From 1d05e4e0bce735111313195363741d04428e48c0 Mon Sep 17 00:00:00 2001
From: aptalca <aptalca@users.noreply.github.com>
Date: Sat, 3 Dec 2022 15:12:37 -0500
Subject: [PATCH] add https support for internal openvscode-server port

---
 openvscode-server.subdomain.conf.sample | 41 ++++++++++++++++++++++++-
 1 file changed, 40 insertions(+), 1 deletion(-)

diff --git a/openvscode-server.subdomain.conf.sample b/openvscode-server.subdomain.conf.sample
index dd575dc..47d9e3e 100644
--- a/openvscode-server.subdomain.conf.sample
+++ b/openvscode-server.subdomain.conf.sample
@@ -1,5 +1,8 @@
-## Version 2022/09/08
+## Version 2022/12/03
 # make sure that your dns has a cname set for openvscode-server
+# This conf allows accessing internal ports at `PORT` (http) or `PORTs` (https) as subdomain
+# Access http port 8080 at `https://8080.openvscode-server.domain.url`
+# Access https port 8080 at `https://8080s.openvscode-server.domain.url`
 
 server {
     listen 443 ssl;
@@ -73,3 +76,39 @@ server {
 
     }
 }
+
+server {
+    listen 443 ssl;
+    listen [::]:443 ssl;
+
+    server_name "~^(?<upstream_port>[0-9]{1,10})s\.openvscode-server\..*$";
+
+    include /config/nginx/ssl.conf;
+
+    client_max_body_size 0;
+
+    # enable for ldap auth (requires ldap-location.conf in the location block)
+    #include /config/nginx/ldap-server.conf;
+
+    # enable for Authelia (requires authelia-location.conf in the location block)
+    #include /config/nginx/authelia-server.conf;
+
+    location / {
+        # enable the next two lines for http auth
+        #auth_basic "Restricted";
+        #auth_basic_user_file /config/nginx/.htpasswd;
+
+        # enable for ldap auth (requires ldap-server.conf in the server block)
+        #include /config/nginx/ldap-location.conf;
+
+        # enable for Authelia (requires authelia-server.conf in the server block)
+        #include /config/nginx/authelia-location.conf;
+
+        include /config/nginx/proxy.conf;
+        include /config/nginx/resolver.conf;
+        set $upstream_app openvscode-server;
+        set $upstream_proto https;
+        proxy_pass $upstream_proto://$upstream_app:$upstream_port;
+
+    }
+}