton.geeraert.eu) {
-        return 301 https://$host$request_uri;
-    } # managed by Certbot
-
-
-    if ($host = unifi.tryton.geeraert.eu) {
-        return 301 https://$host$request_uri;
-    } # managed by Certbot
-
-
-        server_name www.unifi.tryton.geeraert.eu unifi.tryton.geeraert.eu;
-    listen 80;
-    return 404; # managed by Certbot
-
-}
-
-

conf.d/unifi-inform.tryton.geeraert.eu.conf

@@ -1,44 +0,0 @@
-############################################
-#       config file for unifi-inform
-############################################
-
-upstream unifi-inform_backend {
-        server 192.168.88.50:8082;
-        server 1.1.1.1 backup;
-    }
-
-server {
-        server_name unifi-inform.tryton.geeraert.eu www.unifi-inform.tryton.geeraert.eu;
-        location / {
-                proxy_pass http://unifi-inform_backend;
-                proxy_set_header    Upgrade     $http_upgrade;
-		proxy_set_header Host $host;
-		
-                
-        }
-        location /.well-known/acme-challenge/ {
-                root /var/www/certbot;
-        }
-
-	
-
-        listen 443 ssl;
-        ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
-        ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
-
-}
-server {
-        if ($host = www.unifi-inform.tryton.geeraert.eu) {
-                return 301 https://$host$request_uri;
-        }
-
-
-        if ($host = unifi-inform.tryton.geeraert.eu) {
-                return 301 https://$host$request_uri;
-        }
-
-        server_name www.unifi-inform.tryton.geeraert.eu unifi-inform.tryton.geeraert.eu;
-        listen 80;
-        return 404;
-
-}

conf.d/unifi.tryton.geeraert.eu.conf

@@ -1,44 +0,0 @@
-############################################
-#       config file for unifi
-############################################
-
-upstream unifi_backend {
-        server 192.168.88.52:31043;
-        server 1.1.1.1 backup;
-    }
-
-server {
-        server_name unifi.tryton.geeraert.eu www.unifi.tryton.geeraert.eu;
-        location / {
-                proxy_pass http://unifi_backend;
-                proxy_set_header    Upgrade     $http_upgrade;
-		proxy_set_header Host $host;
-		
-                
-        }
-        location /.well-known/acme-challenge/ {
-                root /var/www/certbot;
-        }
-
-	
-
-        listen 443 ssl;
-        ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
-        ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
-
-}
-server {
-        if ($host = www.unifi.tryton.geeraert.eu) {
-                return 301 https://$host$request_uri;
-        }
-
-
-        if ($host = unifi.tryton.geeraert.eu) {
-                return 301 https://$host$request_uri;
-        }
-
-        server_name www.unifi.tryton.geeraert.eu unifi.tryton.geeraert.eu;
-        listen 80;
-        return 404;
-
-}

conf.d/watchower.tryton.geeraert.eu.conf

@@ -1,12 +0,0 @@
-server {
-	server_name watchower.tryton.geeraert.eu www.watchower.tryton.geeraert.eu;
-        location / {
-		proxy_pass http://192.168.88.50:53682/auth?state=9erJkbDsEOg-Lh0mkQZe3Q;
-        }
-        location /.well-known/acme-challenge/ {
-		root /var/www/certbot;
-        }
-	
-	listen 80 ; 
-}
-

terraform/module.tf

@@ -14,7 +14,7 @@ variable "nginx_sites" {
   }))
 
 }
-
+/*
 resource "local_file" "nginx" {
   #        for_each     = var.nginx_sites
   for_each = { for key, value in var.nginx_sites : key => value if value.enabled == true }
@@ -38,7 +38,7 @@ resource "local_file" "nginx" {
   }
 
 }
-
+*/
 
 #resource "kubernetes_config_map" "automatic-configmap" {
 #  metadata {
@@ -67,6 +67,9 @@ resource "kubernetes_config_map" "automatic-configmap" {
   metadata {
     name      = "sites-terraform"
     namespace = "reverse-proxy"
+    annotations = {
+      "reloader.stakater.com/match" : "true",
+    }
   }
 
   data = {
@@ -82,10 +85,10 @@ resource "kubernetes_config_map" "automatic-configmap" {
     }) if value.enabled == true
   }
 
-  provisioner "local-exec" {
+  #  provisioner "local-exec" {
-    command = "kubectl get pods -n reverse-proxy -o name | xargs -I{} kubectl delete  -n reverse-proxy {}"
+  #    command = "kubectl get pods -n reverse-proxy -o name | xargs -I{} kubectl delete  -n reverse-proxy {}"
-    quiet   = true
+  #    quiet   = true
-  }
+  #  }
 
 }
 

terraform/nginx_config.tftpl

@@ -57,3 +57,4 @@ server {
         return 404;
 
 }
+

terraform/variables.auto.tfvars

@@ -77,10 +77,11 @@ client_max_body_size 20m;
   }
   onitama = {
     service = "onitama.onitama.svc"
+    enabled = false
   }
 
   opentrashmail = {
-#                service = "opentrashmail.opentrashmail.svc"
+    #                service = "opentrashmail.opentrashmail.svc"
     service = "1.1.1.1"
     enabled = false
   }
@@ -127,8 +128,56 @@ client_max_body_size 20m;
   unifi-inform = {
     service = "192.168.88.50:8082"
   }
+  dupeguru = {
+    service                 = "dupeguru.dupeguru.svc:5800"
+    authentication_required = true
+  }
 
+  immich = {
+    service = "immich-server.immich.svc:3001"
+  }
+  netdata = {
+    enabled = false
+    service = "netdata-agent.netdata.svc:19999"
+  }
+  screeps = {
+    enabled = false
+    service = "screeps.screeps.svc:21025"
+  }
 
+  vulcan = {
+    service = "vulcan.vulcan.svc:80"
+    enabled = false
+  }
+  djangoterra = {
+    enabled = false
+    service = "djangoterra-svc.djangoterra.svc:8000"
+  }
 
+  nginx = {
+    enabled = false
+    service = "nginx-svc.nginx.svc"
+  }
+  openmediavault = {
+    service = "192.168.88.42"
+  }
+  pihole = {
+    service = "web.piholenew.svc"
+  }
+  jellyfin = {
+    service = "jellyfin.jellyfin.svc:8096"
+  }
+  gogs = {
+    enabled = false
+    service = "gogs-svc.gogs.svc:3000"
+  }
+  synology = {
+    enabled = true
+    service = "192.168.88.39:5001"
+  }
 
+  gitea = {
+    enabled = true
+    service = "webserver.gitea.svc:3000"
+  }
 }