Compare commits
2
Commits
| Author | SHA1 | Date | |
|---|---|---|---|
 pi-ux-ce
|
786b1d56c0 | ||
|
pi-ux-ce
|
700d508c8d |
@@ -1,46 +0,0 @@
|
||||
############################################
|
||||
# config file for bitwarden
|
||||
############################################
|
||||
|
||||
upstream bitwarden_backend {
|
||||
server nginx.bitwarden.svc:8080;
|
||||
server 1.1.1.1 backup;
|
||||
}
|
||||
|
||||
server {
|
||||
server_name bitwarden.tryton.geeraert.eu www.bitwarden.tryton.geeraert.eu;
|
||||
location / {
|
||||
proxy_pass http://bitwarden_backend;
|
||||
proxy_set_header Upgrade $http_upgrade;
|
||||
proxy_set_header Host $host;
|
||||
|
||||
|
||||
}
|
||||
location /.well-known/acme-challenge/ {
|
||||
root /var/www/certbot;
|
||||
}
|
||||
|
||||
|
||||
http2 on;
|
||||
ssl_protocols TLSv1.2;
|
||||
|
||||
listen 443 ssl;
|
||||
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
|
||||
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
|
||||
|
||||
}
|
||||
server {
|
||||
if ($host = www.bitwarden.tryton.geeraert.eu) {
|
||||
return 301 https://$host$request_uri;
|
||||
}
|
||||
|
||||
|
||||
if ($host = bitwarden.tryton.geeraert.eu) {
|
||||
return 301 https://$host$request_uri;
|
||||
}
|
||||
|
||||
server_name www.bitwarden.tryton.geeraert.eu bitwarden.tryton.geeraert.eu;
|
||||
listen 80;
|
||||
return 404;
|
||||
|
||||
}
|
||||
@@ -1,44 +0,0 @@
|
||||
############################################
|
||||
# config file for bookstack
|
||||
############################################
|
||||
|
||||
upstream bookstack_backend {
|
||||
server webserver.bookstack.svc;
|
||||
server 1.1.1.1 backup;
|
||||
}
|
||||
|
||||
server {
|
||||
server_name bookstack.tryton.geeraert.eu www.bookstack.tryton.geeraert.eu;
|
||||
location / {
|
||||
proxy_pass http://bookstack_backend;
|
||||
proxy_set_header Upgrade $http_upgrade;
|
||||
proxy_set_header Host $host;
|
||||
|
||||
|
||||
}
|
||||
location /.well-known/acme-challenge/ {
|
||||
root /var/www/certbot;
|
||||
}
|
||||
|
||||
|
||||
|
||||
listen 443 ssl;
|
||||
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
|
||||
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
|
||||
|
||||
}
|
||||
server {
|
||||
if ($host = www.bookstack.tryton.geeraert.eu) {
|
||||
return 301 https://$host$request_uri;
|
||||
}
|
||||
|
||||
|
||||
if ($host = bookstack.tryton.geeraert.eu) {
|
||||
return 301 https://$host$request_uri;
|
||||
}
|
||||
|
||||
server_name www.bookstack.tryton.geeraert.eu bookstack.tryton.geeraert.eu;
|
||||
listen 80;
|
||||
return 404;
|
||||
|
||||
}
|
||||
@@ -1 +0,0 @@
|
||||
|
||||
@@ -1,54 +0,0 @@
|
||||
############################################
|
||||
# config file for django
|
||||
############################################
|
||||
|
||||
upstream django_backend {
|
||||
server webserver.django-python.svc:8000;
|
||||
server 1.1.1.1 backup;
|
||||
}
|
||||
|
||||
server {
|
||||
server_name django.tryton.geeraert.eu www.django.tryton.geeraert.eu;
|
||||
location / {
|
||||
proxy_pass http://django_backend;
|
||||
proxy_set_header Upgrade $http_upgrade;
|
||||
proxy_set_header Host $host;
|
||||
|
||||
|
||||
location ~* \.(html|css|jpg|gif|ico|js)$ {
|
||||
proxy_cache cache;
|
||||
proxy_cache_key $host$uri$is_args$args;
|
||||
proxy_cache_valid 200 301 302 30m;
|
||||
expires 30m;
|
||||
proxy_pass http://django_backend;
|
||||
}
|
||||
|
||||
}
|
||||
location /.well-known/acme-challenge/ {
|
||||
root /var/www/certbot;
|
||||
}
|
||||
|
||||
|
||||
http2 on;
|
||||
ssl_protocols TLSv1.2;
|
||||
|
||||
listen 443 ssl;
|
||||
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
|
||||
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
|
||||
|
||||
}
|
||||
server {
|
||||
if ($host = www.django.tryton.geeraert.eu) {
|
||||
return 301 https://$host$request_uri;
|
||||
}
|
||||
|
||||
|
||||
if ($host = django.tryton.geeraert.eu) {
|
||||
return 301 https://$host$request_uri;
|
||||
}
|
||||
|
||||
server_name www.django.tryton.geeraert.eu django.tryton.geeraert.eu;
|
||||
listen 80;
|
||||
return 404;
|
||||
|
||||
}
|
||||
@@ -1,54 +0,0 @@
|
||||
############################################
|
||||
# config file for echo
|
||||
############################################
|
||||
|
||||
upstream echo_backend {
|
||||
server echo-server.echo-server.svc:80;
|
||||
server 1.1.1.1 backup;
|
||||
}
|
||||
|
||||
server {
|
||||
server_name echo.tryton.geeraert.eu www.echo.tryton.geeraert.eu;
|
||||
location / {
|
||||
proxy_pass http://echo_backend;
|
||||
proxy_set_header Upgrade $http_upgrade;
|
||||
proxy_set_header Host $host;
|
||||
|
||||
|
||||
location ~* \.(html|css|jpg|gif|ico|js)$ {
|
||||
proxy_cache cache;
|
||||
proxy_cache_key $host$uri$is_args$args;
|
||||
proxy_cache_valid 200 301 302 30m;
|
||||
expires 30m;
|
||||
proxy_pass http://echo_backend;
|
||||
}
|
||||
|
||||
}
|
||||
location /.well-known/acme-challenge/ {
|
||||
root /var/www/certbot;
|
||||
}
|
||||
|
||||
|
||||
http2 on;
|
||||
ssl_protocols TLSv1.2;
|
||||
|
||||
listen 443 ssl;
|
||||
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
|
||||
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
|
||||
|
||||
}
|
||||
server {
|
||||
if ($host = www.echo.tryton.geeraert.eu) {
|
||||
return 301 https://$host$request_uri;
|
||||
}
|
||||
|
||||
|
||||
if ($host = echo.tryton.geeraert.eu) {
|
||||
return 301 https://$host$request_uri;
|
||||
}
|
||||
|
||||
server_name www.echo.tryton.geeraert.eu echo.tryton.geeraert.eu;
|
||||
listen 80;
|
||||
return 404;
|
||||
|
||||
}
|
||||
@@ -1,17 +0,0 @@
|
||||
upstream esp-home_backend {
|
||||
server 192.168.88.50:6052;
|
||||
server 1.1.1.1 backup;
|
||||
}
|
||||
|
||||
server {
|
||||
server_name esp-home.tryton.geeraert.eu www.esp-home.tryton.geeraert.eu;
|
||||
location / {
|
||||
proxy_pass http://esp-home_backend;
|
||||
}
|
||||
location /.well-known/acme-challenge/ {
|
||||
root /var/www/certbot;
|
||||
}
|
||||
|
||||
listen 80 ;
|
||||
}
|
||||
|
||||
@@ -1,48 +0,0 @@
|
||||
map $http_upgrade $connection_upgrade {
|
||||
default upgrade;
|
||||
'' close;
|
||||
}
|
||||
upstream firefox_backend {
|
||||
server 192.168.88.52:32487;
|
||||
server 1.1.1.1 backup;
|
||||
}
|
||||
|
||||
server {
|
||||
server_name firefox.tryton.geeraert.eu www.firefox.tryton.geeraert.eu;
|
||||
location / {
|
||||
proxy_pass https://firefox_backend;
|
||||
proxy_http_version 1.1;
|
||||
proxy_set_header Upgrade $http_upgrade;
|
||||
proxy_set_header Connection $connection_upgrade;
|
||||
proxy_set_header Host $host;
|
||||
}
|
||||
location /.well-known/acme-challenge/ {
|
||||
root /var/www/certbot;
|
||||
}
|
||||
|
||||
listen 443 ssl; # managed by Certbot
|
||||
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
|
||||
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
|
||||
#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
|
||||
#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
|
||||
|
||||
|
||||
}
|
||||
server {
|
||||
if ($host = www.firefox.tryton.geeraert.eu) {
|
||||
return 301 https://$host$request_uri;
|
||||
} # managed by Certbot
|
||||
|
||||
|
||||
if ($host = firefox.tryton.geeraert.eu) {
|
||||
return 301 https://$host$request_uri;
|
||||
} # managed by Certbot
|
||||
|
||||
|
||||
server_name www.firefox.tryton.geeraert.eu firefox.tryton.geeraert.eu;
|
||||
listen 80;
|
||||
return 404; # managed by Certbot
|
||||
|
||||
}
|
||||
|
||||
|
||||
@@ -1,56 +0,0 @@
|
||||
############################################
|
||||
# config file for gitlab
|
||||
############################################
|
||||
|
||||
upstream gitlab_backend {
|
||||
server webserver.gitlab.svc:443;
|
||||
server 1.1.1.1 backup;
|
||||
}
|
||||
|
||||
server {
|
||||
server_name gitlab.tryton.geeraert.eu www.gitlab.tryton.geeraert.eu;
|
||||
location / {
|
||||
proxy_pass https://gitlab_backend;
|
||||
proxy_set_header Upgrade $http_upgrade;
|
||||
proxy_set_header Host $host;
|
||||
|
||||
|
||||
location ~* \.(html|css|jpg|gif|ico|js)$ {
|
||||
proxy_cache cache;
|
||||
proxy_cache_key $host$uri$is_args$args;
|
||||
proxy_cache_valid 200 301 302 30m;
|
||||
expires 30m;
|
||||
proxy_pass https://gitlab_backend;
|
||||
}
|
||||
|
||||
}
|
||||
location /.well-known/acme-challenge/ {
|
||||
root /var/www/certbot;
|
||||
}
|
||||
|
||||
client_max_body_size 20m;
|
||||
proxy_request_buffering off;
|
||||
|
||||
http2 on;
|
||||
ssl_protocols TLSv1.2;
|
||||
|
||||
listen 443 ssl;
|
||||
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
|
||||
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
|
||||
|
||||
}
|
||||
server {
|
||||
if ($host = www.gitlab.tryton.geeraert.eu) {
|
||||
return 301 https://$host$request_uri;
|
||||
}
|
||||
|
||||
|
||||
if ($host = gitlab.tryton.geeraert.eu) {
|
||||
return 301 https://$host$request_uri;
|
||||
}
|
||||
|
||||
server_name www.gitlab.tryton.geeraert.eu gitlab.tryton.geeraert.eu;
|
||||
listen 80;
|
||||
return 404;
|
||||
|
||||
}
|
||||
@@ -1,44 +0,0 @@
|
||||
############################################
|
||||
# config file for homeassistant
|
||||
############################################
|
||||
|
||||
upstream homeassistant_backend {
|
||||
server homeassistant.homeassistant.svc:8123;
|
||||
server 1.1.1.1 backup;
|
||||
}
|
||||
|
||||
server {
|
||||
server_name homeassistant.tryton.geeraert.eu www.homeassistant.tryton.geeraert.eu;
|
||||
location / {
|
||||
proxy_pass http://homeassistant_backend;
|
||||
proxy_set_header Upgrade $http_upgrade;
|
||||
proxy_set_header Host $host;
|
||||
|
||||
|
||||
}
|
||||
location /.well-known/acme-challenge/ {
|
||||
root /var/www/certbot;
|
||||
}
|
||||
|
||||
|
||||
|
||||
listen 443 ssl;
|
||||
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
|
||||
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
|
||||
|
||||
}
|
||||
server {
|
||||
if ($host = www.homeassistant.tryton.geeraert.eu) {
|
||||
return 301 https://$host$request_uri;
|
||||
}
|
||||
|
||||
|
||||
if ($host = homeassistant.tryton.geeraert.eu) {
|
||||
return 301 https://$host$request_uri;
|
||||
}
|
||||
|
||||
server_name www.homeassistant.tryton.geeraert.eu homeassistant.tryton.geeraert.eu;
|
||||
listen 80;
|
||||
return 404;
|
||||
|
||||
}
|
||||
@@ -1,48 +0,0 @@
|
||||
############################################
|
||||
# config file for keycloak
|
||||
############################################
|
||||
|
||||
upstream keycloak_backend {
|
||||
server keycloak.keycloak.svc:8080;
|
||||
server 1.1.1.1 backup;
|
||||
}
|
||||
|
||||
server {
|
||||
server_name keycloak.tryton.geeraert.eu www.keycloak.tryton.geeraert.eu;
|
||||
location / {
|
||||
proxy_pass http://keycloak_backend;
|
||||
proxy_set_header Upgrade $http_upgrade;
|
||||
proxy_set_header Host $host;
|
||||
|
||||
|
||||
}
|
||||
location /.well-known/acme-challenge/ {
|
||||
root /var/www/certbot;
|
||||
}
|
||||
|
||||
|
||||
set_real_ip_from 0.0.0.0/0;
|
||||
real_ip_header X-Real-IP;
|
||||
real_ip_recursive on;
|
||||
|
||||
|
||||
listen 443 ssl;
|
||||
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
|
||||
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
|
||||
|
||||
}
|
||||
server {
|
||||
if ($host = www.keycloak.tryton.geeraert.eu) {
|
||||
return 301 https://$host$request_uri;
|
||||
}
|
||||
|
||||
|
||||
if ($host = keycloak.tryton.geeraert.eu) {
|
||||
return 301 https://$host$request_uri;
|
||||
}
|
||||
|
||||
server_name www.keycloak.tryton.geeraert.eu keycloak.tryton.geeraert.eu;
|
||||
listen 80;
|
||||
return 404;
|
||||
|
||||
}
|
||||
@@ -1,17 +0,0 @@
|
||||
upstream machinemanager_backend {
|
||||
server 192.168.88.50:9050;
|
||||
server 1.1.1.1 backup;
|
||||
}
|
||||
|
||||
server {
|
||||
server_name machinemanager.tryton.geeraert.eu www.machinemanager.tryton.geeraert.eu;
|
||||
location / {
|
||||
proxy_pass http://machinemanager_backend;
|
||||
}
|
||||
location /.well-known/acme-challenge/ {
|
||||
root /var/www/certbot;
|
||||
}
|
||||
|
||||
listen 80 ;
|
||||
}
|
||||
|
||||
@@ -1,17 +0,0 @@
|
||||
upstream mediawiki_backend {
|
||||
server 192.168.49.2:30002;
|
||||
server 1.1.1.1 backup;
|
||||
}
|
||||
|
||||
server {
|
||||
server_name mediawiki.tryton.geeraert.eu www.mediawiki.tryton.geeraert.eu;
|
||||
location / {
|
||||
proxy_pass http://mediawiki_backend;
|
||||
}
|
||||
location /.well-known/acme-challenge/ {
|
||||
root /var/www/certbot;
|
||||
}
|
||||
|
||||
listen 80 ;
|
||||
}
|
||||
|
||||
@@ -1,68 +0,0 @@
|
||||
############################################
|
||||
# config file for nextcloud
|
||||
############################################
|
||||
|
||||
upstream nextcloud_backend {
|
||||
server webserver.nextcloud.svc;
|
||||
server 1.1.1.1 backup;
|
||||
}
|
||||
|
||||
server {
|
||||
server_name nextcloud.tryton.geeraert.eu www.nextcloud.tryton.geeraert.eu;
|
||||
location / {
|
||||
proxy_pass http://nextcloud_backend;
|
||||
proxy_set_header Upgrade $http_upgrade;
|
||||
proxy_set_header Host $host;
|
||||
|
||||
|
||||
location ~* \.(html|css|jpg|gif|ico|js)$ {
|
||||
proxy_cache cache;
|
||||
proxy_cache_key $host$uri$is_args$args;
|
||||
proxy_cache_valid 200 301 302 30m;
|
||||
expires 30m;
|
||||
proxy_pass http://nextcloud_backend;
|
||||
}
|
||||
|
||||
}
|
||||
location /.well-known/acme-challenge/ {
|
||||
root /var/www/certbot;
|
||||
}
|
||||
|
||||
|
||||
|
||||
location /.well-known/carddav {
|
||||
return 301 $scheme://$host/remote.php/dav;
|
||||
}
|
||||
|
||||
location /.well-known/caldav {
|
||||
return 301 $scheme://$host/remote.php/dav;
|
||||
}
|
||||
|
||||
location = /health {
|
||||
default_type text/html;
|
||||
return 200 "<!DOCTYPE html><h2>health check</h2>\n";
|
||||
}
|
||||
|
||||
http2 on;
|
||||
ssl_protocols TLSv1.2;
|
||||
|
||||
listen 443 ssl;
|
||||
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
|
||||
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
|
||||
|
||||
}
|
||||
server {
|
||||
if ($host = www.nextcloud.tryton.geeraert.eu) {
|
||||
return 301 https://$host$request_uri;
|
||||
}
|
||||
|
||||
|
||||
if ($host = nextcloud.tryton.geeraert.eu) {
|
||||
return 301 https://$host$request_uri;
|
||||
}
|
||||
|
||||
server_name www.nextcloud.tryton.geeraert.eu nextcloud.tryton.geeraert.eu;
|
||||
listen 80;
|
||||
return 404;
|
||||
|
||||
}
|
||||
@@ -1,44 +0,0 @@
|
||||
############################################
|
||||
# config file for octoprint
|
||||
############################################
|
||||
|
||||
upstream octoprint_backend {
|
||||
server 192.168.1.28:5000;
|
||||
server 1.1.1.1 backup;
|
||||
}
|
||||
|
||||
server {
|
||||
server_name octoprint.tryton.geeraert.eu www.octoprint.tryton.geeraert.eu;
|
||||
location / {
|
||||
proxy_pass http://octoprint_backend;
|
||||
proxy_set_header Upgrade $http_upgrade;
|
||||
proxy_set_header Host $host;
|
||||
|
||||
|
||||
}
|
||||
location /.well-known/acme-challenge/ {
|
||||
root /var/www/certbot;
|
||||
}
|
||||
|
||||
|
||||
|
||||
listen 443 ssl;
|
||||
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
|
||||
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
|
||||
|
||||
}
|
||||
server {
|
||||
if ($host = www.octoprint.tryton.geeraert.eu) {
|
||||
return 301 https://$host$request_uri;
|
||||
}
|
||||
|
||||
|
||||
if ($host = octoprint.tryton.geeraert.eu) {
|
||||
return 301 https://$host$request_uri;
|
||||
}
|
||||
|
||||
server_name www.octoprint.tryton.geeraert.eu octoprint.tryton.geeraert.eu;
|
||||
listen 80;
|
||||
return 404;
|
||||
|
||||
}
|
||||
@@ -1,44 +0,0 @@
|
||||
############################################
|
||||
# config file for onitama
|
||||
############################################
|
||||
|
||||
upstream onitama_backend {
|
||||
server onitama.onitama.svc;
|
||||
server 1.1.1.1 backup;
|
||||
}
|
||||
|
||||
server {
|
||||
server_name onitama.tryton.geeraert.eu www.onitama.tryton.geeraert.eu;
|
||||
location / {
|
||||
proxy_pass http://onitama_backend;
|
||||
proxy_set_header Upgrade $http_upgrade;
|
||||
proxy_set_header Host $host;
|
||||
|
||||
|
||||
}
|
||||
location /.well-known/acme-challenge/ {
|
||||
root /var/www/certbot;
|
||||
}
|
||||
|
||||
|
||||
|
||||
listen 443 ssl;
|
||||
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
|
||||
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
|
||||
|
||||
}
|
||||
server {
|
||||
if ($host = www.onitama.tryton.geeraert.eu) {
|
||||
return 301 https://$host$request_uri;
|
||||
}
|
||||
|
||||
|
||||
if ($host = onitama.tryton.geeraert.eu) {
|
||||
return 301 https://$host$request_uri;
|
||||
}
|
||||
|
||||
server_name www.onitama.tryton.geeraert.eu onitama.tryton.geeraert.eu;
|
||||
listen 80;
|
||||
return 404;
|
||||
|
||||
}
|
||||
@@ -1,41 +0,0 @@
|
||||
upstream opentrashmail_backend {
|
||||
# server opentrashmail.opentrashmail.svc;
|
||||
server 1.1.1.1;
|
||||
server 1.1.1.1 backup;
|
||||
}
|
||||
|
||||
server {
|
||||
server_name opentrashmail.tryton.geeraert.eu www.opentrashmail.tryton.geeraert.eu;
|
||||
location / {
|
||||
proxy_pass http://opentrashmail_backend;
|
||||
}
|
||||
location /.well-known/acme-challenge/ {
|
||||
root /var/www/certbot;
|
||||
}
|
||||
|
||||
listen 443 ssl; # managed by Certbot
|
||||
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
|
||||
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
|
||||
#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
|
||||
#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
|
||||
|
||||
|
||||
}
|
||||
server {
|
||||
if ($host = www.opentrashmail.tryton.geeraert.eu) {
|
||||
return 301 https://$host$request_uri;
|
||||
} # managed by Certbot
|
||||
|
||||
|
||||
if ($host = opentrashmail.tryton.geeraert.eu) {
|
||||
return 301 https://$host$request_uri;
|
||||
} # managed by Certbot
|
||||
|
||||
|
||||
server_name www.opentrashmail.tryton.geeraert.eu opentrashmail.tryton.geeraert.eu;
|
||||
listen 80;
|
||||
return 404; # managed by Certbot
|
||||
|
||||
}
|
||||
|
||||
|
||||
@@ -1,44 +0,0 @@
|
||||
############################################
|
||||
# config file for paperless-docker
|
||||
############################################
|
||||
|
||||
upstream paperless-docker_backend {
|
||||
server 192.168.88.50:4887;
|
||||
server 1.1.1.1 backup;
|
||||
}
|
||||
|
||||
server {
|
||||
server_name paperless-docker.tryton.geeraert.eu www.paperless-docker.tryton.geeraert.eu;
|
||||
location / {
|
||||
proxy_pass http://paperless-docker_backend;
|
||||
proxy_set_header Upgrade $http_upgrade;
|
||||
proxy_set_header Host $host;
|
||||
|
||||
|
||||
}
|
||||
location /.well-known/acme-challenge/ {
|
||||
root /var/www/certbot;
|
||||
}
|
||||
|
||||
|
||||
|
||||
listen 443 ssl;
|
||||
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
|
||||
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
|
||||
|
||||
}
|
||||
server {
|
||||
if ($host = www.paperless-docker.tryton.geeraert.eu) {
|
||||
return 301 https://$host$request_uri;
|
||||
}
|
||||
|
||||
|
||||
if ($host = paperless-docker.tryton.geeraert.eu) {
|
||||
return 301 https://$host$request_uri;
|
||||
}
|
||||
|
||||
server_name www.paperless-docker.tryton.geeraert.eu paperless-docker.tryton.geeraert.eu;
|
||||
listen 80;
|
||||
return 404;
|
||||
|
||||
}
|
||||
@@ -1,43 +0,0 @@
|
||||
upstream paperless-kube_backend {
|
||||
#docker pod
|
||||
server 192.168.88.50:4887;
|
||||
#k8s pod
|
||||
#server webserver.paperless.svc:8000;
|
||||
server 1.1.1.1 backup;
|
||||
}
|
||||
|
||||
server {
|
||||
server_name paperless-docker.tryton.geeraert.eu www.paperless-docker.tryton.geeraert.eu;
|
||||
location / {
|
||||
proxy_pass http://paperless-kube_backend;
|
||||
}
|
||||
location /.well-known/acme-challenge/ {
|
||||
root /var/www/certbot;
|
||||
}
|
||||
|
||||
listen 443 ssl; # managed by Certbot
|
||||
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
|
||||
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
|
||||
#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
|
||||
#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
|
||||
|
||||
|
||||
}
|
||||
server {
|
||||
if ($host = www.paperless-kube.tryton.geeraert.eu) {
|
||||
return 301 https://$host$request_uri;
|
||||
} # managed by Certbot
|
||||
|
||||
|
||||
if ($host = paperless-kube.tryton.geeraert.eu) {
|
||||
return 301 https://$host$request_uri;
|
||||
} # managed by Certbot
|
||||
|
||||
|
||||
server_name www.paperless-kube.tryton.geeraert.eu paperless-kube.tryton.geeraert.eu;
|
||||
listen 80;
|
||||
return 404; # managed by Certbot
|
||||
|
||||
}
|
||||
|
||||
|
||||
@@ -1,44 +0,0 @@
|
||||
############################################
|
||||
# config file for paperless
|
||||
############################################
|
||||
|
||||
upstream paperless_backend {
|
||||
server webserver.paperless.svc:8000;
|
||||
server 1.1.1.1 backup;
|
||||
}
|
||||
|
||||
server {
|
||||
server_name paperless.tryton.geeraert.eu www.paperless.tryton.geeraert.eu;
|
||||
location / {
|
||||
proxy_pass http://paperless_backend;
|
||||
proxy_set_header Upgrade $http_upgrade;
|
||||
proxy_set_header Host $host;
|
||||
|
||||
|
||||
}
|
||||
location /.well-known/acme-challenge/ {
|
||||
root /var/www/certbot;
|
||||
}
|
||||
|
||||
|
||||
|
||||
listen 443 ssl;
|
||||
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
|
||||
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
|
||||
|
||||
}
|
||||
server {
|
||||
if ($host = www.paperless.tryton.geeraert.eu) {
|
||||
return 301 https://$host$request_uri;
|
||||
}
|
||||
|
||||
|
||||
if ($host = paperless.tryton.geeraert.eu) {
|
||||
return 301 https://$host$request_uri;
|
||||
}
|
||||
|
||||
server_name www.paperless.tryton.geeraert.eu paperless.tryton.geeraert.eu;
|
||||
listen 80;
|
||||
return 404;
|
||||
|
||||
}
|
||||
@@ -1,17 +0,0 @@
|
||||
upstream pihole_backend {
|
||||
server 172.16.0.60:8081;
|
||||
server 1.1.1.1 backup;
|
||||
}
|
||||
|
||||
server {
|
||||
server_name pihole.tryton.geeraert.eu www.pihole.tryton.geeraert.eu;
|
||||
location / {
|
||||
proxy_pass http://pihole_backend;
|
||||
}
|
||||
location /.well-known/acme-challenge/ {
|
||||
root /var/www/certbot;
|
||||
}
|
||||
|
||||
listen 80 ;
|
||||
}
|
||||
|
||||
@@ -1,44 +0,0 @@
|
||||
############################################
|
||||
# config file for portainer
|
||||
############################################
|
||||
|
||||
upstream portainer_backend {
|
||||
server portainer.portainer.svc;
|
||||
server 1.1.1.1 backup;
|
||||
}
|
||||
|
||||
server {
|
||||
server_name portainer.tryton.geeraert.eu www.portainer.tryton.geeraert.eu;
|
||||
location / {
|
||||
proxy_pass http://portainer_backend;
|
||||
proxy_set_header Upgrade $http_upgrade;
|
||||
proxy_set_header Host $host;
|
||||
|
||||
|
||||
}
|
||||
location /.well-known/acme-challenge/ {
|
||||
root /var/www/certbot;
|
||||
}
|
||||
|
||||
|
||||
|
||||
listen 443 ssl;
|
||||
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
|
||||
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
|
||||
|
||||
}
|
||||
server {
|
||||
if ($host = www.portainer.tryton.geeraert.eu) {
|
||||
return 301 https://$host$request_uri;
|
||||
}
|
||||
|
||||
|
||||
if ($host = portainer.tryton.geeraert.eu) {
|
||||
return 301 https://$host$request_uri;
|
||||
}
|
||||
|
||||
server_name www.portainer.tryton.geeraert.eu portainer.tryton.geeraert.eu;
|
||||
listen 80;
|
||||
return 404;
|
||||
|
||||
}
|
||||
@@ -1,44 +0,0 @@
|
||||
############################################
|
||||
# config file for prowlarr
|
||||
############################################
|
||||
|
||||
upstream prowlarr_backend {
|
||||
server prowlarr.servarr.svc;
|
||||
server 1.1.1.1 backup;
|
||||
}
|
||||
|
||||
server {
|
||||
server_name prowlarr.tryton.geeraert.eu www.prowlarr.tryton.geeraert.eu;
|
||||
location / {
|
||||
proxy_pass http://prowlarr_backend;
|
||||
proxy_set_header Upgrade $http_upgrade;
|
||||
proxy_set_header Host $host;
|
||||
|
||||
|
||||
}
|
||||
location /.well-known/acme-challenge/ {
|
||||
root /var/www/certbot;
|
||||
}
|
||||
|
||||
|
||||
|
||||
listen 443 ssl;
|
||||
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
|
||||
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
|
||||
|
||||
}
|
||||
server {
|
||||
if ($host = www.prowlarr.tryton.geeraert.eu) {
|
||||
return 301 https://$host$request_uri;
|
||||
}
|
||||
|
||||
|
||||
if ($host = prowlarr.tryton.geeraert.eu) {
|
||||
return 301 https://$host$request_uri;
|
||||
}
|
||||
|
||||
server_name www.prowlarr.tryton.geeraert.eu prowlarr.tryton.geeraert.eu;
|
||||
listen 80;
|
||||
return 404;
|
||||
|
||||
}
|
||||
@@ -1,40 +0,0 @@
|
||||
upstream proxmox_backend {
|
||||
server 192.168.6.2:8006;
|
||||
server 1.1.1.1 backup;
|
||||
}
|
||||
|
||||
server {
|
||||
server_name proxmox.tryton.geeraert.eu www.proxmox.tryton.geeraert.eu;
|
||||
location / {
|
||||
proxy_pass https://proxmox_backend;
|
||||
}
|
||||
location /.well-known/acme-challenge/ {
|
||||
root /var/www/certbot;
|
||||
}
|
||||
|
||||
listen 443 ssl; # managed by Certbot
|
||||
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
|
||||
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
|
||||
# managed by Certbot
|
||||
# managed by Certbot
|
||||
|
||||
|
||||
}
|
||||
server {
|
||||
if ($host = www.proxmox.tryton.geeraert.eu) {
|
||||
return 301 https://$host$request_uri;
|
||||
} # managed by Certbot
|
||||
|
||||
|
||||
if ($host = proxmox.tryton.geeraert.eu) {
|
||||
return 301 https://$host$request_uri;
|
||||
} # managed by Certbot
|
||||
|
||||
|
||||
server_name www.proxmox.tryton.geeraert.eu proxmox.tryton.geeraert.eu;
|
||||
listen 80;
|
||||
return 404; # managed by Certbot
|
||||
|
||||
}
|
||||
|
||||
|
||||
@@ -1,44 +0,0 @@
|
||||
############################################
|
||||
# config file for qbittorrent
|
||||
############################################
|
||||
|
||||
upstream qbittorrent_backend {
|
||||
server qbittorrent.servarr.svc:8080;
|
||||
server 1.1.1.1 backup;
|
||||
}
|
||||
|
||||
server {
|
||||
server_name qbittorrent.tryton.geeraert.eu www.qbittorrent.tryton.geeraert.eu;
|
||||
location / {
|
||||
proxy_pass http://qbittorrent_backend;
|
||||
proxy_set_header Upgrade $http_upgrade;
|
||||
proxy_set_header Host $host;
|
||||
|
||||
|
||||
}
|
||||
location /.well-known/acme-challenge/ {
|
||||
root /var/www/certbot;
|
||||
}
|
||||
|
||||
|
||||
|
||||
listen 443 ssl;
|
||||
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
|
||||
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
|
||||
|
||||
}
|
||||
server {
|
||||
if ($host = www.qbittorrent.tryton.geeraert.eu) {
|
||||
return 301 https://$host$request_uri;
|
||||
}
|
||||
|
||||
|
||||
if ($host = qbittorrent.tryton.geeraert.eu) {
|
||||
return 301 https://$host$request_uri;
|
||||
}
|
||||
|
||||
server_name www.qbittorrent.tryton.geeraert.eu qbittorrent.tryton.geeraert.eu;
|
||||
listen 80;
|
||||
return 404;
|
||||
|
||||
}
|
||||
@@ -1,44 +0,0 @@
|
||||
############################################
|
||||
# config file for radarr
|
||||
############################################
|
||||
|
||||
upstream radarr_backend {
|
||||
server radarr.servarr.svc;
|
||||
server 1.1.1.1 backup;
|
||||
}
|
||||
|
||||
server {
|
||||
server_name radarr.tryton.geeraert.eu www.radarr.tryton.geeraert.eu;
|
||||
location / {
|
||||
proxy_pass http://radarr_backend;
|
||||
proxy_set_header Upgrade $http_upgrade;
|
||||
proxy_set_header Host $host;
|
||||
|
||||
|
||||
}
|
||||
location /.well-known/acme-challenge/ {
|
||||
root /var/www/certbot;
|
||||
}
|
||||
|
||||
|
||||
|
||||
listen 443 ssl;
|
||||
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
|
||||
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
|
||||
|
||||
}
|
||||
server {
|
||||
if ($host = www.radarr.tryton.geeraert.eu) {
|
||||
return 301 https://$host$request_uri;
|
||||
}
|
||||
|
||||
|
||||
if ($host = radarr.tryton.geeraert.eu) {
|
||||
return 301 https://$host$request_uri;
|
||||
}
|
||||
|
||||
server_name www.radarr.tryton.geeraert.eu radarr.tryton.geeraert.eu;
|
||||
listen 80;
|
||||
return 404;
|
||||
|
||||
}
|
||||
@@ -1,19 +0,0 @@
|
||||
upstream reverse_proxy_backend {
|
||||
server 192.168.88.50:8888;
|
||||
server 1.1.1.1 backup;
|
||||
}
|
||||
|
||||
server {
|
||||
server_name reverse.tryton.geeraert.eu www.reverse.tryton.geeraert.eu;
|
||||
location / {
|
||||
proxy_pass http://reverse_proxy_backend;
|
||||
auth_basic "Restricted Content";
|
||||
auth_basic_user_file /var/www/authentication/htpasswd;
|
||||
}
|
||||
location /.well-known/acme-challenge/ {
|
||||
root /var/www/certbot;
|
||||
}
|
||||
|
||||
listen 80 ;
|
||||
}
|
||||
|
||||
@@ -1,47 +0,0 @@
|
||||
############################################
|
||||
# config file for router
|
||||
############################################
|
||||
|
||||
upstream router_backend {
|
||||
server 192.168.88.1;
|
||||
server 1.1.1.1 backup;
|
||||
}
|
||||
|
||||
server {
|
||||
server_name router.tryton.geeraert.eu www.router.tryton.geeraert.eu;
|
||||
location / {
|
||||
proxy_pass http://router_backend;
|
||||
proxy_set_header Upgrade $http_upgrade;
|
||||
proxy_set_header Host $host;
|
||||
|
||||
auth_basic "Administrator’s Area";
|
||||
auth_basic_user_file /authentication-htpasswd/.htpasswd;
|
||||
|
||||
|
||||
}
|
||||
location /.well-known/acme-challenge/ {
|
||||
root /var/www/certbot;
|
||||
}
|
||||
|
||||
|
||||
|
||||
listen 443 ssl;
|
||||
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
|
||||
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
|
||||
|
||||
}
|
||||
server {
|
||||
if ($host = www.router.tryton.geeraert.eu) {
|
||||
return 301 https://$host$request_uri;
|
||||
}
|
||||
|
||||
|
||||
if ($host = router.tryton.geeraert.eu) {
|
||||
return 301 https://$host$request_uri;
|
||||
}
|
||||
|
||||
server_name www.router.tryton.geeraert.eu router.tryton.geeraert.eu;
|
||||
listen 80;
|
||||
return 404;
|
||||
|
||||
}
|
||||
@@ -1,44 +0,0 @@
|
||||
############################################
|
||||
# config file for sickchill
|
||||
############################################
|
||||
|
||||
upstream sickchill_backend {
|
||||
server sickchill.servarr.svc;
|
||||
server 1.1.1.1 backup;
|
||||
}
|
||||
|
||||
server {
|
||||
server_name sickchill.tryton.geeraert.eu www.sickchill.tryton.geeraert.eu;
|
||||
location / {
|
||||
proxy_pass http://sickchill_backend;
|
||||
proxy_set_header Upgrade $http_upgrade;
|
||||
proxy_set_header Host $host;
|
||||
|
||||
|
||||
}
|
||||
location /.well-known/acme-challenge/ {
|
||||
root /var/www/certbot;
|
||||
}
|
||||
|
||||
|
||||
|
||||
listen 443 ssl;
|
||||
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
|
||||
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
|
||||
|
||||
}
|
||||
server {
|
||||
if ($host = www.sickchill.tryton.geeraert.eu) {
|
||||
return 301 https://$host$request_uri;
|
||||
}
|
||||
|
||||
|
||||
if ($host = sickchill.tryton.geeraert.eu) {
|
||||
return 301 https://$host$request_uri;
|
||||
}
|
||||
|
||||
server_name www.sickchill.tryton.geeraert.eu sickchill.tryton.geeraert.eu;
|
||||
listen 80;
|
||||
return 404;
|
||||
|
||||
}
|
||||
@@ -1,40 +0,0 @@
|
||||
upstream app_backend {
|
||||
server 10.0.0.3:7777;
|
||||
server 1.1.1.1 backup;
|
||||
}
|
||||
|
||||
server {
|
||||
server_name app.tryton.geeraert.eu www.app.tryton.geeraert.eu;
|
||||
location / {
|
||||
proxy_pass http://app_backend;
|
||||
}
|
||||
location /.well-known/acme-challenge/ {
|
||||
root /var/www/certbot;
|
||||
}
|
||||
|
||||
listen 443 ssl; # managed by Certbot
|
||||
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
|
||||
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
|
||||
#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
|
||||
#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
|
||||
|
||||
|
||||
}
|
||||
server {
|
||||
if ($host = www.app.tryton.geeraert.eu) {
|
||||
return 301 https://$host$request_uri;
|
||||
} # managed by Certbot
|
||||
|
||||
|
||||
if ($host = app.tryton.geeraert.eu) {
|
||||
return 301 https://$host$request_uri;
|
||||
} # managed by Certbot
|
||||
|
||||
|
||||
server_name www.app.tryton.geeraert.eu app.tryton.geeraert.eu;
|
||||
listen 80;
|
||||
return 404; # managed by Certbot
|
||||
|
||||
}
|
||||
|
||||
|
||||
@@ -1,44 +0,0 @@
|
||||
############################################
|
||||
# config file for sonarr
|
||||
############################################
|
||||
|
||||
upstream sonarr_backend {
|
||||
server sonarr.servarr.svc;
|
||||
server 1.1.1.1 backup;
|
||||
}
|
||||
|
||||
server {
|
||||
server_name sonarr.tryton.geeraert.eu www.sonarr.tryton.geeraert.eu;
|
||||
location / {
|
||||
proxy_pass http://sonarr_backend;
|
||||
proxy_set_header Upgrade $http_upgrade;
|
||||
proxy_set_header Host $host;
|
||||
|
||||
|
||||
}
|
||||
location /.well-known/acme-challenge/ {
|
||||
root /var/www/certbot;
|
||||
}
|
||||
|
||||
|
||||
|
||||
listen 443 ssl;
|
||||
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
|
||||
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
|
||||
|
||||
}
|
||||
server {
|
||||
if ($host = www.sonarr.tryton.geeraert.eu) {
|
||||
return 301 https://$host$request_uri;
|
||||
}
|
||||
|
||||
|
||||
if ($host = sonarr.tryton.geeraert.eu) {
|
||||
return 301 https://$host$request_uri;
|
||||
}
|
||||
|
||||
server_name www.sonarr.tryton.geeraert.eu sonarr.tryton.geeraert.eu;
|
||||
listen 80;
|
||||
return 404;
|
||||
|
||||
}
|
||||
@@ -1,40 +0,0 @@
|
||||
upstream transmission_backend {
|
||||
server 192.168.88.52:31091;
|
||||
server 1.1.1.1 backup;
|
||||
}
|
||||
|
||||
server {
|
||||
server_name transmission.tryton.geeraert.eu www.transmission.tryton.geeraert.eu;
|
||||
location / {
|
||||
proxy_pass http://transmission_backend;
|
||||
}
|
||||
location /.well-known/acme-challenge/ {
|
||||
root /var/www/certbot;
|
||||
}
|
||||
|
||||
listen 443 ssl; # managed by Certbot
|
||||
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
|
||||
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
|
||||
#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
|
||||
#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
|
||||
|
||||
|
||||
}
|
||||
server {
|
||||
if ($host = www.transmission.tryton.geeraert.eu) {
|
||||
return 301 https://$host$request_uri;
|
||||
} # managed by Certbot
|
||||
|
||||
|
||||
if ($host = transmission.tryton.geeraert.eu) {
|
||||
return 301 https://$host$request_uri;
|
||||
} # managed by Certbot
|
||||
|
||||
|
||||
server_name www.transmission.tryton.geeraert.eu transmission.tryton.geeraert.eu;
|
||||
listen 80;
|
||||
return 404; # managed by Certbot
|
||||
|
||||
}
|
||||
|
||||
|
||||
@@ -1,40 +0,0 @@
|
||||
upstream unifi-inform_backend {
|
||||
server 192.168.88.50:8082;
|
||||
server 1.1.1.1 backup;
|
||||
}
|
||||
|
||||
server {
|
||||
server_name unifi-inform.tryton.geeraert.eu www.unifi-inform.tryton.geeraert.eu;
|
||||
location / {
|
||||
proxy_pass http://unifi-inform_backend;
|
||||
}
|
||||
location /.well-known/acme-challenge/ {
|
||||
root /var/www/certbot;
|
||||
}
|
||||
|
||||
listen 443 ssl; # managed by Certbot
|
||||
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
|
||||
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
|
||||
#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
|
||||
#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
|
||||
|
||||
|
||||
}
|
||||
server {
|
||||
if ($host = www.unifi-inform.tryton.geeraert.eu) {
|
||||
return 301 https://$host$request_uri;
|
||||
} # managed by Certbot
|
||||
|
||||
|
||||
if ($host = unifi-inform.tryton.geeraert.eu) {
|
||||
return 301 https://$host$request_uri;
|
||||
} # managed by Certbot
|
||||
|
||||
|
||||
server_name www.unifi-inform.tryton.geeraert.eu unifi-inform.tryton.geeraert.eu;
|
||||
listen 80;
|
||||
return 404; # managed by Certbot
|
||||
|
||||
}
|
||||
|
||||
|
||||
@@ -1,40 +0,0 @@
|
||||
upstream unifi_controller_backend {
|
||||
server 192.168.88.52:31043;
|
||||
server 1.1.1.1 backup;
|
||||
}
|
||||
|
||||
server {
|
||||
server_name unifi.tryton.geeraert.eu www.unifi.tryton.geeraert.eu;
|
||||
location / {
|
||||
proxy_pass https://unifi_controller_backend;
|
||||
}
|
||||
location /.well-known/acme-challenge/ {
|
||||
root /var/www/certbot;
|
||||
}
|
||||
|
||||
listen 443 ssl; # managed by Certbot
|
||||
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
|
||||
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
|
||||
#include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
|
||||
#ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
|
||||
|
||||
|
||||
}
|
||||
server {
|
||||
if ($host = www.unifi.tryton.geeraert.eu) {
|
||||
return 301 https://$host$request_uri;
|
||||
} # managed by Certbot
|
||||
|
||||
|
||||
if ($host = unifi.tryton.geeraert.eu) {
|
||||
return 301 https://$host$request_uri;
|
||||
} # managed by Certbot
|
||||
|
||||
|
||||
server_name www.unifi.tryton.geeraert.eu unifi.tryton.geeraert.eu;
|
||||
listen 80;
|
||||
return 404; # managed by Certbot
|
||||
|
||||
}
|
||||
|
||||
|
||||
@@ -1,44 +0,0 @@
|
||||
############################################
|
||||
# config file for unifi-inform
|
||||
############################################
|
||||
|
||||
upstream unifi-inform_backend {
|
||||
server 192.168.88.50:8082;
|
||||
server 1.1.1.1 backup;
|
||||
}
|
||||
|
||||
server {
|
||||
server_name unifi-inform.tryton.geeraert.eu www.unifi-inform.tryton.geeraert.eu;
|
||||
location / {
|
||||
proxy_pass http://unifi-inform_backend;
|
||||
proxy_set_header Upgrade $http_upgrade;
|
||||
proxy_set_header Host $host;
|
||||
|
||||
|
||||
}
|
||||
location /.well-known/acme-challenge/ {
|
||||
root /var/www/certbot;
|
||||
}
|
||||
|
||||
|
||||
|
||||
listen 443 ssl;
|
||||
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
|
||||
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
|
||||
|
||||
}
|
||||
server {
|
||||
if ($host = www.unifi-inform.tryton.geeraert.eu) {
|
||||
return 301 https://$host$request_uri;
|
||||
}
|
||||
|
||||
|
||||
if ($host = unifi-inform.tryton.geeraert.eu) {
|
||||
return 301 https://$host$request_uri;
|
||||
}
|
||||
|
||||
server_name www.unifi-inform.tryton.geeraert.eu unifi-inform.tryton.geeraert.eu;
|
||||
listen 80;
|
||||
return 404;
|
||||
|
||||
}
|
||||
@@ -1,44 +0,0 @@
|
||||
############################################
|
||||
# config file for unifi
|
||||
############################################
|
||||
|
||||
upstream unifi_backend {
|
||||
server 192.168.88.52:31043;
|
||||
server 1.1.1.1 backup;
|
||||
}
|
||||
|
||||
server {
|
||||
server_name unifi.tryton.geeraert.eu www.unifi.tryton.geeraert.eu;
|
||||
location / {
|
||||
proxy_pass http://unifi_backend;
|
||||
proxy_set_header Upgrade $http_upgrade;
|
||||
proxy_set_header Host $host;
|
||||
|
||||
|
||||
}
|
||||
location /.well-known/acme-challenge/ {
|
||||
root /var/www/certbot;
|
||||
}
|
||||
|
||||
|
||||
|
||||
listen 443 ssl;
|
||||
ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem;
|
||||
ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem;
|
||||
|
||||
}
|
||||
server {
|
||||
if ($host = www.unifi.tryton.geeraert.eu) {
|
||||
return 301 https://$host$request_uri;
|
||||
}
|
||||
|
||||
|
||||
if ($host = unifi.tryton.geeraert.eu) {
|
||||
return 301 https://$host$request_uri;
|
||||
}
|
||||
|
||||
server_name www.unifi.tryton.geeraert.eu unifi.tryton.geeraert.eu;
|
||||
listen 80;
|
||||
return 404;
|
||||
|
||||
}
|
||||
@@ -1,12 +0,0 @@
|
||||
server {
|
||||
server_name watchower.tryton.geeraert.eu www.watchower.tryton.geeraert.eu;
|
||||
location / {
|
||||
proxy_pass http://192.168.88.50:53682/auth?state=9erJkbDsEOg-Lh0mkQZe3Q;
|
||||
}
|
||||
location /.well-known/acme-challenge/ {
|
||||
root /var/www/certbot;
|
||||
}
|
||||
|
||||
listen 80 ;
|
||||
}
|
||||
|
||||
+9
-6
@@ -14,7 +14,7 @@ variable "nginx_sites" {
|
||||
}))
|
||||
|
||||
}
|
||||
|
||||
/*
|
||||
resource "local_file" "nginx" {
|
||||
# for_each = var.nginx_sites
|
||||
for_each = { for key, value in var.nginx_sites : key => value if value.enabled == true }
|
||||
@@ -38,7 +38,7 @@ resource "local_file" "nginx" {
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
*/
|
||||
|
||||
#resource "kubernetes_config_map" "automatic-configmap" {
|
||||
# metadata {
|
||||
@@ -67,6 +67,9 @@ resource "kubernetes_config_map" "automatic-configmap" {
|
||||
metadata {
|
||||
name = "sites-terraform"
|
||||
namespace = "reverse-proxy"
|
||||
annotations = {
|
||||
"reloader.stakater.com/match" : "true",
|
||||
}
|
||||
}
|
||||
|
||||
data = {
|
||||
@@ -82,10 +85,10 @@ resource "kubernetes_config_map" "automatic-configmap" {
|
||||
}) if value.enabled == true
|
||||
}
|
||||
|
||||
provisioner "local-exec" {
|
||||
command = "kubectl get pods -n reverse-proxy -o name | xargs -I{} kubectl delete -n reverse-proxy {}"
|
||||
quiet = true
|
||||
}
|
||||
# provisioner "local-exec" {
|
||||
# command = "kubectl get pods -n reverse-proxy -o name | xargs -I{} kubectl delete -n reverse-proxy {}"
|
||||
# quiet = true
|
||||
# }
|
||||
|
||||
}
|
||||
|
||||
|
||||
@@ -57,3 +57,4 @@ server {
|
||||
return 404;
|
||||
|
||||
}
|
||||
|
||||
|
||||
+149
-100
@@ -1,52 +1,52 @@
|
||||
nginx_sites = {
|
||||
bitwarden = {
|
||||
service = "nginx.bitwarden.svc:8080"
|
||||
http2_bool = true
|
||||
}
|
||||
bitwarden = {
|
||||
service = "nginx.bitwarden.svc:8080"
|
||||
http2_bool = true
|
||||
}
|
||||
|
||||
bookstack = {
|
||||
service = "webserver.bookstack.svc"
|
||||
proxy_cache = false
|
||||
}
|
||||
django = {
|
||||
service = "webserver.django-python.svc:8000"
|
||||
proxy_cache = true
|
||||
http2_bool = true
|
||||
}
|
||||
echo = {
|
||||
service = "echo-server.echo-server.svc:80"
|
||||
proxy_cache = true
|
||||
http2_bool = true
|
||||
}
|
||||
gitlab = {
|
||||
service = "webserver.gitlab.svc:443"
|
||||
proxy_cache = true
|
||||
extra_value_bool = true
|
||||
extra-value = <<EOT
|
||||
bookstack = {
|
||||
service = "webserver.bookstack.svc"
|
||||
proxy_cache = false
|
||||
}
|
||||
django = {
|
||||
service = "webserver.django-python.svc:8000"
|
||||
proxy_cache = true
|
||||
http2_bool = true
|
||||
}
|
||||
echo = {
|
||||
service = "echo-server.echo-server.svc:80"
|
||||
proxy_cache = true
|
||||
http2_bool = true
|
||||
}
|
||||
gitlab = {
|
||||
service = "webserver.gitlab.svc:443"
|
||||
proxy_cache = true
|
||||
extra_value_bool = true
|
||||
extra-value = <<EOT
|
||||
client_max_body_size 20m;
|
||||
proxy_request_buffering off;
|
||||
EOT
|
||||
http2_bool = true
|
||||
proxy_pass_https = true
|
||||
}
|
||||
sonarr = {
|
||||
service = "sonarr.servarr.svc"
|
||||
}
|
||||
http2_bool = true
|
||||
proxy_pass_https = true
|
||||
}
|
||||
sonarr = {
|
||||
service = "sonarr.servarr.svc"
|
||||
}
|
||||
|
||||
keycloak = {
|
||||
service = "keycloak.keycloak.svc:8080"
|
||||
extra-value = <<EOT
|
||||
keycloak = {
|
||||
service = "keycloak.keycloak.svc:8080"
|
||||
extra-value = <<EOT
|
||||
|
||||
set_real_ip_from 0.0.0.0/0;
|
||||
real_ip_header X-Real-IP;
|
||||
real_ip_recursive on;
|
||||
EOT
|
||||
}
|
||||
nextcloud = {
|
||||
service = "webserver.nextcloud.svc"
|
||||
proxy_cache = true
|
||||
http2_bool = true
|
||||
extra-value = <<EOT
|
||||
}
|
||||
nextcloud = {
|
||||
service = "webserver.nextcloud.svc"
|
||||
proxy_cache = true
|
||||
http2_bool = true
|
||||
extra-value = <<EOT
|
||||
|
||||
|
||||
location /.well-known/carddav {
|
||||
@@ -62,73 +62,122 @@ client_max_body_size 20m;
|
||||
return 200 "<!DOCTYPE html><h2>health check</h2>\n";
|
||||
}
|
||||
EOT
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
router = {
|
||||
service = "192.168.88.1"
|
||||
authentication_required = true
|
||||
}
|
||||
homeassistant = {
|
||||
service = "homeassistant.homeassistant.svc:8123"
|
||||
}
|
||||
octoprint = {
|
||||
service = "192.168.1.28:5000"
|
||||
}
|
||||
onitama = {
|
||||
service = "onitama.onitama.svc"
|
||||
}
|
||||
router = {
|
||||
service = "192.168.88.1"
|
||||
authentication_required = true
|
||||
}
|
||||
homeassistant = {
|
||||
service = "homeassistant.homeassistant.svc:8123"
|
||||
}
|
||||
octoprint = {
|
||||
service = "192.168.1.28:5000"
|
||||
}
|
||||
onitama = {
|
||||
service = "onitama.onitama.svc"
|
||||
enabled = false
|
||||
}
|
||||
|
||||
opentrashmail = {
|
||||
# service = "opentrashmail.opentrashmail.svc"
|
||||
service = "1.1.1.1"
|
||||
enabled = false
|
||||
}
|
||||
paperless-docker = {
|
||||
service = "192.168.88.50:4887"
|
||||
}
|
||||
paperless = {
|
||||
service = "webserver.paperless.svc:8000"
|
||||
}
|
||||
pihole = {
|
||||
service = "172.16.0.60:8081"
|
||||
enabled = false
|
||||
}
|
||||
portainer = {
|
||||
service = "portainer.portainer.svc"
|
||||
}
|
||||
prowlarr = {
|
||||
service = "prowlarr.servarr.svc"
|
||||
}
|
||||
proxmox = {
|
||||
service = "192.168.6.2:8006"
|
||||
enabled = false
|
||||
}
|
||||
qbittorrent = {
|
||||
service = "qbittorrent.servarr.svc:8080"
|
||||
}
|
||||
radarr = {
|
||||
service = "radarr.servarr.svc"
|
||||
}
|
||||
reverse = {
|
||||
service = "192.168.88.50:8888"
|
||||
enabled = false
|
||||
}
|
||||
sickchill = {
|
||||
service = "sickchill.servarr.svc"
|
||||
}
|
||||
transmission = {
|
||||
service = "192.168.88.52:31091"
|
||||
enabled = false
|
||||
}
|
||||
unifi = {
|
||||
service = "192.168.88.52:31043"
|
||||
}
|
||||
unifi-inform = {
|
||||
service = "192.168.88.50:8082"
|
||||
}
|
||||
opentrashmail = {
|
||||
# service = "opentrashmail.opentrashmail.svc"
|
||||
service = "1.1.1.1"
|
||||
enabled = false
|
||||
}
|
||||
paperless-docker = {
|
||||
service = "192.168.88.50:4887"
|
||||
}
|
||||
paperless = {
|
||||
service = "webserver.paperless.svc:8000"
|
||||
}
|
||||
pihole = {
|
||||
service = "172.16.0.60:8081"
|
||||
enabled = false
|
||||
}
|
||||
portainer = {
|
||||
service = "portainer.portainer.svc"
|
||||
}
|
||||
prowlarr = {
|
||||
service = "prowlarr.servarr.svc"
|
||||
}
|
||||
proxmox = {
|
||||
service = "192.168.6.2:8006"
|
||||
enabled = false
|
||||
}
|
||||
qbittorrent = {
|
||||
service = "qbittorrent.servarr.svc:8080"
|
||||
}
|
||||
radarr = {
|
||||
service = "radarr.servarr.svc"
|
||||
}
|
||||
reverse = {
|
||||
service = "192.168.88.50:8888"
|
||||
enabled = false
|
||||
}
|
||||
sickchill = {
|
||||
service = "sickchill.servarr.svc"
|
||||
}
|
||||
transmission = {
|
||||
service = "192.168.88.52:31091"
|
||||
enabled = false
|
||||
}
|
||||
unifi = {
|
||||
service = "192.168.88.52:31043"
|
||||
}
|
||||
unifi-inform = {
|
||||
service = "192.168.88.50:8082"
|
||||
}
|
||||
dupeguru = {
|
||||
service = "dupeguru.dupeguru.svc:5800"
|
||||
authentication_required = true
|
||||
}
|
||||
|
||||
immich = {
|
||||
service = "immich-server.immich.svc:3001"
|
||||
}
|
||||
netdata = {
|
||||
enabled = false
|
||||
service = "netdata-agent.netdata.svc:19999"
|
||||
}
|
||||
screeps = {
|
||||
enabled = false
|
||||
service = "screeps.screeps.svc:21025"
|
||||
}
|
||||
|
||||
vulcan = {
|
||||
service = "vulcan.vulcan.svc:80"
|
||||
enabled = false
|
||||
}
|
||||
djangoterra = {
|
||||
enabled = false
|
||||
service = "djangoterra-svc.djangoterra.svc:8000"
|
||||
}
|
||||
|
||||
nginx = {
|
||||
enabled = false
|
||||
service = "nginx-svc.nginx.svc"
|
||||
}
|
||||
openmediavault = {
|
||||
service = "192.168.88.42"
|
||||
}
|
||||
pihole = {
|
||||
service = "web.piholenew.svc"
|
||||
}
|
||||
jellyfin = {
|
||||
service = "jellyfin.jellyfin.svc:8096"
|
||||
}
|
||||
gogs = {
|
||||
enabled = false
|
||||
service = "gogs-svc.gogs.svc:3000"
|
||||
}
|
||||
synology = {
|
||||
enabled = true
|
||||
service = "192.168.88.39:5001"
|
||||
}
|
||||
|
||||
gitea = {
|
||||
enabled = true
|
||||
service = "webserver.gitea.svc:3000"
|
||||
}
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user