Initial commit

This commit is contained in:
Mickey
2026-07-03 19:06:49 +02:00
commit 32056c356f
16 changed files with 1067 additions and 0 deletions
+140
View File
@@ -0,0 +1,140 @@
map $http_upgrade $connection_upgrade {
default upgrade;
'' close;
}
server {
listen 80;
listen [::]:80;
server_name mnmsoft.hopto.org;
location /.well-known/acme-challenge/ {
root /var/www/certbot;
}
location / {
return 301 https://$host$request_uri;
}
}
server {
listen 443 ssl;
listen [::]:443 ssl;
http2 on;
server_name mnmsoft.hopto.org;
client_max_body_size 256M;
ssl_certificate /etc/letsencrypt/live/current/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/current/privkey.pem;
ssl_protocols TLSv1.2 TLSv1.3;
ssl_session_cache shared:SSL:10m;
ssl_session_timeout 10m;
add_header X-Frame-Options DENY;
add_header X-Content-Type-Options nosniff;
add_header X-XSS-Protection "1; mode=block";
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
location /.well-known/acme-challenge/ {
root /var/www/certbot;
}
# /opt/docker/apps/biogena-pdf-generator
location = /biogena-pdf-generator {
return 301 /biogena-pdf-generator/;
}
location /biogena-pdf-generator/ {
proxy_pass http://host.docker.internal:8092/;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Forwarded-Host $host;
proxy_set_header X-Forwarded-Port 443;
proxy_set_header X-Forwarded-Prefix /biogena-pdf-generator;
proxy_set_header X-Forwarded-Uri $request_uri;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $connection_upgrade;
proxy_http_version 1.1;
proxy_redirect off;
proxy_buffering off;
}
# /opt/docker/apps/pdf-generator-demo
location = /pdf-generator-demo {
return 301 /pdf-generator-demo/;
}
location /pdf-generator-demo/ {
proxy_pass http://host.docker.internal:8093/;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Forwarded-Host $host;
proxy_set_header X-Forwarded-Port 443;
proxy_set_header X-Forwarded-Prefix /pdf-generator-demo;
proxy_set_header X-Forwarded-Uri $request_uri;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $connection_upgrade;
proxy_http_version 1.1;
proxy_redirect off;
proxy_buffering off;
}
# /opt/docker/apps/my-git
location = /git {
return 301 /git/;
}
location /git/ {
proxy_pass http://host.docker.internal:3000/;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Forwarded-Host $host;
proxy_set_header X-Forwarded-Port 443;
proxy_set_header X-Forwarded-Prefix /git;
proxy_set_header X-Forwarded-Uri $request_uri;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $connection_upgrade;
proxy_http_version 1.1;
proxy_redirect off;
proxy_buffering off;
}
# /opt/docker/apps/jellyfin
location = /jellyfin {
return 301 /jellyfin/;
}
location /jellyfin/ {
proxy_pass http://host.docker.internal:8096;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Forwarded-Host $host;
proxy_set_header X-Forwarded-Port 443;
proxy_set_header X-Forwarded-Prefix /jellyfin;
proxy_set_header X-Forwarded-Uri $request_uri;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $connection_upgrade;
proxy_http_version 1.1;
proxy_redirect off;
proxy_buffering off;
}
location = / {
auth_basic "Restricted";
auth_basic_user_file /etc/nginx/.htpasswd;
root /usr/share/nginx/html;
try_files /index.html =404;
}
location / {
return 404;
}
}
+70
View File
@@ -0,0 +1,70 @@
<!doctype html>
<html lang="en">
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<title>mnmsoft.hopto.org proxy</title>
<style>
:root {
color-scheme: light;
font-family: "Segoe UI", sans-serif;
background: #f4f1ea;
color: #1f2933;
}
body {
margin: 0;
min-height: 100vh;
display: grid;
place-items: center;
background:
radial-gradient(circle at top left, rgba(192, 132, 84, 0.18), transparent 35%),
linear-gradient(135deg, #f7f3ec, #efe5d5);
}
main {
width: min(760px, calc(100vw - 2rem));
background: rgba(255, 255, 255, 0.92);
border: 1px solid rgba(31, 41, 51, 0.08);
border-radius: 20px;
padding: 2rem;
box-shadow: 0 24px 60px rgba(31, 41, 51, 0.12);
}
h1 {
margin-top: 0;
font-size: clamp(2rem, 5vw, 3rem);
}
ul {
padding-left: 1.25rem;
}
li {
margin: 0.8rem 0;
}
a {
color: #8f3b1b;
font-weight: 700;
text-decoration: none;
}
span {
color: #52606d;
font-size: 0.95rem;
}
code {
background: #f3ede3;
padding: 0.15rem 0.35rem;
border-radius: 6px;
}
</style>
</head>
<body>
<main>
<h1>mnmsoft.hopto.org</h1>
<p>Configured reverse-proxy routes:</p>
<ul>
<li><a href="/biogena-pdf-generator/">/biogena-pdf-generator/</a> <span>/opt/docker/apps/biogena-pdf-generator</span></li>
<li><a href="/pdf-generator-demo/">/pdf-generator-demo/</a> <span>/opt/docker/apps/pdf-generator-demo</span></li>
<li><a href="/git/">/git/</a> <span>/opt/docker/apps/my-git</span></li>
<li><a href="/jellyfin/">/jellyfin/</a> <span>/opt/docker/apps/jellyfin</span></li>
</ul>
<p>Edit <code>config/proxy.yaml</code>, regenerate, then restart the proxy container.</p>
</main>
</body>
</html>