github/reverse-proxy-confs
1
0
Fork 0
mirror of https://github.com/linuxserver/reverse-proxy-confs.git synced 2025-07-05 04:26:02 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Add authentik config lines and adjust comments

Browse source
This commit is contained in:
Eric Nemchik 2023-02-05 16:23:06 -06:00
parent f7b1d157a0
commit 48f8a9950a
266 changed files with 2185 additions and 523 deletions
Download patch file Download diff file Expand all files Collapse all files

11
_template.subdomain.conf.sample
View file

@ -1,8 +1,9 @@
## Version 2022/09/08
## Version 2023/02/05
# REMOVE THIS LINE BEFORE SUBMITTING: The structure of the file (all of the existing lines) should be kept as close as possible to this template.
# REMOVE THIS LINE BEFORE SUBMITTING: Look through this file for <tags> and replace them. Review other sample files to see how things are done.
# REMOVE THIS LINE BEFORE SUBMITTING: The comment lines at the top of the file (below this line) should explain any prerequisites for using the proxy such as DNS or app settings.
# make sure that your dns has a cname set for <container_name> and that your <container_name> container is not using a base url
# make sure that your <container_name> container is named <container_name>
# make sure that your dns has a cname set for <container_name>
server {
listen 443 ssl;
@ -20,6 +21,9 @@ server {
# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;
location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
@ -31,6 +35,9 @@ server {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app <container_name>;

9
_template.subfolder.conf.sample
View file

@ -1,8 +1,10 @@
## Version 2022/09/08
## Version 2023/02/05
# REMOVE THIS LINE BEFORE SUBMITTING: The structure of the file (all of the existing lines) should be kept as close as possible to this template.
# REMOVE THIS LINE BEFORE SUBMITTING: Look through this file for <tags> and replace them. Review other sample files to see how things are done.
# REMOVE THIS LINE BEFORE SUBMITTING: The comment lines at the top of the file (below this line) should explain any prerequisites for using the proxy such as DNS or app settings.
# first go into <container_name> settings, under "General" set the URL Base to /<container_name>/ and restart the <container_name> container
# make sure that your <container_name> container is named <container_name>
# make sure that <container_name> is set to work with the base url /<container_name>/
location /<container_name> {
return 301 $scheme://$host/<container_name>/;
@ -19,6 +21,9 @@ location ^~ /<container_name>/ {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app <container_name>;

11
adguard.subdomain.conf.sample
View file

@ -1,5 +1,6 @@
## Version 2022/09/08
# make sure that your dns has a cname set for adguard and that your adguard container is named adguard
## Version 2023/02/05
# make sure that your adguard container is named adguard
# make sure that your dns has a cname set for adguard
server {
listen 443 ssl;
@ -17,6 +18,9 @@ server {
# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;
location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
@ -28,6 +32,9 @@ server {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app adguard;

8
adminer.subfolder.conf.sample
View file

@ -1,5 +1,6 @@
## Version 2022/09/08
# adminer does not require a base url setting, but the container needs to be named adminer
## Version 2023/02/05
# make sure that your adminer container is named adminer
# adminer does not require a base url setting
location /adminer {
return 301 $scheme://$host/adminer/;
@ -16,6 +17,9 @@ location ^~ /adminer/ {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app adminer;

11
adminmongo.subdomain.conf.sample
View file

@ -1,5 +1,6 @@
## Version 2022/09/08
# make sure that your dns has a cname set for adminmongo and that your adminmongo container is not using a base url
## Version 2023/02/05
# make sure that your adminmongo container is named adminmongo
# make sure that your dns has a cname set for adminmongo
server {
listen 443 ssl;
@ -17,6 +18,9 @@ server {
# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;
location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
@ -28,6 +32,9 @@ server {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app adminmongo;

11
airsonic.subdomain.conf.sample
View file

@ -1,5 +1,6 @@
## Version 2022/09/08
# make sure that your dns has a cname set for airsonic and that your airsonic container is not using a base url
## Version 2023/02/05
# make sure that your airsonic container is named airsonic
# make sure that your dns has a cname set for airsonic
# add `server.use-forward-headers=true` to `/config/application.properties` to ensure logs contain real source IP
server {
@ -18,6 +19,9 @@ server {
# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;
location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
@ -29,6 +33,9 @@ server {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app airsonic;

7
airsonic.subfolder.conf.sample
View file

@ -1,4 +1,6 @@
## Version 2022/09/08
## Version 2023/02/05
# make sure that your airsonic container is named airsonic
# make sure that airsonic is set to work with the base url /airsonic/
# set the CONTEXT_PATH variable to /airsonic in airsonic container.
location ^~ /airsonic {
@ -12,6 +14,9 @@ location ^~ /airsonic {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app airsonic;

24
apprise-api.subdomain.conf.sample
View file

@ -1,5 +1,6 @@
## Version 2022/08/16
# make sure that your dns has a cname set for apprise-api and that your apprise-api container is not using a base url
## Version 2023/02/05
# make sure that your apprise-api container is named apprise-api
# make sure that your dns has a cname set for apprise-api
server {
listen 443 ssl;
@ -11,24 +12,29 @@ server {
client_max_body_size 0;
# enable for ldap auth, fill in ldap details in ldap.conf
#include /config/nginx/ldap.conf;
# enable for ldap auth (requires ldap-location.conf in the location block)
#include /config/nginx/ldap-server.conf;
# enable for Authelia
# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;
location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
#auth_basic_user_file /config/nginx/.htpasswd;
# enable the next two lines for ldap auth
#auth_request /auth;
#error_page 401 =200 /ldaplogin;
# enable for ldap auth (requires ldap-server.conf in the server block)
#include /config/nginx/ldap-location.conf;
# enable for Authelia
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app apprise-api;

9
archisteamfarm.subdomain.conf.sample
View file

@ -1,4 +1,5 @@
## Version 2022/09/08
## Version 2023/02/05
# make sure that your archisteamfarm container is named archisteamfarm
# make sure that your dns has a cname set for archisteamfarm
server {
@ -17,6 +18,9 @@ server {
# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;
location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
@ -28,6 +32,9 @@ server {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app archisteamfarm;

11
aria2-with-webui.subdomain.conf.sample
View file

@ -1,5 +1,6 @@
## Version 2022/09/08
# Make sure that your dns has a cname set for aria2 and that your aria2-with-webui container is not using a base url
## Version 2023/02/05
# make sure that your aria2 container is named aria2-with-webui
# make sure that your dns has a cname set for aria2
#
# The RPC port will need to be changed to 443 in the AriaNg/WebUI-Aria2 settings or by using the AriaNg command api
# e.g. https://aria2.example.com/#!/settings/rpc/set/https/aria2.example.com/443/jsonrpc
@ -21,6 +22,9 @@ server {
# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;
location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
@ -32,6 +36,9 @@ server {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app aria2-with-webui;

11
audiobookshelf.subdomain.conf.sample
View file

@ -1,5 +1,6 @@
## Version 2022/09/08
# make sure that your dns has a cname set for audiobookshelf and that your audiobookshelf container is not using a base url
## Version 2023/02/05
# make sure that your audiobookshelf container is named audiobookshelf
# make sure that your dns has a cname set for audiobookshelf
server {
listen 443 ssl;
@ -17,6 +18,9 @@ server {
# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;
location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
@ -28,6 +32,9 @@ server {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app audiobookshelf;

7
audiobookshelf.subfolder.conf.sample
View file

@ -1,4 +1,6 @@
## Version 2022/09/08
## Version 2023/02/05
# make sure that your audiobookshelf container is named audiobookshelf
# make sure that audiobookshelf is set to work with the base url /audiobookshelf/
# set the CONTEXT_PATH variable to /audiobookshelf in audiobookshelf container.
location ^~ /audiobookshelf {
@ -12,6 +14,9 @@ location ^~ /audiobookshelf {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app audiobookshelf;

11
authelia.subdomain.conf.sample
View file

@ -1,9 +1,10 @@
## Version 2021/05/18
## Version 2023/02/05
# make sure that your authelia container is named authelia
# make sure that your dns has a cname set for authelia
# the default authelia-server and authelia-location confs included with letsencrypt rely on
# subfolder proxy at "/authelia" and enabling of this proxy conf is not necessary.
# But if you'd like to use authelia via subdomain, you can enable this proxy and set up your own
# authelia-server and authelia-location confs as described in authelia docs.
# the default authelia-server and authelia-location confs included with swag rely on
# a built-in subfolder proxy at "/authelia" and enabling this proxy conf is not necessary.
# But if you'd like to use authelia via subdomain, you can enable this proxy and set
# the $authelia_backed variable in the authelia-server.conf.
server {
listen 443 ssl;

26
authentik.subdomain.conf.sample Normal file
View file

@ -0,0 +1,26 @@
## Version 2023/02/05
# make sure that your authentik container is named authentik-server
# make sure that your dns has a cname set for authentik
server {
listen 443 ssl;
listen [::]:443 ssl;
server_name authentik.*;
include /config/nginx/ssl.conf;
client_max_body_size 0;
location / {
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app authentik-server;
set $upstream_port 9443;
set $upstream_proto http;
proxy_pass $upstream_proto://$upstream_app:$upstream_port;
proxy_set_header Host $host;
}
}

9
babybuddy.subdomain.conf.sample
View file

@ -1,4 +1,5 @@
## Version 2022/09/08
## Version 2023/02/05
# make sure that your babybuddy container is named babybuddy
# make sure that your dns has a cname set for babybuddy
server {
@ -17,6 +18,9 @@ server {
# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;
location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
@ -28,6 +32,9 @@ server {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app babybuddy;

11
bazarr.subdomain.conf.sample
View file

@ -1,5 +1,6 @@
## Version 2022/09/08
# make sure that your dns has a cname set for bazarr and that your bazarr container is not using a base url
## Version 2023/02/05
# make sure that your bazarr container is named bazarr
# make sure that your dns has a cname set for bazarr
server {
listen 443 ssl;
@ -17,6 +18,9 @@ server {
# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;
location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
@ -28,6 +32,9 @@ server {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app bazarr;

8
bazarr.subfolder.conf.sample
View file

@ -1,5 +1,6 @@
## Version 2022/09/08
# first go into bazarr settings, under "General" set the URL Base to /bazarr/ and restart the bazarr container
## Version 2023/02/05
# make sure that your bazarr container is named bazarr
# make sure that bazarr is set to work with the base url /bazarr/
location /bazarr {
return 301 $scheme://$host/bazarr/;
@ -16,6 +17,9 @@ location ^~ /bazarr/ {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app bazarr;

11
beets.subdomain.conf.sample
View file

@ -1,6 +1,7 @@
## Version 2022/09/08
## Version 2023/02/05
# make sure that your beets container is named beets
# make sure that your dns has a cname set for beets
#First edit beets.yml and enable the reverse proxy settings, under "web" add "reverse_proxy: true" and restart the beets container.
#Make sure that your dns has a cname set for beets and that your beets container is not using a base url
server {
listen 443 ssl;
@ -18,6 +19,9 @@ server {
# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;
location / {
#enable the next two lines for http auth
#auth_basic "Restricted";
@ -29,6 +33,9 @@ server {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app beets;

9
beets.subfolder.conf.sample
View file

@ -1,5 +1,7 @@
## Version 2022/09/08
#first edit beets.yml and enable the reverse proxy settings, under "web" add "reverse_proxy: true" and restart the beets container
## Version 2023/02/05
# make sure that your beets container is named beets
# make sure that beets is set to work with the base url /beets/
# first edit beets.yml and enable the reverse proxy settings, under "web" add "reverse_proxy: true" and restart the beets container
location /beets {
# enable the next two lines for http auth
@ -12,6 +14,9 @@ location /beets {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app beets;

15
bitwarden.subdomain.conf.sample
View file

@ -1,6 +1,6 @@
## Version 2022/09/08
# make sure that your dns has a cname set for bitwarden and that your bitwarden container is not using a base url
# make sure your bitwarden container is named "bitwarden"
## Version 2023/02/05
# make sure that your bitwarden container is named bitwarden
# make sure that your dns has a cname set for bitwarden
# set the environment variable WEBSOCKET_ENABLED=true on your bitwarden container
server {
@ -19,6 +19,9 @@ server {
# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;
location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
@ -30,6 +33,9 @@ server {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app bitwarden;
@ -50,6 +56,9 @@ server {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app bitwarden;

11
bitwarden.subfolder.conf.sample
View file

@ -1,6 +1,9 @@
## Version 2022/09/08
## Version 2023/02/05
# make sure that your bitwarden container is named bitwarden
# make sure that bitwarden is set to work with the base url /bitwarden/
## Environmental Variable DOMAIN=https://<DOMAIN>/bitwarden must be set in bitwarden container including subfolder.
## This is using ports 80 and 3012
location /bitwarden {
return 301 $scheme://$host/bitwarden/;
}
@ -16,6 +19,9 @@ location ^~ /bitwarden/ {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app bitwarden;
@ -36,6 +42,9 @@ location ~ (/bitwarden)?/admin {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app bitwarden;

9
boinc.subdomain.conf.sample
View file

@ -1,4 +1,5 @@
## Version 2022/09/08
## Version 2023/02/05
# make sure that your boinc container is named boinc
# make sure that your dns has a cname set for boinc
server {
@ -17,6 +18,9 @@ server {
# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;
location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
@ -28,6 +32,9 @@ server {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app boinc;

7
boinc.subfolder.conf.sample
View file

@ -1,4 +1,6 @@
## Version 2022/09/08
## Version 2023/02/05
# make sure that your bionc container is named bionc
# make sure that bionc is set to work with the base url /bionc/
# In boinc docker arguments, set an env variable for SUBFOLDER=/boinc/
location /boinc {
@ -16,6 +18,9 @@ location ^~ /boinc/ {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app boinc;

11
booksonic.subdomain.conf.sample
View file

@ -1,5 +1,6 @@
## Version 2022/09/08
# make sure that your dns has a cname set for booksonic and that your booksonic container is not using a base url
## Version 2023/02/05
# make sure that your booksonic container is named booksonic
# make sure that your dns has a cname set for booksonic
server {
listen 443 ssl;
@ -17,6 +18,9 @@ server {
# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;
location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
@ -28,6 +32,9 @@ server {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app booksonic;

7
booksonic.subfolder.conf.sample
View file

@ -1,4 +1,6 @@
## Version 2022/09/08
## Version 2023/02/05
# make sure that your booksonic container is named booksonic
# make sure that booksonic is set to work with the base url /booksonic/
# set the CONTEXT_PATH variable to /booksonic in booksonic container.
location ^~ /booksonic {
@ -12,6 +14,9 @@ location ^~ /booksonic {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app booksonic;

11
bookstack.subdomain.conf.sample
View file

@ -1,5 +1,6 @@
## Version 2022/09/08
# make sure that your dns has a cname set for bookstack and that your bookstack container is named bookstack
## Version 2023/02/05
# make sure that your bookstack container is named bookstack
# make sure that your dns has a cname set for bookstack
# Ensure you have the APP_URL Environment Variable set correctly in your Docker Run/Compose or in BookStack Env File (/www/.env)
# https://github.com/linuxserver/docker-bookstack#docker
@ -19,6 +20,9 @@ server {
# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;
location / {
#enable the next two lines for http auth
#auth_basic "Restricted";
@ -30,6 +34,9 @@ server {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app bookstack;

24
budge.subdomain.conf.sample
View file

@ -1,5 +1,6 @@
## Version 2021/05/18
# make sure that your dns has a cname set for budge and that your budge container is not using a base url
## Version 2023/02/05
# make sure that your budge container is named budge
# make sure that your dns has a cname set for budge
server {
listen 443 ssl;
@ -11,24 +12,29 @@ server {
client_max_body_size 0;
# enable for ldap auth, fill in ldap details in ldap.conf
#include /config/nginx/ldap.conf;
# enable for ldap auth (requires ldap-location.conf in the location block)
#include /config/nginx/ldap-server.conf;
# enable for Authelia
# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;
location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
#auth_basic_user_file /config/nginx/.htpasswd;
# enable the next two lines for ldap auth
#auth_request /auth;
#error_page 401 =200 /ldaplogin;
# enable for ldap auth (requires ldap-server.conf in the server block)
#include /config/nginx/ldap-location.conf;
# enable for Authelia
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app budge;

9
calibre-web.subdomain.conf.sample
View file

@ -1,4 +1,5 @@
## Version 2022/09/08
## Version 2023/02/05
# make sure that your calibre-web container is named calibre-web
# make sure that your dns has a cname set for calibre-web
server {
@ -17,6 +18,9 @@ server {
# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;
location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
@ -27,6 +31,9 @@ server {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
# To use Authelia to log in to Calibre-Web, make sure "Reverse Proxy Login" is
# enabled, "Reverse Proxy Header Name" is set to Remote-User, and each Authelia
# user also has a corresponding user manually created in Calibre-Web.

6
calibre-web.subfolder.conf.sample
View file

@ -1,4 +1,5 @@
## Version 2022/09/08
## Version 2023/02/05
# make sure that your calibre-web container is named calibre-web
# calibre-web does not require a base url setting
location /calibre-web {
@ -15,6 +16,9 @@ location ^~ /calibre-web/ {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
# To use Authelia to log in to Calibre-Web, make sure "Reverse Proxy Login" is
# enabled, "Reverse Proxy Header Name" is set to Remote-User, and each Authelia
# user also has a corresponding user manually created in Calibre-Web.

12
calibre.subdomain.conf.sample
View file

@ -1,4 +1,5 @@
## Version 2022/09/08
## Version 2023/02/05
# make sure that your calibre container is named calibre
# make sure that your dns has a cname set for calibre
# for the content server, go into calibre preferences / sharing over the net / advanced and
# set the first option for prefix url to '/content-server', save and restart the container
@ -20,6 +21,9 @@ server {
# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;
location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
@ -31,6 +35,9 @@ server {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app calibre;
@ -56,6 +63,9 @@ server {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app calibre;

10
calibre.subfolder.conf.sample
View file

@ -1,4 +1,6 @@
## Version 2022/09/08
## Version 2023/02/05
# make sure that your calibre container is named calibre
# make sure that calibre is set to work with the base url /calibre/
# In calibre docker arguments, set an env variable for SUBFOLDER=/calibre/
# for the content server, go into calibre preferences / sharing over the net / advanced and
# set the first option for prefix url to '/content-server', save and restart the container
@ -19,6 +21,9 @@ location ^~ /calibre/ {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app calibre;
@ -43,6 +48,9 @@ location ^~ /content-server/ {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app calibre;

12
castopod.subdomain.conf.sample
View file

@ -1,5 +1,7 @@
## Version 2022/10/06
# make sure that your dns has a cname set for castopod and that your castopod container is not using a base url
## Version 2023/02/05
# make sure that your castopod container is named castopod
# make sure that your dns has a cname set for castopod
server {
listen 443 ssl;
listen [::]:443 ssl;
@ -15,6 +17,9 @@ server {
# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;
location / {
# enable the next two lines for http auth
@ -27,6 +32,9 @@ server {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app castopod;

11
changedetection.subdomain.conf.sample
View file

@ -1,5 +1,6 @@
## Version 2022/09/08
# make sure that your dns has a cname set for changedetection and that your changedetection container is named changedetection
## Version 2023/02/05
# make sure that your changedetection container is named changedetection
# make sure that your dns has a cname set for changedetection
server {
listen 443 ssl;
@ -17,6 +18,9 @@ server {
# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;
location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
@ -28,6 +32,9 @@ server {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app changedetection;

11
chevereto.subdomain.conf.sample
View file

@ -1,5 +1,6 @@
## Version 2022/09/08
# make sure that your dns has a cname set for chevereto and that your chevereto container is not using a base url
## Version 2023/02/05
# make sure that your chevereto container is named chevereto
# make sure that your dns has a cname set for chevereto
server {
listen 443 ssl;
@ -17,6 +18,9 @@ server {
# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;
location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
@ -28,6 +32,9 @@ server {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app chevereto;

11
chronograf.subdomain.conf.sample
View file

@ -1,5 +1,6 @@
## Version 2022/09/08
# Make sure that your dns has a cname set for chronograf and that your chronograf container is not using a base url
## Version 2023/02/05
# make sure that your chronograf container is named chronograf
# make sure that your dns has a cname set for chronograf
server {
listen 443 ssl;
@ -17,6 +18,9 @@ server {
# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;
location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
@ -28,6 +32,9 @@ server {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app chronograf;

7
chronograf.subfolder.conf.sample
View file

@ -1,4 +1,6 @@
## Version 2022/09/08
## Version 2023/02/05
# make sure that your chronograf container is named chronograf
# make sure that chronograf is set to work with the base url /chronograf/
# add BASE_PATH=/chronograf environment variable to your docker compose/run
location /chronograf {
@ -16,6 +18,9 @@ location ^~ /chronograf/ {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app chronograf;

12
cloudbeaver.subdomain.conf.sample
View file

@ -1,6 +1,6 @@
## Version 2022/09/08
# make sure that your dns has a cname set for cloudbeaver and that your cloudbeaver container is not using a base url
# tested using dbeaver/cloudbeaver
## Version 2023/02/05
# make sure that your cloudbeaver container is named cloudbeaver
# make sure that your dns has a cname set for cloudbeaver
server {
listen 443 ssl;
@ -20,6 +20,9 @@ server {
# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;
location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
@ -31,6 +34,9 @@ server {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app cloudbeaver;

9
code-server.subdomain.conf.sample
View file

@ -1,4 +1,5 @@
## Version 2022/09/08
## Version 2023/02/05
# make sure that your code-server container is named code-server
# make sure that your dns has a cname set for code-server
server {
@ -17,6 +18,9 @@ server {
# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;
location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
@ -28,6 +32,9 @@ server {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app code-server;

8
codimd.subdomain.conf.sample
View file

@ -1,4 +1,4 @@
## Version 2022/09/08
## Version 2023/02/05
# make sure you have added the following environmental variables to your run command/compose file
# CMD_DOMAIN=codimd.server.com
# CMD_PROTOCOL_USESSL=true
@ -19,6 +19,9 @@ server {
# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;
location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
@ -30,6 +33,9 @@ server {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app codimd;

11
collabora.subdomain.conf.sample
View file

@ -1,5 +1,6 @@
## Version 2022/09/08
# make sure that your dns has a cname set for collabora and that your collabora container is named collabora
## Version 2023/02/05
# make sure that your collabora container is named collabora
# make sure that your dns has a cname set for collabora
server {
listen 443 ssl;
@ -17,6 +18,9 @@ server {
# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;
location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
@ -28,6 +32,9 @@ server {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app collabora;

11
commento.subdomain.conf.sample
View file

@ -1,5 +1,6 @@
## Version 2022/09/08
# make sure that your dns has a cname set for commento and that your commento config is not using a subdirectory.
## Version 2023/02/05
# make sure that your commento container is named commento
# make sure that your dns has a cname set for commento
server {
listen 443 ssl;
@ -17,6 +18,9 @@ server {
# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;
location / {
#enable the next two lines for http auth
#auth_basic "Restricted";
@ -28,6 +32,9 @@ server {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app commento;

11
couchpotato.subdomain.conf.sample
View file

@ -1,5 +1,6 @@
## Version 2022/09/08
# make sure that your dns has a cname set for couchpotato and that your couchpotato container is not using a base url
## Version 2023/02/05
# make sure that your couchpotato container is named couchpotato
# make sure that your dns has a cname set for couchpotato
server {
listen 443 ssl;
@ -17,6 +18,9 @@ server {
# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;
location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
@ -28,6 +32,9 @@ server {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app couchpotato;

8
couchpotato.subfolder.conf.sample
View file

@ -1,5 +1,6 @@
## Version 2022/09/08
# first go into couchpotato settings, under "General" set the URL Base to /couchpotato and restart the couchpotato container
## Version 2023/02/05
# make sure that your couchpotato container is named couchpotato
# make sure that couchpotato is set to work with the base url /couchpotato/
location ^~ /couchpotato {
# enable the next two lines for http auth
@ -12,6 +13,9 @@ location ^~ /couchpotato {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app couchpotato;

6
crontabui.subfolder.conf.sample
View file

@ -1,4 +1,5 @@
## Version 2022/09/08
## Version 2023/02/05
# make sure that your crontabui container is named crontabui
# crontabui does not require a base url setting
location /crontabui {
@ -16,6 +17,9 @@ location ^~ /crontabui/ {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app crontabui;

11
crowdsec-dashboard.subdomain.conf.sample
View file

@ -1,5 +1,6 @@
## Version 2022/09/08
# make sure that your dns has a cname set for crowdsec-dashboard and that your crowdsec-dashboard container is not using a base url
## Version 2023/02/05
# make sure that your crowdsec-dashboard container is named crowdsec-dashboard
# make sure that your dns has a cname set for crowdsec-dashboard
server {
listen 443 ssl;
@ -17,6 +18,9 @@ server {
# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;
location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
@ -28,6 +32,9 @@ server {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app crowdsec-dashboard;

24
crowdsec.subdomain.conf.sample
View file

@ -1,5 +1,6 @@
## Version 2022/08/26
# make sure that your dns has a cname set for crowdsec and that your crowdsec container is not using a base url
## Version 2023/02/05
# make sure that your crowdsec container is named crowdsec
# make sure that your dns has a cname set for crowdsec
server {
listen 443 ssl;
@ -11,24 +12,29 @@ server {
client_max_body_size 0;
# enable for ldap auth, fill in ldap details in ldap.conf
#include /config/nginx/ldap.conf;
# enable for ldap auth (requires ldap-location.conf in the location block)
#include /config/nginx/ldap-server.conf;
# enable for Authelia
# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;
location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
#auth_basic_user_file /config/nginx/.htpasswd;
# enable the next two lines for ldap auth
#auth_request /auth;
#error_page 401 =200 /ldaplogin;
# enable for ldap auth (requires ldap-server.conf in the server block)
#include /config/nginx/ldap-location.conf;
# enable for Authelia
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app crowdsec;

11
dashy.subdomain.conf.sample
View file

@ -1,5 +1,6 @@
## Version 2022/09/08
# make sure that your dns has a cname set for dashy and that your dashy container is not using a base url
## Version 2023/02/05
# make sure that your dashy container is named dashy
# make sure that your dns has a cname set for dashy
server {
listen 443 ssl;
@ -17,6 +18,9 @@ server {
# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;
location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
@ -28,6 +32,9 @@ server {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app dashy;

11
deluge.subdomain.conf.sample
View file

@ -1,5 +1,6 @@
## Version 2022/09/08
# make sure that your dns has a cname set for deluge and that your deluge container is not using a base url
## Version 2023/02/05
# make sure that your deluge container is named deluge
# make sure that your dns has a cname set for deluge
server {
listen 443 ssl;
@ -17,6 +18,9 @@ server {
# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;
location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
@ -28,6 +32,9 @@ server {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app deluge;

6
deluge.subfolder.conf.sample
View file

@ -1,4 +1,5 @@
## Version 2022/09/08
## Version 2023/02/05
# make sure that your deluge container is named deluge
# deluge does not require a base url setting
location /deluge {
@ -16,6 +17,9 @@ location ^~ /deluge/ {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app deluge;

9
dillinger.subdomain.conf.sample
View file

@ -1,4 +1,5 @@
## Version 2022/09/08
## Version 2023/02/05
# make sure that your dillinger container is named dillinger
# make sure that your dns has a cname set for dillinger
server {
@ -17,6 +18,9 @@ server {
# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;
location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
@ -28,6 +32,9 @@ server {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app dillinger;

12
documentserver.subdomain.conf.sample
View file

@ -1,6 +1,6 @@
## Version 2022/09/08
# Make sure that your dns has a cname set for onlyoffice named "documentserver"
# Make sure that the onlyoffice documentserver container is named "documentserver"
## Version 2023/02/05
# make sure that your onlyoffice documentserver container is named documentserver
# make sure that your dns has a cname set for documentserver
server {
listen 443 ssl;
@ -18,6 +18,9 @@ server {
# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;
location / {
#enable the next two lines for http auth
#auth_basic "Restricted";
@ -29,6 +32,9 @@ server {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app documentserver;

13
dokuwiki.subdomain.conf.sample
View file

@ -1,6 +1,7 @@
## Version 2022/09/08
# First complete the setup by appending install.php to URL.
# Make sure that your dns has a cname set for dokuwiki
## Version 2023/02/05
# make sure that your dokuwiki container is named dokuwiki
# make sure that your dns has a cname set for dokuwiki
# complete the setup by appending install.php to URL
server {
listen 443 ssl;
@ -18,6 +19,9 @@ server {
# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;
location / {
#enable the next two lines for http auth
#auth_basic "Restricted";
@ -29,6 +33,9 @@ server {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app dokuwiki;

7
dokuwiki.subfolder.conf.sample
View file

@ -1,4 +1,6 @@
## Version 2022/09/08
## Version 2023/02/05
# make sure that your dokuwiki container is named dokuwiki
# make sure that dokuwiki is set to work with the base url /dokuwiki/
# first go into dokuwiki settings (Admin on the top left when Logged in), under "Configuration Settings" set the "basedir" to /dokuwiki/ and restart the dokuwiki container
location /dokuwiki {
@ -16,6 +18,9 @@ location ^~ /dokuwiki/ {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app dokuwiki;

11
domoticz.subdomain.conf.sample
View file

@ -1,5 +1,6 @@
## Version 2022/09/08
# Make sure that your dns has a cname set for domoticz and that your domoticz container is not using a base url
## Version 2023/02/05
# make sure that your domoticz container is named domoticz
# make sure that your dns has a cname set for domoticz
server {
listen 443 ssl;
@ -17,6 +18,9 @@ server {
# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;
location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
@ -28,6 +32,9 @@ server {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app domoticz;

7
domoticz.subfolder.conf.sample
View file

@ -1,4 +1,6 @@
## Version 2022/09/08
## Version 2023/02/05
# make sure that your domoticz container is named domoticz
# make sure that domoticz is set to work with the base url /domoticz/
# set the WEBROOT variable to domoticz for the domoticz container.
location ^~ /domoticz/ {
@ -12,6 +14,9 @@ location ^~ /domoticz/ {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app domoticz;

11
dozzle.subdomain.conf.sample
View file

@ -1,5 +1,6 @@
## Version 2022/09/08
# make sure that your dns has a cname set for dozzle and that your dozzle container is named dozzle
## Version 2023/02/05
# make sure that your dozzle container is named dozzle
# make sure that your dns has a cname set for dozzle
server {
listen 443 ssl;
@ -17,6 +18,9 @@ server {
# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;
location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
@ -28,6 +32,9 @@ server {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app dozzle;

7
dozzle.subfolder.conf.sample
View file

@ -1,4 +1,6 @@
## Version 2022/09/08
## Version 2023/02/05
# make sure that your dozzle container is named dozzle
# make sure that dozzle is set to work with the base url /dozzle/
# First either add "--base /dozzle" or "-e DOZZLE_BASE=/dozzle" to your docker run command, and restart the Dozzle container
location /dozzle {
@ -16,6 +18,9 @@ location ^~ /dozzle/ {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app dozzle;

11
drone.subdomain.conf.sample
View file

@ -1,4 +1,7 @@
## Version 2022/09/08
## Version 2023/02/05
# make sure that your drone container is named drone
# make sure that your dns has a cname set for drone
server {
listen 443 ssl;
listen [::]:443 ssl;
@ -15,6 +18,9 @@ server {
# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;
location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
@ -26,6 +32,9 @@ server {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app drone;

11
duplicati.subdomain.conf.sample
View file

@ -1,5 +1,6 @@
## Version 2022/09/08
# make sure that your dns has a cname set for duplicati and that your duplicati container is not using a base url
## Version 2023/02/05
# make sure that your duplicati container is named duplicati
# make sure that your dns has a cname set for duplicati
server {
listen 443 ssl;
@ -17,6 +18,9 @@ server {
# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;
location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
@ -28,6 +32,9 @@ server {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app duplicati;

9
duplicati.subfolder.conf.sample
View file

@ -1,5 +1,7 @@
## Version 2022/09/08
# duplicati does not require a base url setting. DUPLICATI AUTH WILL NOT WORK WITH THIS CONFIG, use the auth options below
## Version 2023/02/05
# make sure that your duplicati container is named duplicati
# duplicati does not require a base url setting
# DUPLICATI AUTH WILL NOT WORK WITH THIS CONFIG, use the auth options below
location /duplicati {
return 301 $scheme://$host/duplicati/;
@ -16,6 +18,9 @@ location ^~ /duplicati/ {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app duplicati;

5
emby.subdomain.conf.sample
View file

@ -1,5 +1,6 @@
## Version 2021/05/18
# make sure that your dns has a cname set for emby and that your emby container is not using a base url
## Version 2023/02/05
# make sure that your emby container is named emby
# make sure that your dns has a cname set for emby
# if emby is running in bridge mode and the container is named "emby", the below config should work as is
# if not, replace the line "set $upstream_app emby;" with "set $upstream_app <containername>;"
# or "set $upstream_app <HOSTIP>;" for host mode, HOSTIP being the IP address of emby

5
emby.subfolder.conf.sample
View file

@ -1,5 +1,6 @@
## Version 2021/05/18
# make sure that your dns has a cname set for emby
## Version 2023/02/05
# make sure that your emby container is named emby
# emby does not require a base url setting
# if emby is running in bridge mode and the container is named "emby", the below config should work as is
# if not, replace the line "set $upstream_app emby;" with "set $upstream_app <containername>;"
# or "set $upstream_app <HOSTIP>;" for host mode, HOSTIP being the IP address of emby

9
embystat.subdomain.conf.sample
View file

@ -1,4 +1,5 @@
## Version 2022/09/08
## Version 2023/02/05
# make sure that your embystat container is named embystat
# make sure that your dns has a cname set for embystat
server {
@ -17,6 +18,9 @@ server {
# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;
location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
@ -28,6 +32,9 @@ server {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app embystat;

12
emulatorjs.subdomain.conf.sample
View file

@ -1,4 +1,5 @@
## Version 2022/09/08
## Version 2023/02/05
# make sure that your emulatorjs container is named emulatorjs
# make sure that your dns has a cname set for emulatorjs
# In emulatorjs docker arguments, set an env variable for SUBFOLDER=/backend/
# The backend interface will be accessible at https://emulatorjs.yourdomain.com/backend/
@ -20,6 +21,9 @@ server {
# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;
location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
@ -31,6 +35,9 @@ server {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app emulatorjs;
@ -54,6 +61,9 @@ server {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app emulatorjs;

11
filebot.subdomain.conf.sample
View file

@ -1,5 +1,6 @@
## Version 2022/09/08
# make sure that your dns has a cname set for filebot and that your filebot container is not using a base url
## Version 2023/02/05
# make sure that your filebot container is named filebot
# make sure that your dns has a cname set for filebot
server {
listen 443 ssl;
@ -17,6 +18,9 @@ server {
# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;
location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
@ -28,6 +32,9 @@ server {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app filebot;

6
filebot.subfolder.conf.sample
View file

@ -1,4 +1,5 @@
## Version 2022/09/08
## Version 2023/02/05
# make sure that your filebot container is named filebot
# filebot does not require a base url setting
location /filebot {
@ -16,6 +17,9 @@ location ^~ /filebot/ {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app filebot;

11
filebrowser.subdomain.conf.sample
View file

@ -1,5 +1,6 @@
## Version 2022/09/08
# make sure that your dns has a cname set for filebrowser and that your filebrowser container is not using a base url
## Version 2023/02/05
# make sure that your filebrowser container is named filebrowser
# make sure that your dns has a cname set for filebrowser
server {
listen 443 ssl;
@ -17,6 +18,9 @@ server {
# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;
location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
@ -28,6 +32,9 @@ server {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app filebrowser;

7
filebrowser.subfolder.conf.sample
View file

@ -1,4 +1,6 @@
## Version 2022/12/25
## Version 2023/02/05
# make sure that your filebrowser container is named filebrowser
# make sure that filebrowser is set to work with the base url /filebrowser/
# set this environment variable on your filebrowser container FB_BASEURL=/filebrowser
location /filebrowser {
@ -16,6 +18,9 @@ location ^~ /filebrowser/ {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app filebrowser;

11
firefly.subdomain.conf.sample
View file

@ -1,5 +1,6 @@
## Version 2022/09/08
# make sure that your dns has a cname set for firefly and that your firefly container is not using a base url
## Version 2023/02/05
# make sure that your firefly container is named firefly
# make sure that your dns has a cname set for firefly
server {
listen 443 ssl;
@ -17,6 +18,9 @@ server {
# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;
location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
@ -28,6 +32,9 @@ server {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app firefly;

11
firefox.subdomain.conf.sample
View file

@ -1,5 +1,6 @@
## Version 2022/09/08
# make sure that your dns has a cname set for firefox and that your firefox container is not using a base url
## Version 2023/02/05
# make sure that your firefox container is named firefox
# make sure that your dns has a cname set for firefox
server {
listen 443 ssl;
@ -17,6 +18,9 @@ server {
# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;
location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
@ -28,6 +32,9 @@ server {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app firefox;

9
flexget.subdomain.conf.sample
View file

@ -1,4 +1,5 @@
## Version 2022/09/08
## Version 2023/02/05
# make sure that your flexget container is named flexget
# make sure that your dns has a cname set for flexget
server {
@ -17,6 +18,9 @@ server {
# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;
location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
@ -28,6 +32,9 @@ server {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app flexget;

61
flexget.subfolder.conf.sample
View file

@ -1,34 +1,45 @@
## Version 2022/09/08
## Version 2023/02/05
# make sure that your flexget container is named flexget
# make sure that flexget is set to work with the base url /flexget/
# make sure to set 'base_url: /flexget' under your flexget's config.yml web_server block
#
location /flexget {
return 301 $scheme://$host/flexget/;
}
location ^~ /flexget/ {
# enable the next two lines for http auth
#auth_basic "Restricted";
#auth_basic_user_file /config/nginx/.htpasswd;
location ^~ /flexget/ {
# enable the next two lines for http auth
#auth_basic "Restricted";
#auth_basic_user_file /config/nginx/.htpasswd;
# enable for ldap auth (requires ldap-server.conf in the server block)
#include /config/nginx/ldap-location.conf;
# enable for ldap auth (requires ldap-server.conf in the server block)
#include /config/nginx/ldap-location.conf;
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app flexget;
set $upstream_port 5050;
set $upstream_proto http;
proxy_pass $upstream_proto://$upstream_app:$upstream_port;
}
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
location ^~ /flexget/api/ {
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app flexget;
set $upstream_port 5050;
set $upstream_proto http;
proxy_pass $upstream_proto://$upstream_app:$upstream_port;
}
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app flexget;
set $upstream_port 5050;
set $upstream_proto http;
proxy_pass $upstream_proto://$upstream_app:$upstream_port;
}
location ^~ /flexget/api/ {
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app flexget;
set $upstream_port 5050;
set $upstream_proto http;
proxy_pass $upstream_proto://$upstream_app:$upstream_port;
}

11
flood.subdomain.conf.sample
View file

@ -1,5 +1,6 @@
## Version 2022/09/08
# make sure that your dns has a cname set for flood and that your flood container is not using a base url
## Version 2023/02/05
# make sure that your flood container is named flood
# make sure that your dns has a cname set for flood
server {
listen 443 ssl;
@ -17,6 +18,9 @@ server {
# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;
location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
@ -28,6 +32,9 @@ server {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app flood;

6
flood.subfolder.conf.sample
View file

@ -1,4 +1,5 @@
## Version 2022/09/08
## Version 2023/02/05
# make sure that your flood container is named flood
# flood does not require a base url setting
location /flood {
@ -16,6 +17,9 @@ location ^~ /flood/ {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app flood;

9
foldingathome.subdomain.conf.sample
View file

@ -1,4 +1,5 @@
## Version 2022/09/08
## Version 2023/02/05
# make sure that your foldingathome container is named foldingathome
# make sure that your dns has a cname set for foldingathome
server {
@ -17,6 +18,9 @@ server {
# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;
location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
@ -28,6 +32,9 @@ server {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
proxy_buffering off;
include /config/nginx/resolver.conf;

9
foundryvtt.subdomain.conf.sample
View file

@ -1,4 +1,5 @@
## Version 2022/09/08
## Version 2023/02/05
# make sure that your foundryvtt container is named foundryvtt
# make sure that your dns has a cname set for foundryvtt
# Ensure that your Foundry VTT's {userData}/Config/options.json file is configured as follows:
# "hostname": "your.hostname.com",
@ -26,6 +27,9 @@ server {
# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;
location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
@ -37,6 +41,9 @@ server {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app foundryvtt;

9
freshrss.subdomain.conf.sample
View file

@ -1,4 +1,5 @@
## Version 2022/09/08
## Version 2023/02/05
# make sure that your freshrss container is named freshrss
# make sure that your dns has a cname set for freshrss
server {
@ -17,6 +18,9 @@ server {
# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;
location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
@ -28,6 +32,9 @@ server {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app freshrss;

8
freshrss.subfolder.conf.sample
View file

@ -1,5 +1,6 @@
## Version 2022/09/08
# freshrss does not have a base url setting
## Version 2023/02/05
# make sure that your freshrss container is named freshrss
# freshrss does not require a base url setting
location /freshrss {
return 301 $scheme://$host/freshrss/;
@ -16,6 +17,9 @@ location ^~ /freshrss/ {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app freshrss;

11
gaps.subdomain.conf.sample
View file

@ -1,5 +1,6 @@
## Version 2022/09/08
# make sure that your dns has a cname set for gaps and that your gaps container is not using a base url
## Version 2023/02/05
# make sure that your gaps container is named gaps
# make sure that your dns has a cname set for gaps
server {
listen 443 ssl;
@ -17,6 +18,9 @@ server {
# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;
location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
@ -28,6 +32,9 @@ server {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app gaps;

7
gaps.subfolder.conf.sample
View file

@ -1,4 +1,6 @@
## Version 2022/09/08
## Version 2023/02/05
# make sure that your gaps container is named gaps
# make sure that gaps is set to work with the base url /gaps/
# In your Docker compose (or docker run) add: BASE_URL: /gaps
location /gaps {
@ -16,6 +18,9 @@ location ^~ /gaps/ {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app gaps;

11
get_iplayer.subdomain.conf.sample
View file

@ -1,5 +1,6 @@
## Version 2022/09/08
# make sure that your dns has a cname set for get_iplayer and that your get_iplayer container is named get_iplayer
## Version 2023/02/05
# make sure that your get_iplayer container is named get_iplayer
# make sure that your dns has a cname set for get_iplayer
server {
listen 443 ssl;
@ -17,6 +18,9 @@ server {
# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;
location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
@ -28,6 +32,9 @@ server {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app get_iplayer;

11
ghost.subdomain.conf.sample
View file

@ -1,5 +1,6 @@
## Version 2022/09/08
# make sure that your dns has a cname set for ghost and that your ghost config is not using a subdirectory.
## Version 2023/02/05
# make sure that your ghost container is named ghost
# make sure that your dns has a cname set for ghost
server {
listen 443 ssl;
@ -17,6 +18,9 @@ server {
# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;
location / {
#enable the next two lines for http auth
#auth_basic "Restricted";
@ -28,6 +32,9 @@ server {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app ghost;

7
ghost.subfolder.conf.sample
View file

@ -1,4 +1,6 @@
## Version 2022/09/08
## Version 2023/02/05
# make sure that your ghost container is named ghost
# make sure that ghost is set to work with the base url /ghost/
# Make sure you are using a subfolder in your ghost config file. https://ghost.org/docs/concepts/config/#url
# Note: /ghost/ is by default used for the admin page. See https://ghost.org/docs/concepts/config/#admin-url
@ -13,6 +15,9 @@ location /blog {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app ghost;

12
gitea.subdomain.conf.sample
View file

@ -1,5 +1,7 @@
## Version 2022/09/08
# make sure that your dns has a cname set for gitea and the following parameters in /data/gitea/conf/app.ini are edited
## Version 2023/02/05
# make sure that your gitea container is named gitea
# make sure that your dns has a cname set for gitea
# edit the following parameters in /data/gitea/conf/app.ini
# [server]
# SSH_DOMAIN = gitea.server.com
# ROOT_URL = https://gitea.server.com/
@ -21,6 +23,9 @@ server {
# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;
location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
@ -32,6 +37,9 @@ server {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app gitea;

4
gitea.subfolder.conf.sample
View file

@ -1,4 +1,6 @@
## Version 2021/05/18
## Version 2023/02/05
# make sure that your gitea container is named gitea
# make sure that gitea is set to work with the base url /gitea/
# The following parameters in /data/gitea/conf/app.ini should be edited to match your setup
# [server]
# SSH_DOMAIN = example.com:2222

11
glances.subdomain.conf.sample
View file

@ -1,5 +1,6 @@
## Version 2022/09/08
# make sure that your dns has a cname set for glances and that your glances container is not using a base url
## Version 2023/02/05
# make sure that your glances container is named glances
# make sure that your dns has a cname set for glances
server {
listen 443 ssl;
@ -17,6 +18,9 @@ server {
# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;
location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
@ -28,6 +32,9 @@ server {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app glances;

6
glances.subfolder.conf.sample
View file

@ -1,4 +1,5 @@
## Version 2022/09/08
## Version 2023/02/05
# make sure that your glances container is named glances
# glances does not require a base url setting
location /glances {
@ -16,6 +17,9 @@ location ^~ /glances/ {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app glances;

9
gotify.subdomain.conf.sample
View file

@ -1,4 +1,5 @@
## Version 2022/09/08
## Version 2023/02/05
# make sure that your gotify container is named gotify
# make sure that your dns has a cname set for gotify
server {
@ -17,6 +18,9 @@ server {
# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;
location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
@ -28,6 +32,9 @@ server {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app gotify;

8
gotify.subfolder.conf.sample
View file

@ -1,5 +1,6 @@
## Version 2022/09/08
# gotify doesn't require a base url
## Version 2023/02/05
# make sure that your gotify container is named gotify
# gotify does not require a base url setting
location /gotify {
return 301 $scheme://$host/gotify/;
@ -16,6 +17,9 @@ location /gotify/ {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app gotify;

11
grafana.subdomain.conf.sample
View file

@ -1,5 +1,6 @@
## Version 2022/09/08
# make sure that your dns has a cname set for grafana and that your grafana container is not using a base url
## Version 2023/02/05
# make sure that your grafana container is named grafana
# make sure that your dns has a cname set for grafana
server {
listen 443 ssl;
@ -17,6 +18,9 @@ server {
# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;
location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
@ -28,6 +32,9 @@ server {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app grafana;

7
grafana.subfolder.conf.sample
View file

@ -1,4 +1,6 @@
## Version 2022/09/08
## Version 2023/02/05
# make sure that your grafana container is named grafana
# make sure that grafana is set to work with the base url /grafana/
# grafana requires environment variables set thus:
# environment:
# - "GF_SERVER_ROOT_URL=https://my.domain.com/grafana"
@ -15,6 +17,9 @@ location ^~ /grafana/ {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_grafana grafana;

11
graylog.subdomain.conf.sample
View file

@ -1,7 +1,8 @@
## Version 2022/10/05
## Version 2023/02/05
# make sure that your graylog container is named graylog
# make sure that your dns has a cname set for graylog
# Ensure the upstream_port matches your GRAYLOG_HTTP_BIND_ADDRESS port
# This conf assumes GRAYLOG_HTTP_BIND_ADDRESS=0.0.0.0:9000
# make sure that your dns has a cname set for graylog and that your graylog container is not using a base url
server {
listen 443 ssl;
@ -19,6 +20,9 @@ server {
# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;
location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
@ -30,6 +34,9 @@ server {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app graylog;

9
grocy.subdomain.conf.sample
View file

@ -1,4 +1,5 @@
## Version 2022/09/08
## Version 2023/02/05
# make sure that your grocy container is named grocy
# make sure that your dns has a cname set for grocy
server {
@ -17,6 +18,9 @@ server {
# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;
location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
@ -28,6 +32,9 @@ server {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app grocy;

11
guacamole.subdomain.conf.sample
View file

@ -1,5 +1,6 @@
## Version 2022/09/08
# make sure that your dns has a cname set for guacamole and that your guacamole container is not using a base url
## Version 2023/02/05
# make sure that your guacamole container is named guacamole
# make sure that your dns has a cname set for guacamole
server {
listen 443 ssl;
@ -17,6 +18,9 @@ server {
# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;
location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
@ -28,6 +32,9 @@ server {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app guacamole;

6
guacamole.subfolder.conf.sample
View file

@ -1,4 +1,5 @@
## Version 2022/09/08
## Version 2023/02/05
# make sure that your guacamole container is named guacamole
# guacamole does not require a base url setting
location /guacamole {
@ -16,6 +17,9 @@ location ^~ /guacamole/ {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app guacamole;

11
hass-configurator.subdomain.conf.sample
View file

@ -1,5 +1,6 @@
## Version 2022/09/08
# make sure that your dns has a cname set for hass configurator
## Version 2023/02/05
# make sure that your hass container is named hass
# make sure that your dns has a cname set for hass
# this proxy configuration file is for the hass-configurator-docker container that is used
# in the hassos addon store (https://github.com/CausticLab/hass-configurator-docker)
@ -19,6 +20,9 @@ server {
# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;
location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
@ -30,6 +34,9 @@ server {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app hass-configurator;

9
headphones.subdomain.conf.sample
View file

@ -1,4 +1,5 @@
## Version 2022/09/08
## Version 2023/02/05
# make sure that your headphones container is named headphones
# make sure that your dns has a cname set for headphones
server {
@ -17,6 +18,9 @@ server {
# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;
location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
@ -28,6 +32,9 @@ server {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app headphones;

7
headphones.subfolder.conf.sample
View file

@ -1,4 +1,6 @@
## Version 2022/09/08
## Version 2023/02/05
# make sure that your headphones container is named headphones
# make sure that headphones is set to work with the base url /headphones/
# first stop the headphones container and edit the config.ini for headphones and set http_root to /headphones and then start the headphones container
location ^~ /headphones {
@ -12,6 +14,9 @@ location ^~ /headphones {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app headphones;

11
healthchecks.subdomain.conf.sample
View file

@ -1,5 +1,6 @@
## Version 2022/09/08
# make sure that your dns has a cname set for <container_name> and that your <container_name> container is not using a base url
## Version 2023/02/05
# make sure that your healthchecks container is named healthchecks
# make sure that your dns has a cname set for healthchecks
# make sure your Healthchecks ALLOWED_HOSTS and SITE_ROOT align with the server_name used in this conf.
server {
@ -18,6 +19,9 @@ server {
# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;
location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
@ -29,6 +33,9 @@ server {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app healthchecks;

8
hedgedoc.subdomain.conf.sample
View file

@ -1,4 +1,4 @@
## Version 2022/09/08
## Version 2023/02/05
# make sure you set the following environment variables in your docker arguments
# CMD_DOMAIN=hedgedoc.server.com
# CMD_URL_ADDPORT=false
@ -20,6 +20,9 @@ server {
# enable for Authelia (requires authelia-location.conf in the location block)
#include /config/nginx/authelia-server.conf;
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;
location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
@ -31,6 +34,9 @@ server {
# enable for Authelia (requires authelia-server.conf in the server block)
#include /config/nginx/authelia-location.conf;
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;
include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app hedgedoc;

Some files were not shown because too many files have changed in this diff Show more