diff --git a/gitea.subdomain.conf.sample b/gitea.subdomain.conf.sample index 1d6bdf4..0657314 100644 --- a/gitea.subdomain.conf.sample +++ b/gitea.subdomain.conf.sample @@ -1,4 +1,4 @@ -## Version 2023/05/31 +## Version 2023/12/26 # make sure that your gitea container is named gitea # make sure that your dns has a cname set for gitea # edit the following parameters in /data/gitea/conf/app.ini @@ -48,4 +48,14 @@ server { proxy_pass $upstream_proto://$upstream_app:$upstream_port; } + + location ~ (/gitea)?/info/lfs { + include /config/nginx/proxy.conf; + include /config/nginx/resolver.conf; + set $upstream_app gitea; + set $upstream_port 3000; + set $upstream_proto http; + proxy_pass $upstream_proto://$upstream_app:$upstream_port; + + } } diff --git a/heimdall.subdomain.conf.sample b/heimdall.subdomain.conf.sample index 8e18aa8..a77de5b 100644 --- a/heimdall.subdomain.conf.sample +++ b/heimdall.subdomain.conf.sample @@ -42,5 +42,8 @@ server { set $upstream_proto https; proxy_pass $upstream_proto://$upstream_app:$upstream_port; + # Enable to secure cookies. Further reading here -> https://developer.mozilla.org/en-US/docs/Web/HTTP/Cookies + #proxy_cookie_path / "/; Secure; SameSite=strict; HttpOnly"; + } } diff --git a/maintainerr.subdomain.conf.sample b/maintainerr.subdomain.conf.sample new file mode 100644 index 0000000..170e740 --- /dev/null +++ b/maintainerr.subdomain.conf.sample @@ -0,0 +1,47 @@ +## Version 2023/12/14 +# make sure that your maintainerr container is named maintainerr +# make sure that your dns has a cname set for maintainerr + +server { + listen 443 ssl http2; + listen [::]:443 ssl http2; + + server_name maintainerr.*; + + include /config/nginx/ssl.conf; + + client_max_body_size 0; + + # enable for ldap auth (requires ldap-location.conf in the location block) + #include /config/nginx/ldap-server.conf; + + # enable for Authelia (requires authelia-location.conf in the location block) + #include /config/nginx/authelia-server.conf; + + # enable for Authentik (requires authentik-location.conf in the location block) + #include /config/nginx/authentik-server.conf; + + location / { + # enable the next two lines for http auth + #auth_basic "Restricted"; + #auth_basic_user_file /config/nginx/.htpasswd; + + # enable for ldap auth (requires ldap-server.conf in the server block) + #include /config/nginx/ldap-location.conf; + + # enable for Authelia (requires authelia-server.conf in the server block) + #include /config/nginx/authelia-location.conf; + + # enable for Authentik (requires authentik-server.conf in the server block) + #include /config/nginx/authentik-location.conf; + + include /config/nginx/proxy.conf; + include /config/nginx/resolver.conf; + set $upstream_app maintainerr; + set $upstream_port 80; + set $upstream_proto http; + proxy_pass $upstream_proto://$upstream_app:$upstream_port; + + } + +} diff --git a/speedtest-tracker.subdomain.conf.sample b/speedtest-tracker.subdomain.conf.sample new file mode 100644 index 0000000..565e4f2 --- /dev/null +++ b/speedtest-tracker.subdomain.conf.sample @@ -0,0 +1,47 @@ +## Version 2024/02/20 +# make sure that your speedtest-tracker container is named speedtest-tracker +# make sure that your dns has a cname set for speedtest-tracker + +server { + listen 443 ssl http2; + listen [::]:443 ssl http2; + + server_name speedtest-tracker.*; + + include /config/nginx/ssl.conf; + + client_max_body_size 0; + + # enable for ldap auth (requires ldap-location.conf in the location block) + #include /config/nginx/ldap-server.conf; + + # enable for Authelia (requires authelia-location.conf in the location block) + #include /config/nginx/authelia-server.conf; + + # enable for Authentik (requires authentik-location.conf in the location block) + #include /config/nginx/authentik-server.conf; + + location / { + # enable the next two lines for http auth + #auth_basic "Restricted"; + #auth_basic_user_file /config/nginx/.htpasswd; + + # enable for ldap auth (requires ldap-server.conf in the server block) + #include /config/nginx/ldap-location.conf; + + # enable for Authelia (requires authelia-server.conf in the server block) + #include /config/nginx/authelia-location.conf; + + # enable for Authentik (requires authentik-server.conf in the server block) + #include /config/nginx/authentik-location.conf; + + include /config/nginx/proxy.conf; + include /config/nginx/resolver.conf; + set $upstream_app speedtest-tracker; + set $upstream_port 80; + set $upstream_proto http; + proxy_pass $upstream_proto://$upstream_app:$upstream_port; + + } + +} diff --git a/stirling-pdf.subdomain.conf.sample b/stirling-pdf.subdomain.conf.sample new file mode 100644 index 0000000..81d8363 --- /dev/null +++ b/stirling-pdf.subdomain.conf.sample @@ -0,0 +1,47 @@ +## Version 2024/02/23 +# make sure that your stirling-pdf container is named stirling-pdf +# make sure that your dns has a cname set for stirling-pdf + +server { + listen 443 ssl http2; + listen [::]:443 ssl http2; + + server_name stirling-pdf.*; + + include /config/nginx/ssl.conf; + + client_max_body_size 0; + + # enable for ldap auth (requires ldap-location.conf in the location block) + #include /config/nginx/ldap-server.conf; + + # enable for Authelia (requires authelia-location.conf in the location block) + #include /config/nginx/authelia-server.conf; + + # enable for Authentik (requires authentik-location.conf in the location block) + #include /config/nginx/authentik-server.conf; + + location / { + # enable the next two lines for http auth + #auth_basic "Restricted"; + #auth_basic_user_file /config/nginx/.htpasswd; + + # enable for ldap auth (requires ldap-server.conf in the server block) + #include /config/nginx/ldap-location.conf; + + # enable for Authelia (requires authelia-server.conf in the server block) + #include /config/nginx/authelia-location.conf; + + # enable for Authentik (requires authentik-server.conf in the server block) + #include /config/nginx/authentik-location.conf; + + include /config/nginx/proxy.conf; + include /config/nginx/resolver.conf; + set $upstream_app stirling-pdf; + set $upstream_port 8080; + set $upstream_proto http; + proxy_pass $upstream_proto://$upstream_app:$upstream_port; + + } + +} diff --git a/webtop.subfolder.conf.sample b/webtop.subfolder.conf.sample new file mode 100644 index 0000000..526525c --- /dev/null +++ b/webtop.subfolder.conf.sample @@ -0,0 +1,29 @@ +## Version 2024/02/14 +# make sure that your webtop container is named webtop +# make sure that webtop is set to work with the base url /webtop/ +# works with any KasmVNC based image + +location ^~ /webtop { + # enable the next two lines for http auth + #auth_basic "Restricted"; + #auth_basic_user_file /config/nginx/.htpasswd; + + # enable for ldap auth (requires ldap-server.conf in the server block) + #include /config/nginx/ldap-location.conf; + + # enable for Authelia (requires authelia-server.conf in the server block) + #include /config/nginx/authelia-location.conf; + + # enable for Authentik (requires authentik-server.conf in the server block) + #include /config/nginx/authentik-location.conf; + + include /config/nginx/proxy.conf; + include /config/nginx/resolver.conf; + set $upstream_app webtop; + set $upstream_port 3000; + set $upstream_proto http; + proxy_pass $upstream_proto://$upstream_app:$upstream_port; + + proxy_buffering off; + +} diff --git a/wikijs.subdomain.conf.sample b/wikijs.subdomain.conf.sample new file mode 100644 index 0000000..ab07313 --- /dev/null +++ b/wikijs.subdomain.conf.sample @@ -0,0 +1,56 @@ +## Version 2023/05/31 +# make sure that your wikijs container is named wikijs +# make sure that your dns has a cname set for wikijs + +server { + listen 443 ssl http2; + listen [::]:443 ssl http2; + + server_name wikijs.*; + + include /config/nginx/ssl.conf; + + client_max_body_size 0; + + # enable for ldap auth (requires ldap-location.conf in the location block) + #include /config/nginx/ldap-server.conf; + + # enable for Authelia (requires authelia-location.conf in the location block) + #include /config/nginx/authelia-server.conf; + + # enable for Authentik (requires authentik-location.conf in the location block) + #include /config/nginx/authentik-server.conf; + + location / { + # enable the next two lines for http auth + #auth_basic "Restricted"; + #auth_basic_user_file /config/nginx/.htpasswd; + + # enable for ldap auth (requires ldap-server.conf in the server block) + #include /config/nginx/ldap-location.conf; + + # enable for Authelia (requires authelia-server.conf in the server block) + #include /config/nginx/authelia-location.conf; + + # enable for Authentik (requires authentik-server.conf in the server block) + #include /config/nginx/authentik-location.conf; + + include /config/nginx/proxy.conf; + include /config/nginx/resolver.conf; + set $upstream_app wikijs; + set $upstream_port 3000; + set $upstream_proto http; + proxy_pass $upstream_proto://$upstream_app:$upstream_port; + + } + + location ~ (/wikijs)?/graphql { + include /config/nginx/proxy.conf; + include /config/nginx/resolver.conf; + set $upstream_app wikijs; + set $upstream_port 3000; + set $upstream_proto http; + proxy_pass $upstream_proto://$upstream_app:$upstream_port; + + } +}