github/reverse-proxy-confs
1
0
Fork 0
mirror of https://github.com/linuxserver/reverse-proxy-confs.git synced 2025-08-24 07:05:38 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Create kerberos.subdomain.conf.sample

Browse source 
For: 

https://kerberos.io/
https://hub.docker.com/r/kerberos/kerberos
This commit is contained in:
J. Scott Elblein 2021-11-12 22:50:37 -06:00 • committed by GitHub
commit 316f1de626
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 56 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

56
kerberos.subdomain.conf.sample Normal file
View file

@ -0,0 +1,56 @@
## Version 2021/11/11
# make sure that your dns has a cname set for kerberos and that your kerberos container is not using a base url
# also make sure to add the environment var: KERBEROSIO_SECURE_SSL: 'true' to your container to handle mixed-content errors (preferred method).
server {
listen 443 ssl;
listen [::]:443 ssl;
server_name kerberos.*;
include /config/nginx/ssl.conf;
client_max_body_size 0;
# enable for ldap auth, fill in ldap details in ldap.conf
#include /config/nginx/ldap.conf;
# enable for Authelia
#include /config/nginx/authelia-server.conf;
location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
#auth_basic_user_file /config/nginx/.htpasswd;
# enable the next two lines for ldap auth
#auth_request /auth;
#error_page 401 =200 /ldaplogin;
# enable for Authelia
#include /config/nginx/authelia-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app kerberos;
set $upstream_port 80;
set $upstream_proto http;
proxy_pass $upstream_proto://$upstream_app:$upstream_port;
# Uncomment as an alternative to KERBEROSIO_SECURE_SSL: 'true'
#add_header 'Content-Security-Policy' 'upgrade-insecure-requests';
}
# Livestream URL
location ~ (/kerberos)?/stream {
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app kerberos;
set $upstream_port 8889;
set $upstream_proto http;
proxy_pass $upstream_proto://$upstream_app:$upstream_port;
# Uncomment as an alternative to KERBEROSIO_SECURE_SSL: 'true'
#add_header 'Content-Security-Policy' 'upgrade-insecure-requests';
}
}