From f151d51c85789aa3120986ba35213d494ec63a21 Mon Sep 17 00:00:00 2001 From: codevski <1435321+codevski@users.noreply.github.com> Date: Fri, 19 Jul 2024 11:19:29 +1000 Subject: [PATCH 01/13] change dashy port --- dashy.subdomain.conf.sample | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/dashy.subdomain.conf.sample b/dashy.subdomain.conf.sample index e4b7607..a07b854 100644 --- a/dashy.subdomain.conf.sample +++ b/dashy.subdomain.conf.sample @@ -38,7 +38,7 @@ server { include /config/nginx/proxy.conf; include /config/nginx/resolver.conf; set $upstream_app dashy; - set $upstream_port 80; + set $upstream_port 8080; set $upstream_proto http; proxy_pass $upstream_proto://$upstream_app:$upstream_port; } From 3e8fefdf0a34d254b70fea7496bda5865e47c2b1 Mon Sep 17 00:00:00 2001 From: geekau Date: Sun, 4 Aug 2024 11:23:04 +1000 Subject: [PATCH 02/13] Add sample configs for whisparr and ddns-updater --- ddns-updater.subdomain.conf.sample | 55 ++++++++++++++++++++++++++++++ ddns-updater.subfolder.conf.sample | 35 +++++++++++++++++++ whisparr.subdomain.conf.sample | 55 ++++++++++++++++++++++++++++++ whisparr.subfolder.conf.sample | 35 +++++++++++++++++++ 4 files changed, 180 insertions(+) create mode 100644 ddns-updater.subdomain.conf.sample create mode 100644 ddns-updater.subfolder.conf.sample create mode 100644 whisparr.subdomain.conf.sample create mode 100644 whisparr.subfolder.conf.sample diff --git a/ddns-updater.subdomain.conf.sample b/ddns-updater.subdomain.conf.sample new file mode 100644 index 0000000..a3e2f2e --- /dev/null +++ b/ddns-updater.subdomain.conf.sample @@ -0,0 +1,55 @@ +# make sure that your ddns-updater container is named ddns-updater +# make sure that your dns has a cname set for ddns-updater + +server { + listen 443 ssl; + listen [::]:443 ssl; + + server_name ddns-updater.*; + + include /config/nginx/ssl.conf; + + client_max_body_size 0; + + # enable for ldap auth (requires ldap-location.conf in the location block) + #include /config/nginx/ldap-server.conf; + + # enable for Authelia (requires authelia-location.conf in the location block) + #include /config/nginx/authelia-server.conf; + + # enable for Authentik (requires authentik-location.conf in the location block) + #include /config/nginx/authentik-server.conf; + + location / { + # enable the next two lines for http auth + #auth_basic "Restricted"; + #auth_basic_user_file /config/nginx/.htpasswd; + + # enable for ldap auth (requires ldap-server.conf in the server block) + #include /config/nginx/ldap-location.conf; + + # enable for Authelia (requires authelia-server.conf in the server block) + #include /config/nginx/authelia-location.conf; + + # enable for Authentik (requires authentik-server.conf in the server block) + #include /config/nginx/authentik-location.conf; + + include /config/nginx/proxy.conf; + include /config/nginx/resolver.conf; + set $upstream_app ddns-updater; + set $upstream_port 8000; + set $upstream_proto http; + proxy_pass $upstream_proto://$upstream_app:$upstream_port; + + } + + location ~ (/ddns-updater)?/api { + include /config/nginx/proxy.conf; + include /config/nginx/resolver.conf; + set $upstream_app ddns-updater; + set $upstream_port 8000; + set $upstream_proto http; + proxy_pass $upstream_proto://$upstream_app:$upstream_port; + + } +} \ No newline at end of file diff --git a/ddns-updater.subfolder.conf.sample b/ddns-updater.subfolder.conf.sample new file mode 100644 index 0000000..e4cdf9f --- /dev/null +++ b/ddns-updater.subfolder.conf.sample @@ -0,0 +1,35 @@ +# make sure that your ddns-updater container is named ddns-updater +# make sure that ddns-updater is set to work with the base url /ddns-updater/ + +location ^~ /ddns-updater { + # enable the next two lines for http auth + #auth_basic "Restricted"; + #auth_basic_user_file /config/nginx/.htpasswd; + + # enable for ldap auth (requires ldap-server.conf in the server block) + #include /config/nginx/ldap-location.conf; + + # enable for Authelia (requires authelia-server.conf in the server block) + #include /config/nginx/authelia-location.conf; + + # enable for Authentik (requires authentik-server.conf in the server block) + #include /config/nginx/authentik-location.conf; + + include /config/nginx/proxy.conf; + include /config/nginx/resolver.conf; + set $upstream_app ddns-updater; + set $upstream_port 8000; + set $upstream_proto http; + proxy_pass $upstream_proto://$upstream_app:$upstream_port; + +} + +location ^~ /ddns-updater/api { + include /config/nginx/proxy.conf; + include /config/nginx/resolver.conf; + set $upstream_app ddns-updater; + set $upstream_port 8000; + set $upstream_proto http; + proxy_pass $upstream_proto://$upstream_app:$upstream_port; + +} \ No newline at end of file diff --git a/whisparr.subdomain.conf.sample b/whisparr.subdomain.conf.sample new file mode 100644 index 0000000..5a70b7e --- /dev/null +++ b/whisparr.subdomain.conf.sample @@ -0,0 +1,55 @@ +# make sure that your whisparr container is named whisparr +# make sure that your dns has a cname set for whisparr + +server { + listen 443 ssl; + listen [::]:443 ssl; + + server_name whisparr.*; + + include /config/nginx/ssl.conf; + + client_max_body_size 0; + + # enable for ldap auth (requires ldap-location.conf in the location block) + #include /config/nginx/ldap-server.conf; + + # enable for Authelia (requires authelia-location.conf in the location block) + #include /config/nginx/authelia-server.conf; + + # enable for Authentik (requires authentik-location.conf in the location block) + #include /config/nginx/authentik-server.conf; + + location / { + # enable the next two lines for http auth + #auth_basic "Restricted"; + #auth_basic_user_file /config/nginx/.htpasswd; + + # enable for ldap auth (requires ldap-server.conf in the server block) + #include /config/nginx/ldap-location.conf; + + # enable for Authelia (requires authelia-server.conf in the server block) + #include /config/nginx/authelia-location.conf; + + # enable for Authentik (requires authentik-server.conf in the server block) + #include /config/nginx/authentik-location.conf; + + include /config/nginx/proxy.conf; + include /config/nginx/resolver.conf; + set $upstream_app whisparr; + set $upstream_port 6969; + set $upstream_proto http; + proxy_pass $upstream_proto://$upstream_app:$upstream_port; + + } + + location ~ (/whisparr)?/api { + include /config/nginx/proxy.conf; + include /config/nginx/resolver.conf; + set $upstream_app whisparr; + set $upstream_port 6969; + set $upstream_proto http; + proxy_pass $upstream_proto://$upstream_app:$upstream_port; + + } +} \ No newline at end of file diff --git a/whisparr.subfolder.conf.sample b/whisparr.subfolder.conf.sample new file mode 100644 index 0000000..0b61066 --- /dev/null +++ b/whisparr.subfolder.conf.sample @@ -0,0 +1,35 @@ +# make sure that your whisparr container is named whisparr +# make sure that whisparr is set to work with the base url /whisparr/ + +location ^~ /whisparr { + # enable the next two lines for http auth + #auth_basic "Restricted"; + #auth_basic_user_file /config/nginx/.htpasswd; + + # enable for ldap auth (requires ldap-server.conf in the server block) + #include /config/nginx/ldap-location.conf; + + # enable for Authelia (requires authelia-server.conf in the server block) + #include /config/nginx/authelia-location.conf; + + # enable for Authentik (requires authentik-server.conf in the server block) + #include /config/nginx/authentik-location.conf; + + include /config/nginx/proxy.conf; + include /config/nginx/resolver.conf; + set $upstream_app whisparr; + set $upstream_port 6969; + set $upstream_proto http; + proxy_pass $upstream_proto://$upstream_app:$upstream_port; + +} + +location ^~ /whisparr/api { + include /config/nginx/proxy.conf; + include /config/nginx/resolver.conf; + set $upstream_app whisparr; + set $upstream_port 6969; + set $upstream_proto http; + proxy_pass $upstream_proto://$upstream_app:$upstream_port; + +} \ No newline at end of file From e07e26c755b9c84cd8807f7d97d634290807f226 Mon Sep 17 00:00:00 2001 From: geekau Date: Sun, 4 Aug 2024 12:15:43 +1000 Subject: [PATCH 03/13] Update ddns-updater.subdomain.conf.sample Added version date --- ddns-updater.subdomain.conf.sample | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/ddns-updater.subdomain.conf.sample b/ddns-updater.subdomain.conf.sample index a3e2f2e..e02a809 100644 --- a/ddns-updater.subdomain.conf.sample +++ b/ddns-updater.subdomain.conf.sample @@ -1,3 +1,4 @@ +## Version 2024/08/04 # make sure that your ddns-updater container is named ddns-updater # make sure that your dns has a cname set for ddns-updater @@ -52,4 +53,4 @@ server { proxy_pass $upstream_proto://$upstream_app:$upstream_port; } -} \ No newline at end of file +} From 670eec1795bae8fc6c2f4d6d569ae815f3eaa115 Mon Sep 17 00:00:00 2001 From: geekau Date: Sun, 4 Aug 2024 12:16:14 +1000 Subject: [PATCH 04/13] Update ddns-updater.subfolder.conf.sample added version date --- ddns-updater.subfolder.conf.sample | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/ddns-updater.subfolder.conf.sample b/ddns-updater.subfolder.conf.sample index e4cdf9f..f4ad7e9 100644 --- a/ddns-updater.subfolder.conf.sample +++ b/ddns-updater.subfolder.conf.sample @@ -1,3 +1,4 @@ +## Version 2024/08/04 # make sure that your ddns-updater container is named ddns-updater # make sure that ddns-updater is set to work with the base url /ddns-updater/ @@ -32,4 +33,4 @@ location ^~ /ddns-updater/api { set $upstream_proto http; proxy_pass $upstream_proto://$upstream_app:$upstream_port; -} \ No newline at end of file +} From c94f57fb1ff313a228a4aa5c827db80ef4b5b341 Mon Sep 17 00:00:00 2001 From: geekau Date: Sun, 4 Aug 2024 12:16:43 +1000 Subject: [PATCH 05/13] Update whisparr.subdomain.conf.sample added version date --- whisparr.subdomain.conf.sample | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/whisparr.subdomain.conf.sample b/whisparr.subdomain.conf.sample index 5a70b7e..a900e3b 100644 --- a/whisparr.subdomain.conf.sample +++ b/whisparr.subdomain.conf.sample @@ -1,3 +1,4 @@ +## Version 2024/08/04 # make sure that your whisparr container is named whisparr # make sure that your dns has a cname set for whisparr @@ -52,4 +53,4 @@ server { proxy_pass $upstream_proto://$upstream_app:$upstream_port; } -} \ No newline at end of file +} From fc36461bb663366708f25e28b4bb4d01376cb6fb Mon Sep 17 00:00:00 2001 From: geekau Date: Sun, 4 Aug 2024 12:17:05 +1000 Subject: [PATCH 06/13] Update whisparr.subfolder.conf.sample added version date --- whisparr.subfolder.conf.sample | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/whisparr.subfolder.conf.sample b/whisparr.subfolder.conf.sample index 0b61066..13d3693 100644 --- a/whisparr.subfolder.conf.sample +++ b/whisparr.subfolder.conf.sample @@ -1,3 +1,4 @@ +## Version 2024/08/04 # make sure that your whisparr container is named whisparr # make sure that whisparr is set to work with the base url /whisparr/ @@ -32,4 +33,4 @@ location ^~ /whisparr/api { set $upstream_proto http; proxy_pass $upstream_proto://$upstream_app:$upstream_port; -} \ No newline at end of file +} From f646ec25dd68f10949efd36214c87517e1447f77 Mon Sep 17 00:00:00 2001 From: jlssmt Date: Sun, 4 Aug 2024 23:43:19 +0200 Subject: [PATCH 07/13] added dockge configs --- dockge.subdomain.conf.sample | 46 ++++++++++++++++++++++++++++++++++++ dockge.subfolder.conf.sample | 31 ++++++++++++++++++++++++ 2 files changed, 77 insertions(+) create mode 100644 dockge.subdomain.conf.sample create mode 100644 dockge.subfolder.conf.sample diff --git a/dockge.subdomain.conf.sample b/dockge.subdomain.conf.sample new file mode 100644 index 0000000..c3562b9 --- /dev/null +++ b/dockge.subdomain.conf.sample @@ -0,0 +1,46 @@ +## Version 2024/07/16 +# make sure that your dockge container is named dockge +# make sure that your dns has a cname set for dockge + +server { + listen 443 ssl; + listen [::]:443 ssl; + + server_name dockge.*; + + include /config/nginx/ssl.conf; + + client_max_body_size 0; + + # enable for ldap auth (requires ldap-location.conf in the location block) + #include /config/nginx/ldap-server.conf; + + # enable for Authelia (requires authelia-location.conf in the location block) + #include /config/nginx/authelia-server.conf; + + # enable for Authentik (requires authentik-location.conf in the location block) + #include /config/nginx/authentik-server.conf; + + location / { + # enable the next two lines for http auth + #auth_basic "Restricted"; + #auth_basic_user_file /config/nginx/.htpasswd; + + # enable for ldap auth (requires ldap-server.conf in the server block) + #include /config/nginx/ldap-location.conf; + + # enable for Authelia (requires authelia-server.conf in the server block) + #include /config/nginx/authelia-location.conf; + + # enable for Authentik (requires authentik-server.conf in the server block) + #include /config/nginx/authentik-location.conf; + + include /config/nginx/proxy.conf; + include /config/nginx/resolver.conf; + set $upstream_app dockge; + set $upstream_port 5001; + set $upstream_proto http; + proxy_pass $upstream_proto://$upstream_app:$upstream_port; + + } +} diff --git a/dockge.subfolder.conf.sample b/dockge.subfolder.conf.sample new file mode 100644 index 0000000..5dbb617 --- /dev/null +++ b/dockge.subfolder.conf.sample @@ -0,0 +1,31 @@ +## Version 2023/02/05 +# make sure that your dockge container is named dockge +# make sure that dockge is set to work with the base url /dockge/ + + +location /dockge { + return 301 $scheme://$host/dockge/; +} + +location ^~ /dockge/ { + # enable the next two lines for http auth + #auth_basic "Restricted"; + #auth_basic_user_file /config/nginx/.htpasswd; + + # enable for ldap auth (requires ldap-server.conf in the server block) + #include /config/nginx/ldap-location.conf; + + # enable for Authelia (requires authelia-server.conf in the server block) + #include /config/nginx/authelia-location.conf; + + # enable for Authentik (requires authentik-server.conf in the server block) + #include /config/nginx/authentik-location.conf; + + include /config/nginx/proxy.conf; + include /config/nginx/resolver.conf; + set $upstream_app dockge; + set $upstream_port 5001; + set $upstream_proto http; + proxy_pass $upstream_proto://$upstream_app:$upstream_port; + +} From 381861306a22a56f128e3528d71a63eb1e04c4f1 Mon Sep 17 00:00:00 2001 From: jlssmt Date: Sun, 4 Aug 2024 23:30:21 +0200 Subject: [PATCH 08/13] added paperless configs --- paperless.subdomain.conf.sample | 46 +++++++++++++++++++++++++++++++++ paperless.subfolder.conf.sample | 30 +++++++++++++++++++++ 2 files changed, 76 insertions(+) create mode 100644 paperless.subdomain.conf.sample create mode 100644 paperless.subfolder.conf.sample diff --git a/paperless.subdomain.conf.sample b/paperless.subdomain.conf.sample new file mode 100644 index 0000000..7692091 --- /dev/null +++ b/paperless.subdomain.conf.sample @@ -0,0 +1,46 @@ +## Version 2024/07/16 +# make sure that your paperless container is named paperless +# make sure that your dns has a cname set for paperless + +server { + listen 443 ssl; + listen [::]:443 ssl; + + server_name paperless.*; + + include /config/nginx/ssl.conf; + + client_max_body_size 0; + + # enable for ldap auth (requires ldap-location.conf in the location block) + #include /config/nginx/ldap-server.conf; + + # enable for Authelia (requires authelia-location.conf in the location block) + #include /config/nginx/authelia-server.conf; + + # enable for Authentik (requires authentik-location.conf in the location block) + #include /config/nginx/authentik-server.conf; + + location / { + # enable the next two lines for http auth + #auth_basic "Restricted"; + #auth_basic_user_file /config/nginx/.htpasswd; + + # enable for ldap auth (requires ldap-server.conf in the server block) + #include /config/nginx/ldap-location.conf; + + # enable for Authelia (requires authelia-server.conf in the server block) + #include /config/nginx/authelia-location.conf; + + # enable for Authentik (requires authentik-server.conf in the server block) + #include /config/nginx/authentik-location.conf; + + include /config/nginx/proxy.conf; + include /config/nginx/resolver.conf; + set $upstream_app paperless; + set $upstream_port 8000; + set $upstream_proto http; + proxy_pass $upstream_proto://$upstream_app:$upstream_port; + + } +} diff --git a/paperless.subfolder.conf.sample b/paperless.subfolder.conf.sample new file mode 100644 index 0000000..73f6baf --- /dev/null +++ b/paperless.subfolder.conf.sample @@ -0,0 +1,30 @@ +## Version 2023/02/05 +# make sure that your paperless container is named paperless +# make sure that paperless is set to work with the base url /paperless/ + +location /paperless { + return 301 $scheme://$host/paperless/; +} + +location ^~ /paperless/ { + # enable the next two lines for http auth + #auth_basic "Restricted"; + #auth_basic_user_file /config/nginx/.htpasswd; + + # enable for ldap auth (requires ldap-server.conf in the server block) + #include /config/nginx/ldap-location.conf; + + # enable for Authelia (requires authelia-server.conf in the server block) + #include /config/nginx/authelia-location.conf; + + # enable for Authentik (requires authentik-server.conf in the server block) + #include /config/nginx/authentik-location.conf; + + include /config/nginx/proxy.conf; + include /config/nginx/resolver.conf; + set $upstream_app paperless; + set $upstream_port 8000; + set $upstream_proto http; + proxy_pass $upstream_proto://$upstream_app:$upstream_port; + +} From 3215197e9a596a84851975b582cb76e2b5b25e3b Mon Sep 17 00:00:00 2001 From: Zakarot <12112333+Zakarot@users.noreply.github.com> Date: Sun, 18 Aug 2024 19:51:19 -0400 Subject: [PATCH 09/13] Create lubelogger.subdomain.conf.sample --- lubelogger.subdomain.conf.sample | 46 ++++++++++++++++++++++++++++++++ 1 file changed, 46 insertions(+) create mode 100644 lubelogger.subdomain.conf.sample diff --git a/lubelogger.subdomain.conf.sample b/lubelogger.subdomain.conf.sample new file mode 100644 index 0000000..ec0c66b --- /dev/null +++ b/lubelogger.subdomain.conf.sample @@ -0,0 +1,46 @@ +## Version 2024/08/18 +# make sure that your lubelogger container is named lubelogger +# make sure that your dns has a cname set for lubelogger + +server { + listen 443 ssl; + listen [::]:443 ssl; + + server_name lubelogger.*; + + include /config/nginx/ssl.conf; + + client_max_body_size 0; + + # enable for ldap auth (requires ldap-location.conf in the location block) + #include /config/nginx/ldap-server.conf; + + # enable for Authelia (requires authelia-location.conf in the location block) + #include /config/nginx/authelia-server.conf; + + # enable for Authentik (requires authentik-location.conf in the location block) + #include /config/nginx/authentik-server.conf; + + location / { + # enable the next two lines for http auth + #auth_basic "Restricted"; + #auth_basic_user_file /config/nginx/.htpasswd; + + # enable for ldap auth (requires ldap-server.conf in the server block) + #include /config/nginx/ldap-location.conf; + + # enable for Authelia (requires authelia-server.conf in the server block) + #include /config/nginx/authelia-location.conf; + + # enable for Authentik (requires authentik-server.conf in the server block) + #include /config/nginx/authentik-location.conf; + + include /config/nginx/proxy.conf; + include /config/nginx/resolver.conf; + set $upstream_app lubelogger; + set $upstream_port 8080; + set $upstream_proto http; + proxy_pass $upstream_proto://$upstream_app:$upstream_port; + + } +} From e923048e76ff1d3947275ffbd44af764c562f3b1 Mon Sep 17 00:00:00 2001 From: ltp Date: Thu, 22 Aug 2024 19:39:18 -0300 Subject: [PATCH 10/13] restrict access to metrics endpoint in subdomain https://jellyfin.org/docs/general/networking/monitoring/#prometheus-metrics --- jellyfin.subdomain.conf.sample | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) diff --git a/jellyfin.subdomain.conf.sample b/jellyfin.subdomain.conf.sample index 479ca30..da0c45b 100644 --- a/jellyfin.subdomain.conf.sample +++ b/jellyfin.subdomain.conf.sample @@ -37,4 +37,22 @@ server { proxy_pass $upstream_proto://$upstream_app:$upstream_port; } + + # Restrict access to /metrics + # https://jellyfin.org/docs/general/networking/monitoring/#prometheus-metrics + location /jellyfin/metrics { + allow 192.168.0.0/16; + allow 10.0.0.0/8; + allow 172.16.0.0/12 + allow 127.0.0.0/8; + + deny all; + + include /config/nginx/proxy.conf; + include /config/nginx/resolver.conf; + set $upstream_app jellyfin; + set $upstream_port 8096; + set $upstream_proto http; + proxy_pass $upstream_proto://$upstream_app:$upstream_port; + } } From 41d2b0c17a55425c3cfad044f01cef54f3b04450 Mon Sep 17 00:00:00 2001 From: ltp Date: Thu, 22 Aug 2024 20:03:06 -0300 Subject: [PATCH 11/13] update version --- jellyfin.subdomain.conf.sample | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/jellyfin.subdomain.conf.sample b/jellyfin.subdomain.conf.sample index da0c45b..95c7f81 100644 --- a/jellyfin.subdomain.conf.sample +++ b/jellyfin.subdomain.conf.sample @@ -1,4 +1,4 @@ -## Version 2024/07/16 +## Version 2024/08/22 # make sure that your jellyfin container is named jellyfin # make sure that your dns has a cname set for jellyfin # if jellyfin is running in bridge mode and the container is named "jellyfin", the below config should work as is From 5ab73be89b3b00f8a056311d160c059453f3c8fe Mon Sep 17 00:00:00 2001 From: ltp Date: Thu, 22 Aug 2024 20:06:49 -0300 Subject: [PATCH 12/13] fix missing semi colon --- jellyfin.subdomain.conf.sample | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/jellyfin.subdomain.conf.sample b/jellyfin.subdomain.conf.sample index 95c7f81..ffc92c4 100644 --- a/jellyfin.subdomain.conf.sample +++ b/jellyfin.subdomain.conf.sample @@ -43,7 +43,7 @@ server { location /jellyfin/metrics { allow 192.168.0.0/16; allow 10.0.0.0/8; - allow 172.16.0.0/12 + allow 172.16.0.0/12; allow 127.0.0.0/8; deny all; From 7efa252e1316f760a2e644d56ed76a5d5e44fcef Mon Sep 17 00:00:00 2001 From: ltp Date: Fri, 23 Aug 2024 09:44:11 -0300 Subject: [PATCH 13/13] fix metrics path --- jellyfin.subdomain.conf.sample | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/jellyfin.subdomain.conf.sample b/jellyfin.subdomain.conf.sample index ffc92c4..36d1e73 100644 --- a/jellyfin.subdomain.conf.sample +++ b/jellyfin.subdomain.conf.sample @@ -40,7 +40,7 @@ server { # Restrict access to /metrics # https://jellyfin.org/docs/general/networking/monitoring/#prometheus-metrics - location /jellyfin/metrics { + location /metrics { allow 192.168.0.0/16; allow 10.0.0.0/8; allow 172.16.0.0/12;