github/reverse-proxy-confs
1
0
Fork 0
mirror of https://github.com/linuxserver/reverse-proxy-confs.git synced 2025-07-06 04:51:33 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Cleanup redundant headers from proxy.conf

Browse source 
Also general cleanup of whitespace
This commit is contained in:
Eric Nemchik 2020-09-01 11:56:42 -05:00
parent 64499676be
commit 54ede40938
60 changed files with 79 additions and 133 deletions
Download patch file Download diff file Expand all files Collapse all files

2
adguard.subdomain.conf.sample
View file

@ -44,6 +44,6 @@ server {
set $upstream_port 80; set $upstream_port 80;
set $upstream_proto http; set $upstream_proto http;
proxy_pass $upstream_proto://$upstream_app:$upstream_port; proxy_pass $upstream_proto://$upstream_app:$upstream_port;
} }
} }

1
adminer.subfolder.conf.sample
View file

@ -3,6 +3,7 @@
location /adminer { location /adminer {
return 301 $scheme://$host/adminer/; return 301 $scheme://$host/adminer/;
} }
location ^~ /adminer/ { location ^~ /adminer/ {
# enable the next two lines for http auth # enable the next two lines for http auth
#auth_basic "Restricted"; #auth_basic "Restricted";

4
bazarr.subdomain.conf.sample
View file

@ -35,8 +35,6 @@ server {
set $upstream_proto http; set $upstream_proto http;
proxy_pass $upstream_proto://$upstream_app:$upstream_port; proxy_pass $upstream_proto://$upstream_app:$upstream_port;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "Upgrade";
} }
location ~ (/bazarr)?/api { location ~ (/bazarr)?/api {
@ -47,7 +45,5 @@ server {
set $upstream_proto http; set $upstream_proto http;
proxy_pass $upstream_proto://$upstream_app:$upstream_port; proxy_pass $upstream_proto://$upstream_app:$upstream_port;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "Upgrade";
} }
} }

5
bazarr.subfolder.conf.sample
View file

@ -3,6 +3,7 @@
location /bazarr { location /bazarr {
return 301 $scheme://$host/bazarr/; return 301 $scheme://$host/bazarr/;
} }
location ^~ /bazarr/ { location ^~ /bazarr/ {
# enable the next two lines for http auth # enable the next two lines for http auth
#auth_basic "Restricted"; #auth_basic "Restricted";
@ -22,8 +23,6 @@ location ^~ /bazarr/ {
set $upstream_proto http; set $upstream_proto http;
proxy_pass $upstream_proto://$upstream_app:$upstream_port; proxy_pass $upstream_proto://$upstream_app:$upstream_port;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "Upgrade";
} }
location ^~ /bazarr/api { location ^~ /bazarr/api {
@ -34,6 +33,4 @@ location ^~ /bazarr/api {
set $upstream_proto http; set $upstream_proto http;
proxy_pass $upstream_proto://$upstream_app:$upstream_port; proxy_pass $upstream_proto://$upstream_app:$upstream_port;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "Upgrade";
} }

2
beets.subfolder.conf.sample
View file

@ -19,8 +19,6 @@ location /beets {
set $upstream_proto http; set $upstream_proto http;
proxy_pass $upstream_proto://$upstream_app:$upstream_port; proxy_pass $upstream_proto://$upstream_app:$upstream_port;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Scheme $scheme; proxy_set_header X-Scheme $scheme;
proxy_set_header X-Script-Name /beets; proxy_set_header X-Script-Name /beets;
} }

27
bitwarden.subdomain.conf.sample
View file

@ -1,5 +1,6 @@
# make sure that your dns has a cname set for bitwarden and that your bitwarden container is not using a base url # make sure that your dns has a cname set for bitwarden and that your bitwarden container is not using a base url
# make sure your bitwarden container is named "bitwarden" # make sure your bitwarden container is named "bitwarden"
# set the environment variable WEBSOCKET_ENABLED=true on your bitwarden container
server { server {
listen 443 ssl; listen 443 ssl;
@ -38,7 +39,18 @@ server {
} }
location /notifications/hub { location /admin {
# enable the next two lines for http auth
#auth_basic "Restricted";
#auth_basic_user_file /config/nginx/.htpasswd;
# enable the next two lines for ldap auth
#auth_request /auth;
#error_page 401 =200 /ldaplogin;
# enable for Authelia
#include /config/nginx/authelia-location.conf;
include /config/nginx/proxy.conf; include /config/nginx/proxy.conf;
resolver 127.0.0.11 valid=30s; resolver 127.0.0.11 valid=30s;
set $upstream_app bitwarden; set $upstream_app bitwarden;
@ -46,8 +58,16 @@ server {
set $upstream_proto http; set $upstream_proto http;
proxy_pass $upstream_proto://$upstream_app:$upstream_port; proxy_pass $upstream_proto://$upstream_app:$upstream_port;
proxy_set_header Upgrade $http_upgrade; }
proxy_set_header Connection "Upgrade";
location /notifications/hub {
include /config/nginx/proxy.conf;
resolver 127.0.0.11 valid=30s;
set $upstream_app bitwarden;
set $upstream_port 3012;
set $upstream_proto http;
proxy_pass $upstream_proto://$upstream_app:$upstream_port;
} }
location /notifications/hub/negotiate { location /notifications/hub/negotiate {
@ -59,5 +79,4 @@ server {
proxy_pass $upstream_proto://$upstream_app:$upstream_port; proxy_pass $upstream_proto://$upstream_app:$upstream_port;
} }
} }

2
bookstack.subdomain.conf.sample
View file

@ -37,5 +37,5 @@ server {
set $upstream_proto http; set $upstream_proto http;
proxy_pass $upstream_proto://$upstream_app:$upstream_port; proxy_pass $upstream_proto://$upstream_app:$upstream_port;
} }
} }

1
calibre-web.subfolder.conf.sample
View file

@ -3,6 +3,7 @@
location /calibre-web { location /calibre-web {
return 301 $scheme://$host/calibre-web/; return 301 $scheme://$host/calibre-web/;
} }
location ^~ /calibre-web/ { location ^~ /calibre-web/ {
# enable the next two lines for http auth # enable the next two lines for http auth
#auth_basic "Restricted"; #auth_basic "Restricted";

2
calibre.subdomain.conf.sample
View file

@ -35,7 +35,5 @@ server {
proxy_pass $upstream_proto://$upstream_app:$upstream_port; proxy_pass $upstream_proto://$upstream_app:$upstream_port;
proxy_buffering off; proxy_buffering off;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $http_connection;
} }
} }

1
calibre.subfolder.conf.sample
View file

@ -3,6 +3,7 @@
location /calibre { location /calibre {
return 301 $scheme://$host/calibre/; return 301 $scheme://$host/calibre/;
} }
location ^~ /calibre/ { location ^~ /calibre/ {
# enable the next two lines for http auth # enable the next two lines for http auth
#auth_basic "Restricted"; #auth_basic "Restricted";

2
code-server.subdomain.conf.sample
View file

@ -35,7 +35,5 @@ server {
set $upstream_proto http; set $upstream_proto http;
proxy_pass $upstream_proto://$upstream_app:$upstream_port; proxy_pass $upstream_proto://$upstream_app:$upstream_port;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection upgrade;
} }
} }

4
collabora.subdomain.conf.sample
View file

@ -49,8 +49,6 @@ server {
set $upstream_proto https; set $upstream_proto https;
proxy_pass $upstream_proto://$upstream_app:$upstream_port; proxy_pass $upstream_proto://$upstream_app:$upstream_port;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "Upgrade";
proxy_set_header Host $http_host; proxy_set_header Host $http_host;
proxy_read_timeout 36000s; proxy_read_timeout 36000s;
} }
@ -74,8 +72,6 @@ server {
set $upstream_proto https; set $upstream_proto https;
proxy_pass $upstream_proto://$upstream_app:$upstream_port; proxy_pass $upstream_proto://$upstream_app:$upstream_port;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "Upgrade";
proxy_set_header Host $http_host; proxy_set_header Host $http_host;
proxy_read_timeout 36000s; proxy_read_timeout 36000s;
} }

1
deluge.subfolder.conf.sample
View file

@ -3,6 +3,7 @@
location /deluge { location /deluge {
return 301 $scheme://$host/deluge/; return 301 $scheme://$host/deluge/;
} }
location ^~ /deluge/ { location ^~ /deluge/ {
# enable the next two lines for http auth # enable the next two lines for http auth
#auth_basic "Restricted"; #auth_basic "Restricted";

3
documentserver.subdomain.conf.sample
View file

@ -35,9 +35,6 @@ server {
set $upstream_port 80; set $upstream_port 80;
set $upstream_proto http; set $upstream_proto http;
proxy_pass $upstream_proto://$upstream_app:$upstream_port; proxy_pass $upstream_proto://$upstream_app:$upstream_port;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection upgrade;
} }
} }

1
dozzle.subfolder.conf.sample
View file

@ -3,6 +3,7 @@
location /dozzle { location /dozzle {
return 301 $scheme://$host/dozzle/; return 301 $scheme://$host/dozzle/;
} }
location ^~ /dozzle/ { location ^~ /dozzle/ {
# enable the next two lines for http auth # enable the next two lines for http auth
#auth_basic "Restricted"; #auth_basic "Restricted";

1
duplicati.subfolder.conf.sample
View file

@ -3,6 +3,7 @@
location /duplicati { location /duplicati {
return 301 $scheme://$host/duplicati/; return 301 $scheme://$host/duplicati/;
} }
location ^~ /duplicati/ { location ^~ /duplicati/ {
# enable the next two lines for http auth # enable the next two lines for http auth
#auth_basic "Restricted"; #auth_basic "Restricted";

5
emby.subdomain.conf.sample
View file

@ -25,8 +25,5 @@ server {
proxy_set_header Range $http_range; proxy_set_header Range $http_range;
proxy_set_header If-Range $http_if_range; proxy_set_header If-Range $http_if_range;
}
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $http_connection;
}
} }

3
emby.subfolder.conf.sample
View file

@ -8,6 +8,7 @@
location /emby { location /emby {
return 301 $scheme://$host/emby/; return 301 $scheme://$host/emby/;
} }
location ^~ /emby/ { location ^~ /emby/ {
include /config/nginx/proxy.conf; include /config/nginx/proxy.conf;
resolver 127.0.0.11 valid=30s; resolver 127.0.0.11 valid=30s;
@ -28,6 +29,4 @@ location ^~ /embywebsocket {
set $upstream_proto http; set $upstream_proto http;
proxy_pass $upstream_proto://$upstream_app:$upstream_port; proxy_pass $upstream_proto://$upstream_app:$upstream_port;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $http_connection;
} }

1
flood.subfolder.conf.sample
View file

@ -3,6 +3,7 @@
location /flood { location /flood {
return 301 $scheme://$host/flood/; return 301 $scheme://$host/flood/;
} }
location ^~ /flood/ { location ^~ /flood/ {
# enable the next two lines for http auth # enable the next two lines for http auth
#auth_basic "Restricted"; #auth_basic "Restricted";

1
glances.subfolder.conf.sample
View file

@ -3,6 +3,7 @@
location /glances { location /glances {
return 301 $scheme://$host/glances/; return 301 $scheme://$host/glances/;
} }
location ^~ /glances/ { location ^~ /glances/ {
# enable the next two lines for http auth # enable the next two lines for http auth
#auth_basic "Restricted"; #auth_basic "Restricted";

5
gotify.subdomain.conf.sample
View file

@ -34,7 +34,6 @@ server {
set $upstream_port 80; set $upstream_port 80;
set $upstream_proto http; set $upstream_proto http;
proxy_pass $upstream_proto://$upstream_app:$upstream_port; proxy_pass $upstream_proto://$upstream_app:$upstream_port;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
} }
} }

1
grocy.subdomain.conf.sample
View file

@ -36,5 +36,4 @@ server {
proxy_pass $upstream_proto://$upstream_app:$upstream_port; proxy_pass $upstream_proto://$upstream_app:$upstream_port;
} }
} }

1
guacamole.subfolder.conf.sample
View file

@ -3,6 +3,7 @@
location /guacamole { location /guacamole {
return 301 $scheme://$host/guacamole/; return 301 $scheme://$host/guacamole/;
} }
location ^~ /guacamole/ { location ^~ /guacamole/ {
# enable the next two lines for http auth # enable the next two lines for http auth
#auth_basic "Restricted"; #auth_basic "Restricted";

5
homeassistant.subdomain.conf.sample
View file

@ -44,10 +44,5 @@ server {
set $upstream_proto http; set $upstream_proto http;
proxy_pass $upstream_proto://$upstream_app:$upstream_port; proxy_pass $upstream_proto://$upstream_app:$upstream_port;
proxy_set_header Host $host;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
} }
} }

4
jellyfin.subdomain.conf.sample
View file

@ -35,7 +35,5 @@ server {
set $upstream_proto http; set $upstream_proto http;
proxy_pass $upstream_proto://$upstream_app:$upstream_port; proxy_pass $upstream_proto://$upstream_app:$upstream_port;
proxy_set_header Upgrade $http_upgrade; }
proxy_set_header Connection $http_connection;
}
} }

3
jellyfin.subfolder.conf.sample
View file

@ -8,6 +8,7 @@
location /jellyfin { location /jellyfin {
return 301 $scheme://$host/jellyfin/; return 301 $scheme://$host/jellyfin/;
} }
location ^~ /jellyfin/ { location ^~ /jellyfin/ {
include /config/nginx/proxy.conf; include /config/nginx/proxy.conf;
resolver 127.0.0.11 valid=30s; resolver 127.0.0.11 valid=30s;
@ -18,6 +19,4 @@ location ^~ /jellyfin/ {
proxy_set_header Range $http_range; proxy_set_header Range $http_range;
proxy_set_header If-Range $http_if_range; proxy_set_header If-Range $http_if_range;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $http_connection;
} }

1
jenkins.subfolder.conf.sample
View file

@ -4,6 +4,7 @@
location /jenkins { location /jenkins {
return 301 $scheme://$host/jenkins/; return 301 $scheme://$host/jenkins/;
} }
location ^~ /jenkins/ { location ^~ /jenkins/ {
# enable the next two lines for http auth # enable the next two lines for http auth
#auth_basic "Restricted"; #auth_basic "Restricted";

1
kanzi.subfolder.conf.sample
View file

@ -3,6 +3,7 @@
location /kanzi { location /kanzi {
return 301 $scheme://$host/kanzi/; return 301 $scheme://$host/kanzi/;
} }
location ^~ /kanzi/ { location ^~ /kanzi/ {
# enable the next two lines for http auth # enable the next two lines for http auth
#auth_basic "Restricted"; #auth_basic "Restricted";

6
mailu.subfolder.conf.sample
View file

@ -6,6 +6,7 @@
location /admin{ location /admin{
return 301 $scheme://$host/admin/; return 301 $scheme://$host/admin/;
} }
location ^~ /admin/ { location ^~ /admin/ {
# enable the next two lines for http auth # enable the next two lines for http auth
#auth_basic "Restricted"; #auth_basic "Restricted";
@ -17,7 +18,7 @@ location ^~ /admin/ {
# enable for Authelia, also enable authelia-server.conf in the default site config # enable for Authelia, also enable authelia-server.conf in the default site config
#include /config/nginx/authelia-location.conf; #include /config/nginx/authelia-location.conf;
include /config/nginx/proxy.conf; include /config/nginx/proxy.conf;
resolver 127.0.0.11 valid=30s; resolver 127.0.0.11 valid=30s;
set $upstream_app front; set $upstream_app front;
@ -30,6 +31,7 @@ location ^~ /admin/ {
location /webmail{ location /webmail{
return 301 $scheme://$host/webmail/; return 301 $scheme://$host/webmail/;
} }
location ^~ /webmail/ { location ^~ /webmail/ {
# enable the next two lines for http auth # enable the next two lines for http auth
#auth_basic "Restricted"; #auth_basic "Restricted";
@ -41,7 +43,7 @@ location ^~ /webmail/ {
# enable for Authelia, also enable authelia-server.conf in the default site config # enable for Authelia, also enable authelia-server.conf in the default site config
#include /config/nginx/authelia-location.conf; #include /config/nginx/authelia-location.conf;
include /config/nginx/proxy.conf; include /config/nginx/proxy.conf;
resolver 127.0.0.11 valid=30s; resolver 127.0.0.11 valid=30s;
set $upstream_app front; set $upstream_app front;

2
medusa.subdomain.conf.sample
View file

@ -29,8 +29,6 @@ server {
#include /config/nginx/authelia-location.conf; #include /config/nginx/authelia-location.conf;
include /config/nginx/proxy.conf; include /config/nginx/proxy.conf;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
resolver 127.0.0.11 valid=30s; resolver 127.0.0.11 valid=30s;
set $upstream_app medusa; set $upstream_app medusa;
set $upstream_port 8081; set $upstream_port 8081;

2
medusa.subfolder.conf.sample
View file

@ -13,8 +13,6 @@ location ^~ /medusa {
#include /config/nginx/authelia-location.conf; #include /config/nginx/authelia-location.conf;
include /config/nginx/proxy.conf; include /config/nginx/proxy.conf;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
resolver 127.0.0.11 valid=30s; resolver 127.0.0.11 valid=30s;
set $upstream_app medusa; set $upstream_app medusa;
set $upstream_port 8081; set $upstream_port 8081;

1
monitorr.subfolder.conf.sample
View file

@ -3,6 +3,7 @@
location /monitorr { location /monitorr {
return 301 $scheme://$host/monitorr/; return 301 $scheme://$host/monitorr/;
} }
location ^~ /monitorr/ { location ^~ /monitorr/ {
# enable the next two lines for http auth # enable the next two lines for http auth
#auth_basic "Restricted"; #auth_basic "Restricted";

1
mytinytodo.subfolder.conf.sample
View file

@ -4,6 +4,7 @@
location /todo { location /todo {
return 301 $scheme://$host/todo/; return 301 $scheme://$host/todo/;
} }
location ^~ /todo/ { location ^~ /todo/ {
# enable the next two lines for http auth # enable the next two lines for http auth

1
netboot.subdomain.conf.sample
View file

@ -34,5 +34,6 @@ server {
set $upstream_port 3000; set $upstream_port 3000;
set $upstream_proto http; set $upstream_proto http;
proxy_pass $upstream_proto://$upstream_app:$upstream_port; proxy_pass $upstream_proto://$upstream_app:$upstream_port;
} }
} }

1
netdata.subfolder.conf.sample
View file

@ -3,6 +3,7 @@
location /netdata { location /netdata {
return 301 $scheme://$host/netdata/; return 301 $scheme://$host/netdata/;
} }
location ^~ /netdata/ { location ^~ /netdata/ {
# enable the next two lines for http auth # enable the next two lines for http auth
#auth_basic "Restricted"; #auth_basic "Restricted";

3
nextcloud.subfolder.conf.sample
View file

@ -36,7 +36,6 @@ location ^~ /nextcloud/ {
proxy_set_header Range $http_range; proxy_set_header Range $http_range;
proxy_set_header If-Range $http_if_range; proxy_set_header If-Range $http_if_range;
proxy_set_header Connection $http_connection; proxy_redirect off;
proxy_redirect off;
proxy_ssl_session_reuse off; proxy_ssl_session_reuse off;
} }

1
nzbhydra.subdomain.conf.sample
View file

@ -86,5 +86,4 @@ server {
proxy_pass $upstream_proto://$upstream_app:$upstream_port; proxy_pass $upstream_proto://$upstream_app:$upstream_port;
} }
} }

1
ombi.subdomain.conf.sample
View file

@ -58,6 +58,7 @@ server {
proxy_pass $upstream_proto://$upstream_app:$upstream_port; proxy_pass $upstream_proto://$upstream_app:$upstream_port;
} }
if ($http_referer ~* /ombi) { if ($http_referer ~* /ombi) {
rewrite ^/swagger/(.*) /ombi/swagger/$1? redirect; rewrite ^/swagger/(.*) /ombi/swagger/$1? redirect;
} }

2
ombi.subfolder.conf.sample
View file

@ -35,6 +35,7 @@ location ^~ /ombi/api {
proxy_pass $upstream_proto://$upstream_app:$upstream_port; proxy_pass $upstream_proto://$upstream_app:$upstream_port;
} }
if ($http_referer ~* /ombi) { if ($http_referer ~* /ombi) {
rewrite ^/api/(.*) /ombi/api/$1? redirect; rewrite ^/api/(.*) /ombi/api/$1? redirect;
} }
@ -49,6 +50,7 @@ location ^~ /ombi/swagger {
proxy_pass $upstream_proto://$upstream_app:$upstream_port; proxy_pass $upstream_proto://$upstream_app:$upstream_port;
} }
if ($http_referer ~* /ombi) { if ($http_referer ~* /ombi) {
rewrite ^/swagger/(.*) /ombi/swagger/$1? redirect; rewrite ^/swagger/(.*) /ombi/swagger/$1? redirect;
} }

1
phpmyadmin.subfolder.conf.sample
View file

@ -3,6 +3,7 @@
location /phpmyadmin { location /phpmyadmin {
return 301 $scheme://$host/phpmyadmin/; return 301 $scheme://$host/phpmyadmin/;
} }
location ^~ /phpmyadmin/ { location ^~ /phpmyadmin/ {
# enable the next two lines for http auth # enable the next two lines for http auth
#auth_basic "Restricted"; #auth_basic "Restricted";

2
pihole.subfolder.conf.sample
View file

@ -3,6 +3,7 @@
location /pihole { location /pihole {
return 301 $scheme://$host/pihole/; return 301 $scheme://$host/pihole/;
} }
location ^~ /pihole/ { location ^~ /pihole/ {
# enable the next two lines for http auth # enable the next two lines for http auth
#auth_basic "Restricted"; #auth_basic "Restricted";
@ -29,6 +30,7 @@ location ^~ /pihole/ {
location /pihole/admin { location /pihole/admin {
return 301 $scheme://$host/pihole/admin/; return 301 $scheme://$host/pihole/admin/;
} }
location ^~ /pihole/admin/ { location ^~ /pihole/admin/ {
# enable the next two lines for http auth # enable the next two lines for http auth
#auth_basic "Restricted"; #auth_basic "Restricted";

3
plex.subdomain.conf.sample
View file

@ -40,9 +40,6 @@ server {
set $upstream_proto http; set $upstream_proto http;
proxy_pass $upstream_proto://$upstream_app:$upstream_port; proxy_pass $upstream_proto://$upstream_app:$upstream_port;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_set_header X-Plex-Client-Identifier $http_x_plex_client_identifier; proxy_set_header X-Plex-Client-Identifier $http_x_plex_client_identifier;
proxy_set_header X-Plex-Device $http_x_plex_device; proxy_set_header X-Plex-Device $http_x_plex_device;
proxy_set_header X-Plex-Device-Name $http_x_plex_device_name; proxy_set_header X-Plex-Device-Name $http_x_plex_device_name;

2
plex.subfolder.conf.sample
View file

@ -9,6 +9,7 @@
location /plex { location /plex {
return 301 $scheme://$host/plex/; return 301 $scheme://$host/plex/;
} }
location ^~ /plex/ { location ^~ /plex/ {
# enable the next two lines for http auth # enable the next two lines for http auth
#auth_basic "Restricted"; #auth_basic "Restricted";
@ -43,6 +44,7 @@ location ^~ /plex/ {
proxy_set_header X-Plex-Device-Vendor $http_x_plex_device_vendor; proxy_set_header X-Plex-Device-Vendor $http_x_plex_device_vendor;
proxy_set_header X-Plex-Model $http_x_plex_model; proxy_set_header X-Plex-Model $http_x_plex_model;
} }
if ($http_referer ~* /plex) { if ($http_referer ~* /plex) {
rewrite ^/web/(.*) /plex/web/$1? redirect; rewrite ^/web/(.*) /plex/web/$1? redirect;
} }

1
plexwebtools.subfolder.conf.sample
View file

@ -3,6 +3,7 @@
location /plexwebtools { location /plexwebtools {
return 301 $scheme://$host/plexwebtools/; return 301 $scheme://$host/plexwebtools/;
} }
location ^~ /plexwebtools/ { location ^~ /plexwebtools/ {
# enable the next two lines for http auth # enable the next two lines for http auth
#auth_basic "Restricted"; #auth_basic "Restricted";

7
portainer.subdomain.conf.sample
View file

@ -35,8 +35,7 @@ server {
set $upstream_proto http; set $upstream_proto http;
proxy_pass $upstream_proto://$upstream_app:$upstream_port; proxy_pass $upstream_proto://$upstream_app:$upstream_port;
proxy_set_header Connection ""; proxy_hide_header X-Frame-Options; # Possibly not needed after Portainer 1.20.0
proxy_hide_header X-Frame-Options; # Possibly nott needed after Portainer 1.20.0
} }
location /api/websocket/ { location /api/websocket/ {
@ -58,8 +57,6 @@ server {
set $upstream_proto http; set $upstream_proto http;
proxy_pass $upstream_proto://$upstream_app:$upstream_port; proxy_pass $upstream_proto://$upstream_app:$upstream_port;
proxy_set_header Upgrade $http_upgrade; proxy_hide_header X-Frame-Options; # Possibly not needed after Portainer 1.20.0
proxy_set_header Connection "upgrade";
proxy_hide_header X-Frame-Options; # Possibly nott needed after Portainer 1.20.0
} }
} }

5
portainer.subfolder.conf.sample
View file

@ -3,6 +3,7 @@
location /portainer { location /portainer {
return 301 $scheme://$host/portainer/; return 301 $scheme://$host/portainer/;
} }
location ^~ /portainer/ { location ^~ /portainer/ {
# enable the next two lines for http auth # enable the next two lines for http auth
#auth_basic "Restricted"; #auth_basic "Restricted";
@ -35,7 +36,5 @@ location ^~ /portainer/api/websocket/ {
proxy_pass $upstream_proto://$upstream_app:$upstream_port; proxy_pass $upstream_proto://$upstream_app:$upstream_port;
rewrite /portainer(.*) $1 break; rewrite /portainer(.*) $1 break;
proxy_set_header Upgrade $http_upgrade; proxy_hide_header X-Frame-Options; # Possibly not needed after Portainer 1.20.0
proxy_set_header Connection "upgrade";
proxy_hide_header X-Frame-Options; # Possibly nott needed after Portainer 1.20.0
} }

8
pydio-cells.subdomain.conf.sample
View file

@ -34,6 +34,7 @@ server {
set $upstream_port 8080; set $upstream_port 8080;
set $upstream_proto https; set $upstream_proto https;
proxy_pass $upstream_proto://$upstream_app:$upstream_port; proxy_pass $upstream_proto://$upstream_app:$upstream_port;
} }
location /ws { location /ws {
@ -54,10 +55,7 @@ server {
set $upstream_port 8080; set $upstream_port 8080;
set $upstream_proto https; set $upstream_proto https;
proxy_pass $upstream_proto://$upstream_app:$upstream_port; proxy_pass $upstream_proto://$upstream_app:$upstream_port;
proxy_buffering off;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
}
proxy_buffering off;
}
} }

1
qbittorrent.subfolder.conf.sample
View file

@ -3,6 +3,7 @@
location /qbittorrent { location /qbittorrent {
return 301 $scheme://$host/qbittorrent/; return 301 $scheme://$host/qbittorrent/;
} }
location ^~ /qbittorrent/ { location ^~ /qbittorrent/ {
# enable the next two lines for http auth # enable the next two lines for http auth
#auth_basic "Restricted"; #auth_basic "Restricted";

4
radarr.subdomain.conf.sample
View file

@ -35,8 +35,6 @@ server {
set $upstream_proto http; set $upstream_proto http;
proxy_pass $upstream_proto://$upstream_app:$upstream_port; proxy_pass $upstream_proto://$upstream_app:$upstream_port;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $http_connection;
} }
location ~ (/radarr)?/api { location ~ (/radarr)?/api {
@ -47,7 +45,5 @@ server {
set $upstream_proto http; set $upstream_proto http;
proxy_pass $upstream_proto://$upstream_app:$upstream_port; proxy_pass $upstream_proto://$upstream_app:$upstream_port;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $http_connection;
} }
} }

4
radarr.subfolder.conf.sample
View file

@ -19,8 +19,6 @@ location ^~ /radarr {
set $upstream_proto http; set $upstream_proto http;
proxy_pass $upstream_proto://$upstream_app:$upstream_port; proxy_pass $upstream_proto://$upstream_app:$upstream_port;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $http_connection;
} }
location ^~ /radarr/api { location ^~ /radarr/api {
@ -31,6 +29,4 @@ location ^~ /radarr/api {
set $upstream_proto http; set $upstream_proto http;
proxy_pass $upstream_proto://$upstream_app:$upstream_port; proxy_pass $upstream_proto://$upstream_app:$upstream_port;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $http_connection;
} }

1
rutorrent.subfolder.conf.sample
View file

@ -3,6 +3,7 @@
location /rutorrent { location /rutorrent {
return 301 $scheme://$host/rutorrent/; return 301 $scheme://$host/rutorrent/;
} }
location ^~ /rutorrent/ { location ^~ /rutorrent/ {
# enable the next two lines for http auth # enable the next two lines for http auth
#auth_basic "Restricted"; #auth_basic "Restricted";

3
scope.subfolder.conf.sample
View file

@ -3,6 +3,7 @@
location /scope { location /scope {
return 301 $scheme://$host/scope/; return 301 $scheme://$host/scope/;
} }
location ^~ /scope/ { location ^~ /scope/ {
# enable the next two lines for http auth # enable the next two lines for http auth
#auth_basic "Restricted"; #auth_basic "Restricted";
@ -23,6 +24,4 @@ location ^~ /scope/ {
proxy_pass $upstream_proto://$upstream_app:$upstream_port; proxy_pass $upstream_proto://$upstream_app:$upstream_port;
rewrite /scope(.*) $1 break; rewrite /scope(.*) $1 break;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
} }

2
sickchill.subdomain.conf.sample
View file

@ -36,8 +36,6 @@ server {
proxy_pass $upstream_proto://$upstream_app:$upstream_port; proxy_pass $upstream_proto://$upstream_app:$upstream_port;
proxy_set_header Host $http_host; proxy_set_header Host $http_host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme; proxy_set_header X-Forwarded-Proto $scheme;
} }
} }

2
sickchill.subfolder.conf.sample
View file

@ -20,8 +20,6 @@ location ^~ /sickchill {
proxy_pass $upstream_proto://$upstream_app:$upstream_port; proxy_pass $upstream_proto://$upstream_app:$upstream_port;
proxy_set_header Host $http_host; proxy_set_header Host $http_host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme; proxy_set_header X-Forwarded-Proto $scheme;
} }

8
synclounge.subdomain.conf.sample
View file

@ -40,8 +40,6 @@ server {
set $upstream_proto http; set $upstream_proto http;
proxy_pass $upstream_proto://$upstream_app:$upstream_port; proxy_pass $upstream_proto://$upstream_app:$upstream_port;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
} }
### ###
@ -57,9 +55,6 @@ server {
set $upstream_proto http; set $upstream_proto http;
proxy_pass $upstream_proto://$upstream_app:$upstream_port; proxy_pass $upstream_proto://$upstream_app:$upstream_port;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
} }
# Due to a bug in SyncLounge, some websockets calls don't respect the base url (server root) setting # Due to a bug in SyncLounge, some websockets calls don't respect the base url (server root) setting
@ -71,8 +66,5 @@ server {
set $upstream_proto http; set $upstream_proto http;
proxy_pass $upstream_proto://$upstream_app:$upstream_port/slserver/socket.io/; proxy_pass $upstream_proto://$upstream_app:$upstream_port/slserver/socket.io/;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
} }
} }

9
synclounge.subfolder.conf.sample
View file

@ -15,7 +15,6 @@
# } # }
#} #}
# Uncomment to force SyncLounge to always load over http. Only use this if you've allowed http per the above instructions. # Uncomment to force SyncLounge to always load over http. Only use this if you've allowed http per the above instructions.
#if ($scheme = https) { #if ($scheme = https) {
# return 301 http://$host$request_uri; # return 301 http://$host$request_uri;
@ -54,10 +53,8 @@ location /slweb {
proxy_pass $upstream_proto://$upstream_app:$upstream_port; proxy_pass $upstream_proto://$upstream_app:$upstream_port;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
} }
if ($http_referer ~* /slweb) { if ($http_referer ~* /slweb) {
# Some requests like /config don't respect the base url (web root) setting # Some requests like /config don't respect the base url (web root) setting
rewrite ^/config /slweb/config redirect; rewrite ^/config /slweb/config redirect;
@ -79,10 +76,8 @@ location /slserver {
proxy_pass $upstream_proto://$upstream_app:$upstream_port; proxy_pass $upstream_proto://$upstream_app:$upstream_port;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
} }
if ($http_referer ~* /slserver) { if ($http_referer ~* /slserver) {
# Some requests like socket.io don't respect the base url (server root) setting # Some requests like socket.io don't respect the base url (server root) setting
rewrite ^/socket.io/(.*) /slserver/socket.io/$1? redirect; rewrite ^/socket.io/(.*) /slserver/socket.io/$1? redirect;

3
taisun.subdomain.conf.sample
View file

@ -36,8 +36,5 @@ server {
proxy_pass $upstream_proto://$upstream_app:$upstream_port; proxy_pass $upstream_proto://$upstream_app:$upstream_port;
proxy_buffering off; proxy_buffering off;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $http_connection;
} }
} }

1
thelounge.subfolder.conf.sample
View file

@ -3,6 +3,7 @@
location /thelounge { location /thelounge {
return 301 $scheme://$host/thelounge/; return 301 $scheme://$host/thelounge/;
} }
location ^~ /thelounge/ { location ^~ /thelounge/ {
# enable the next two lines for http auth # enable the next two lines for http auth
#auth_basic "Restricted"; #auth_basic "Restricted";

27
unifi-controller.subdomain.conf.sample
View file

@ -1,4 +1,6 @@
# make sure that your dns has a cname set for unifi and that your unifi-controller container is not using a base url # make sure that your dns has a cname set for unifi and that your unifi-controller container is not using a base url
# NOTE: If you use the proxy_cookie_path setting in proxy.conf you need to remove HTTPOnly;
# ex: proxy_cookie_path / "/; Secure";
server { server {
listen 443 ssl; listen 443 ssl;
@ -35,31 +37,6 @@ server {
set $upstream_proto https; set $upstream_proto https;
proxy_pass $upstream_proto://$upstream_app:$upstream_port; proxy_pass $upstream_proto://$upstream_app:$upstream_port;
}
location /wss {
# enable the next two lines for http auth
#auth_basic "Restricted";
#auth_basic_user_file /config/nginx/.htpasswd;
# enable the next two lines for ldap auth
#auth_request /auth;
#error_page 401 =200 /ldaplogin;
# enable for Authelia
#include /config/nginx/authelia-location.conf;
include /config/nginx/proxy.conf;
resolver 127.0.0.11 valid=30s;
set $upstream_app unifi-controller;
set $upstream_port 8443;
set $upstream_proto https;
proxy_pass $upstream_proto://$upstream_app:$upstream_port;
proxy_buffering off; proxy_buffering off;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "Upgrade";
proxy_ssl_verify off;
} }
} }

7
youtube-dl.subfolder.conf.sample
View file

@ -12,17 +12,16 @@ location ^~ /youtube-dl/ {
# enable the next two lines for ldap auth, also customize and enable ldap.conf in the default conf # enable the next two lines for ldap auth, also customize and enable ldap.conf in the default conf
#auth_request /auth; #auth_request /auth;
#error_page 401 =200 /login; #error_page 401 =200 /login;
include /config/nginx/proxy.conf; include /config/nginx/proxy.conf;
resolver 127.0.0.11 valid=30s; resolver 127.0.0.11 valid=30s;
set $upstream_app youtube-dl-server; set $upstream_app youtube-dl-server;
set $upstream_port 8080; set $upstream_port 8080;
set $upstream_proto http; set $upstream_proto http;
proxy_pass $upstream_proto://$upstream_app:$upstream_port; proxy_pass $upstream_proto://$upstream_app:$upstream_port;
proxy_redirect off; proxy_redirect off;
rewrite /youtube-dl(.*) $1 break;
proxy_set_header Referer ''; proxy_set_header Referer '';
proxy_set_header Host $upstream_app:8080; proxy_set_header Host $upstream_app:8080;
rewrite /youtube-dl(.*) $1 break;
} }