Initial commit
This commit is contained in:
@@ -0,0 +1,140 @@
|
||||
map $http_upgrade $connection_upgrade {
|
||||
default upgrade;
|
||||
'' close;
|
||||
}
|
||||
|
||||
server {
|
||||
listen 80;
|
||||
listen [::]:80;
|
||||
server_name mnmsoft.hopto.org;
|
||||
|
||||
location /.well-known/acme-challenge/ {
|
||||
root /var/www/certbot;
|
||||
}
|
||||
|
||||
location / {
|
||||
return 301 https://$host$request_uri;
|
||||
}
|
||||
}
|
||||
|
||||
server {
|
||||
listen 443 ssl;
|
||||
listen [::]:443 ssl;
|
||||
http2 on;
|
||||
server_name mnmsoft.hopto.org;
|
||||
|
||||
client_max_body_size 256M;
|
||||
ssl_certificate /etc/letsencrypt/live/current/fullchain.pem;
|
||||
ssl_certificate_key /etc/letsencrypt/live/current/privkey.pem;
|
||||
ssl_protocols TLSv1.2 TLSv1.3;
|
||||
ssl_session_cache shared:SSL:10m;
|
||||
ssl_session_timeout 10m;
|
||||
add_header X-Frame-Options DENY;
|
||||
add_header X-Content-Type-Options nosniff;
|
||||
add_header X-XSS-Protection "1; mode=block";
|
||||
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
|
||||
|
||||
location /.well-known/acme-challenge/ {
|
||||
root /var/www/certbot;
|
||||
}
|
||||
|
||||
|
||||
# /opt/docker/apps/biogena-pdf-generator
|
||||
location = /biogena-pdf-generator {
|
||||
return 301 /biogena-pdf-generator/;
|
||||
}
|
||||
|
||||
location /biogena-pdf-generator/ {
|
||||
proxy_pass http://host.docker.internal:8092/;
|
||||
proxy_set_header Host $host;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
proxy_set_header X-Forwarded-Host $host;
|
||||
proxy_set_header X-Forwarded-Port 443;
|
||||
proxy_set_header X-Forwarded-Prefix /biogena-pdf-generator;
|
||||
proxy_set_header X-Forwarded-Uri $request_uri;
|
||||
proxy_set_header Upgrade $http_upgrade;
|
||||
proxy_set_header Connection $connection_upgrade;
|
||||
proxy_http_version 1.1;
|
||||
proxy_redirect off;
|
||||
proxy_buffering off;
|
||||
}
|
||||
|
||||
# /opt/docker/apps/pdf-generator-demo
|
||||
location = /pdf-generator-demo {
|
||||
return 301 /pdf-generator-demo/;
|
||||
}
|
||||
|
||||
location /pdf-generator-demo/ {
|
||||
proxy_pass http://host.docker.internal:8093/;
|
||||
proxy_set_header Host $host;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
proxy_set_header X-Forwarded-Host $host;
|
||||
proxy_set_header X-Forwarded-Port 443;
|
||||
proxy_set_header X-Forwarded-Prefix /pdf-generator-demo;
|
||||
proxy_set_header X-Forwarded-Uri $request_uri;
|
||||
proxy_set_header Upgrade $http_upgrade;
|
||||
proxy_set_header Connection $connection_upgrade;
|
||||
proxy_http_version 1.1;
|
||||
proxy_redirect off;
|
||||
proxy_buffering off;
|
||||
}
|
||||
|
||||
# /opt/docker/apps/my-git
|
||||
location = /git {
|
||||
return 301 /git/;
|
||||
}
|
||||
|
||||
location /git/ {
|
||||
proxy_pass http://host.docker.internal:3000/;
|
||||
proxy_set_header Host $host;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
proxy_set_header X-Forwarded-Host $host;
|
||||
proxy_set_header X-Forwarded-Port 443;
|
||||
proxy_set_header X-Forwarded-Prefix /git;
|
||||
proxy_set_header X-Forwarded-Uri $request_uri;
|
||||
proxy_set_header Upgrade $http_upgrade;
|
||||
proxy_set_header Connection $connection_upgrade;
|
||||
proxy_http_version 1.1;
|
||||
proxy_redirect off;
|
||||
proxy_buffering off;
|
||||
}
|
||||
|
||||
# /opt/docker/apps/jellyfin
|
||||
location = /jellyfin {
|
||||
return 301 /jellyfin/;
|
||||
}
|
||||
|
||||
location /jellyfin/ {
|
||||
proxy_pass http://host.docker.internal:8096;
|
||||
proxy_set_header Host $host;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
proxy_set_header X-Forwarded-Host $host;
|
||||
proxy_set_header X-Forwarded-Port 443;
|
||||
proxy_set_header X-Forwarded-Prefix /jellyfin;
|
||||
proxy_set_header X-Forwarded-Uri $request_uri;
|
||||
proxy_set_header Upgrade $http_upgrade;
|
||||
proxy_set_header Connection $connection_upgrade;
|
||||
proxy_http_version 1.1;
|
||||
proxy_redirect off;
|
||||
proxy_buffering off;
|
||||
}
|
||||
|
||||
location = / {
|
||||
auth_basic "Restricted";
|
||||
auth_basic_user_file /etc/nginx/.htpasswd;
|
||||
root /usr/share/nginx/html;
|
||||
try_files /index.html =404;
|
||||
}
|
||||
|
||||
location / {
|
||||
return 404;
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,70 @@
|
||||
<!doctype html>
|
||||
<html lang="en">
|
||||
<head>
|
||||
<meta charset="utf-8">
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1">
|
||||
<title>mnmsoft.hopto.org proxy</title>
|
||||
<style>
|
||||
:root {
|
||||
color-scheme: light;
|
||||
font-family: "Segoe UI", sans-serif;
|
||||
background: #f4f1ea;
|
||||
color: #1f2933;
|
||||
}
|
||||
body {
|
||||
margin: 0;
|
||||
min-height: 100vh;
|
||||
display: grid;
|
||||
place-items: center;
|
||||
background:
|
||||
radial-gradient(circle at top left, rgba(192, 132, 84, 0.18), transparent 35%),
|
||||
linear-gradient(135deg, #f7f3ec, #efe5d5);
|
||||
}
|
||||
main {
|
||||
width: min(760px, calc(100vw - 2rem));
|
||||
background: rgba(255, 255, 255, 0.92);
|
||||
border: 1px solid rgba(31, 41, 51, 0.08);
|
||||
border-radius: 20px;
|
||||
padding: 2rem;
|
||||
box-shadow: 0 24px 60px rgba(31, 41, 51, 0.12);
|
||||
}
|
||||
h1 {
|
||||
margin-top: 0;
|
||||
font-size: clamp(2rem, 5vw, 3rem);
|
||||
}
|
||||
ul {
|
||||
padding-left: 1.25rem;
|
||||
}
|
||||
li {
|
||||
margin: 0.8rem 0;
|
||||
}
|
||||
a {
|
||||
color: #8f3b1b;
|
||||
font-weight: 700;
|
||||
text-decoration: none;
|
||||
}
|
||||
span {
|
||||
color: #52606d;
|
||||
font-size: 0.95rem;
|
||||
}
|
||||
code {
|
||||
background: #f3ede3;
|
||||
padding: 0.15rem 0.35rem;
|
||||
border-radius: 6px;
|
||||
}
|
||||
</style>
|
||||
</head>
|
||||
<body>
|
||||
<main>
|
||||
<h1>mnmsoft.hopto.org</h1>
|
||||
<p>Configured reverse-proxy routes:</p>
|
||||
<ul>
|
||||
<li><a href="/biogena-pdf-generator/">/biogena-pdf-generator/</a> <span>/opt/docker/apps/biogena-pdf-generator</span></li>
|
||||
<li><a href="/pdf-generator-demo/">/pdf-generator-demo/</a> <span>/opt/docker/apps/pdf-generator-demo</span></li>
|
||||
<li><a href="/git/">/git/</a> <span>/opt/docker/apps/my-git</span></li>
|
||||
<li><a href="/jellyfin/">/jellyfin/</a> <span>/opt/docker/apps/jellyfin</span></li>
|
||||
</ul>
|
||||
<p>Edit <code>config/proxy.yaml</code>, regenerate, then restart the proxy container.</p>
|
||||
</main>
|
||||
</body>
|
||||
</html>
|
||||
Reference in New Issue
Block a user