diff options
Diffstat (limited to 'linux')
33 files changed, 1379 insertions, 0 deletions
diff --git a/linux/nginx/etc/nginx/conf.d/ao.conf b/linux/nginx/etc/nginx/conf.d/ao.conf new file mode 100644 index 0000000..96d232f --- /dev/null +++ b/linux/nginx/etc/nginx/conf.d/ao.conf @@ -0,0 +1,39 @@ +# ---------------------------------------------------------------------- +# | Config file for host | +# ---------------------------------------------------------------------- +server { + listen [::]:443 ssl; + listen 443 ssl; + http2 on; + + server_name ao.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_balanced.conf; + include custom.d/basic.conf; + + # ---------------------------------------------------------------------- + # | Custom rules & config for specific website | + # ---------------------------------------------------------------------- + location / { + set $upstream http://127.0.0.1:9380; + proxy_pass $upstream; + + include custom.d/reverse_proxy/basic.conf; + } + + include custom.d/security/robots_index_only.conf; + # ---------------------------------------------------------------------- +} + +# ---------------------------------------------------------------------- +# | Config file for non-secure host | +# ---------------------------------------------------------------------- +server { + listen [::]:80; + listen 80; + server_name ao.cleberg.net; + + return 301 https://$host$request_uri; +} diff --git a/linux/nginx/etc/nginx/conf.d/art.conf b/linux/nginx/etc/nginx/conf.d/art.conf new file mode 100644 index 0000000..6ce012a --- /dev/null +++ b/linux/nginx/etc/nginx/conf.d/art.conf @@ -0,0 +1,39 @@ +# ---------------------------------------------------------------------- +# | Config file for host | +# ---------------------------------------------------------------------- +server { + listen [::]:443 ssl; + listen 443 ssl; + http2 on; + + server_name art.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_balanced.conf; + include custom.d/basic.conf; + + # ---------------------------------------------------------------------- + # | Custom rules & config for specific website | + # ---------------------------------------------------------------------- + location / { + set $upstream http://127.0.0.1:3003; + proxy_pass $upstream; + + include custom.d/reverse_proxy/basic.conf; + } + + include custom.d/security/robots_index_only.conf; + # ---------------------------------------------------------------------- +} + +# ---------------------------------------------------------------------- +# | Config file for non-secure host | +# ---------------------------------------------------------------------- +server { + listen [::]:80; + listen 80; + server_name art.cleberg.net; + + return 301 https://$host$request_uri; +} diff --git a/linux/nginx/etc/nginx/conf.d/auth.conf b/linux/nginx/etc/nginx/conf.d/auth.conf new file mode 100644 index 0000000..31c0a86 --- /dev/null +++ b/linux/nginx/etc/nginx/conf.d/auth.conf @@ -0,0 +1,42 @@ +# ---------------------------------------------------------------------- +# | Config file for host | +# ---------------------------------------------------------------------- +server { + listen [::]:443 ssl; + listen 443 ssl; + http2 on; + + server_name auth.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_balanced.conf; + include custom.d/basic.conf; + + # ---------------------------------------------------------------------- + # | Custom rules & config for specific website | + # ---------------------------------------------------------------------- + set $upstream http://127.0.0.1:9092; + + location / { + proxy_pass $upstream; + + include custom.d/reverse_proxy/basic.conf; + } + + location /api/verify { + proxy_pass $upstream; + } + # ---------------------------------------------------------------------- +} + +# ---------------------------------------------------------------------- +# | Config file for non-secure host | +# ---------------------------------------------------------------------- +server { + listen [::]:80; + listen 80; + server_name auth.cleberg.net; + + return 301 https://$host$request_uri; +} diff --git a/linux/nginx/etc/nginx/conf.d/br.conf b/linux/nginx/etc/nginx/conf.d/br.conf new file mode 100644 index 0000000..414b703 --- /dev/null +++ b/linux/nginx/etc/nginx/conf.d/br.conf @@ -0,0 +1,39 @@ +# ---------------------------------------------------------------------- +# | Config file for host | +# ---------------------------------------------------------------------- +server { + listen [::]:443 ssl; + listen 443 ssl; + http2 on; + + server_name br.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_balanced.conf; + include custom.d/basic.conf; + + # ---------------------------------------------------------------------- + # | Custom rules & config for specific website | + # ---------------------------------------------------------------------- + location / { + set $upstream http://127.0.0.1:3030; + proxy_pass $upstream; + + include custom.d/reverse_proxy/basic.conf; + } + + include custom.d/security/robots_index_only.conf; + # ---------------------------------------------------------------------- +} + +# ---------------------------------------------------------------------- +# | Config file for non-secure host | +# ---------------------------------------------------------------------- +server { + listen [::]:80; + listen 80; + server_name br.cleberg.net; + + return 301 https://$host$request_uri; +} diff --git a/linux/nginx/etc/nginx/conf.d/bt.conf b/linux/nginx/etc/nginx/conf.d/bt.conf new file mode 100644 index 0000000..1fa0bfa --- /dev/null +++ b/linux/nginx/etc/nginx/conf.d/bt.conf @@ -0,0 +1,46 @@ +# ---------------------------------------------------------------------- +# | Config file for host | +# ---------------------------------------------------------------------- +server { + listen [::]:443 ssl; + listen 443 ssl; + http2 on; + + server_name bt.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_balanced.conf; + include custom.d/basic.conf; + + # ---------------------------------------------------------------------- + # | Custom rules & config for specific website | + # ---------------------------------------------------------------------- + set $upstream http://127.0.0.1:9091; + + location /authelia { + include custom.d/reverse_proxy/authelia.conf; + } + + location / { + proxy_pass $upstream; + + include custom.d/reverse_proxy/authelia_request.conf; + # include custom.d/reverse_proxy/basic.conf; + proxy_pass_header X-bt-Session-Id; + } + + include custom.d/security/robots_index_only.conf; + # ---------------------------------------------------------------------- +} + +# ---------------------------------------------------------------------- +# | Config file for non-secure host | +# ---------------------------------------------------------------------- +server { + listen [::]:80; + listen 80; + server_name bt.cleberg.net; + + return 301 https://$host$request_uri; +} diff --git a/linux/nginx/etc/nginx/conf.d/bw.conf b/linux/nginx/etc/nginx/conf.d/bw.conf new file mode 100644 index 0000000..af63166 --- /dev/null +++ b/linux/nginx/etc/nginx/conf.d/bw.conf @@ -0,0 +1,39 @@ +# ---------------------------------------------------------------------- +# | Config file for host | +# ---------------------------------------------------------------------- +server { + listen [::]:443 ssl; + listen 443 ssl; + http2 on; + + server_name bw.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_balanced.conf; + include custom.d/basic.conf; + + # ---------------------------------------------------------------------- + # | Custom rules & config for specific website | + # ---------------------------------------------------------------------- + location / { + set $upstream http://127.0.0.1:10416; + proxy_pass $upstream; + + include custom.d/reverse_proxy/basic.conf; + } + + include custom.d/security/robots_index_only.conf; + # ---------------------------------------------------------------------- +} + +# ---------------------------------------------------------------------- +# | Config file for non-secure host | +# ---------------------------------------------------------------------- +server { + listen [::]:80; + listen 80; + server_name bw.cleberg.net; + + return 301 https://$host$request_uri; +} diff --git a/linux/nginx/etc/nginx/conf.d/cc.conf b/linux/nginx/etc/nginx/conf.d/cc.conf new file mode 100644 index 0000000..a3978b1 --- /dev/null +++ b/linux/nginx/etc/nginx/conf.d/cc.conf @@ -0,0 +1,39 @@ +# ---------------------------------------------------------------------- +# | Config file for host | +# ---------------------------------------------------------------------- +server { + listen [::]:443 ssl; + listen 443 ssl; + http2 on; + + server_name cc.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_balanced.conf; + include custom.d/basic.conf; + + # ---------------------------------------------------------------------- + # | Custom rules & config for specific website | + # ---------------------------------------------------------------------- + location / { + set $upstream http://127.0.0.1:8111; + proxy_pass $upstream; + + include custom.d/reverse_proxy/basic.conf; + } + + include custom.d/security/robots_index_only.conf; + # ---------------------------------------------------------------------- +} + +# ---------------------------------------------------------------------- +# | Config file for non-secure host | +# ---------------------------------------------------------------------- +server { + listen [::]:80; + listen 80; + server_name cc.cleberg.net; + + return 301 https://$host$request_uri; +} diff --git a/linux/nginx/etc/nginx/conf.d/ddns.conf b/linux/nginx/etc/nginx/conf.d/ddns.conf new file mode 100644 index 0000000..9915c1c --- /dev/null +++ b/linux/nginx/etc/nginx/conf.d/ddns.conf @@ -0,0 +1,44 @@ +# ---------------------------------------------------------------------- +# | Config file for host | +# ---------------------------------------------------------------------- +server { + listen [::]:443 ssl; + listen 443 ssl; + http2 on; + + server_name ddns.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_balanced.conf; + include custom.d/basic.conf; + + # ---------------------------------------------------------------------- + # | Custom rules & config for specific website | + # ---------------------------------------------------------------------- + location /authelia { + include custom.d/reverse_proxy/authelia.conf; + } + + location / { + set $upstream http://127.0.0.1:8097; + proxy_pass $upstream; + + include custom.d/reverse_proxy/authelia_request.conf; + include custom.d/reverse_proxy/basic.conf; + } + + include custom.d/security/robots_index_only.conf; + # ---------------------------------------------------------------------- +} + +# ---------------------------------------------------------------------- +# | Config file for non-secure host | +# ---------------------------------------------------------------------- +server { + listen [::]:80; + listen 80; + server_name ddns.cleberg.net; + + return 301 https://$host$request_uri; +} diff --git a/linux/nginx/etc/nginx/conf.d/docker.conf b/linux/nginx/etc/nginx/conf.d/docker.conf new file mode 100644 index 0000000..4fab091 --- /dev/null +++ b/linux/nginx/etc/nginx/conf.d/docker.conf @@ -0,0 +1,44 @@ +# ---------------------------------------------------------------------- +# | Config file for host | +# ---------------------------------------------------------------------- +server { + listen [::]:443 ssl; + listen 443 ssl; + http2 on; + + server_name docker.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_balanced.conf; + include custom.d/basic.conf; + + # ---------------------------------------------------------------------- + # | Custom rules & config for specific website | + # ---------------------------------------------------------------------- + location /authelia { + include custom.d/reverse_proxy/authelia.conf; + } + + location / { + set $upstream http://127.0.0.1:3777; + proxy_pass $upstream; + + include custom.d/reverse_proxy/authelia_request.conf; + include custom.d/reverse_proxy/basic.conf; + } + + include custom.d/security/robots_index_only.conf; + # ---------------------------------------------------------------------- +} + +# ---------------------------------------------------------------------- +# | Config file for non-secure host | +# ---------------------------------------------------------------------- +server { + listen [::]:80; + listen 80; + server_name docker.cleberg.net; + + return 301 https://$host$request_uri; +} diff --git a/linux/nginx/etc/nginx/conf.d/gh.conf b/linux/nginx/etc/nginx/conf.d/gh.conf new file mode 100644 index 0000000..9b05a7f --- /dev/null +++ b/linux/nginx/etc/nginx/conf.d/gh.conf @@ -0,0 +1,39 @@ +# ---------------------------------------------------------------------- +# | Config file for host | +# ---------------------------------------------------------------------- +server { + listen [::]:443 ssl; + listen 443 ssl; + http2 on; + + server_name gh.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_balanced.conf; + include custom.d/basic.conf; + + # ---------------------------------------------------------------------- + # | Custom rules & config for specific website | + # ---------------------------------------------------------------------- + location / { + set $upstream http://192.168.0.251:3039; + proxy_pass $upstream; + + include custom.d/reverse_proxy/basic.conf; + } + + include custom.d/security/robots_index_only.conf; + # ---------------------------------------------------------------------- +} + +# ---------------------------------------------------------------------- +# | Config file for non-secure host | +# ---------------------------------------------------------------------- +server { + listen [::]:80; + listen 80; + server_name gh.cleberg.net; + + return 301 https://$host$request_uri; +} diff --git a/linux/nginx/etc/nginx/conf.d/ha.conf b/linux/nginx/etc/nginx/conf.d/ha.conf new file mode 100644 index 0000000..63ed76c --- /dev/null +++ b/linux/nginx/etc/nginx/conf.d/ha.conf @@ -0,0 +1,46 @@ +# ---------------------------------------------------------------------- +# | Config file for host | +# ---------------------------------------------------------------------- +server { + listen [::]:443 ssl; + listen 443 ssl; + http2 on; + + server_name ha.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_balanced.conf; + include custom.d/basic.conf; + + # ---------------------------------------------------------------------- + # | Custom rules & config for specific website | + # ---------------------------------------------------------------------- + set $upstream http://192.168.0.214:8123; + + location / { + proxy_pass $upstream; + proxy_set_header X-Forwarded-For $remote_addr; + } + + location /api/websocket { + proxy_pass $upstream; + proxy_http_version 1.1; + proxy_set_header Upgrade $http_upgrade; + proxy_set_header Connection "upgrade"; + } + + include custom.d/security/robots_index_only.conf; + # ---------------------------------------------------------------------- +} + +# ---------------------------------------------------------------------- +# | Config file for non-secure host | +# ---------------------------------------------------------------------- +server { + listen [::]:80; + listen 80; + server_name ha.cleberg.net; + + return 301 https://$host$request_uri; +} diff --git a/linux/nginx/etc/nginx/conf.d/hat.conf b/linux/nginx/etc/nginx/conf.d/hat.conf new file mode 100644 index 0000000..4d9da2c --- /dev/null +++ b/linux/nginx/etc/nginx/conf.d/hat.conf @@ -0,0 +1,39 @@ +# ---------------------------------------------------------------------- +# | Config file for host | +# ---------------------------------------------------------------------- +server { + listen [::]:443 ssl; + listen 443 ssl; + http2 on; + + server_name hat.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_balanced.conf; + include custom.d/basic.conf; + + # ---------------------------------------------------------------------- + # | Custom rules & config for specific website | + # ---------------------------------------------------------------------- + location / { + set $upstream http://192.168.0.251:3991; + proxy_pass $upstream; + + include custom.d/reverse_proxy/basic.conf; + } + + include custom.d/security/robots_index_only.conf; + # ---------------------------------------------------------------------- +} + +# ---------------------------------------------------------------------- +# | Config file for non-secure host | +# ---------------------------------------------------------------------- +server { + listen [::]:80; + listen 80; + server_name hat.cleberg.net; + + return 301 https://$host$request_uri; +} diff --git a/linux/nginx/etc/nginx/conf.d/irc.conf b/linux/nginx/etc/nginx/conf.d/irc.conf new file mode 100644 index 0000000..0d8af19 --- /dev/null +++ b/linux/nginx/etc/nginx/conf.d/irc.conf @@ -0,0 +1,44 @@ +# ---------------------------------------------------------------------- +# | Config file for host | +# ---------------------------------------------------------------------- +server { + listen [::]:443 ssl; + listen 443 ssl; + http2 on; + + server_name irc.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_balanced.conf; + include custom.d/basic.conf; + + # ---------------------------------------------------------------------- + # | Custom rules & config for specific website | + # ---------------------------------------------------------------------- + location /authelia { + include custom.d/reverse_proxy/authelia.conf; + } + + location / { + set $upstream http://192.168.0.251:9900; + proxy_pass $upstream; + + include custom.d/reverse_proxy/authelia_request.conf; + include custom.d/reverse_proxy/basic.conf; + } + + include custom.d/security/robots_index_only.conf; + # ---------------------------------------------------------------------- +} + +# ---------------------------------------------------------------------- +# | Config file for non-secure host | +# ---------------------------------------------------------------------- +server { + listen [::]:80; + listen 80; + server_name irc.cleberg.net; + + return 301 https://$host$request_uri; +} diff --git a/linux/nginx/etc/nginx/conf.d/ld.conf b/linux/nginx/etc/nginx/conf.d/ld.conf new file mode 100644 index 0000000..5c03fca --- /dev/null +++ b/linux/nginx/etc/nginx/conf.d/ld.conf @@ -0,0 +1,39 @@ +# ---------------------------------------------------------------------- +# | Config file for host | +# ---------------------------------------------------------------------- +server { + listen [::]:443 ssl; + listen 443 ssl; + http2 on; + + server_name ld.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_balanced.conf; + include custom.d/basic.conf; + + # ---------------------------------------------------------------------- + # | Custom rules & config for specific website | + # ---------------------------------------------------------------------- + location / { + set $upstream http://127.0.0.1:3004; + proxy_pass $upstream; + + include custom.d/reverse_proxy/basic.conf; + } + + include custom.d/security/robots_index_only.conf; + # ---------------------------------------------------------------------- +} + +# ---------------------------------------------------------------------- +# | Config file for non-secure host | +# ---------------------------------------------------------------------- +server { + listen [::]:80; + listen 80; + server_name ld.cleberg.net; + + return 301 https://$host$request_uri; +} diff --git a/linux/nginx/etc/nginx/conf.d/lemmy.conf b/linux/nginx/etc/nginx/conf.d/lemmy.conf new file mode 100644 index 0000000..1e3fffa --- /dev/null +++ b/linux/nginx/etc/nginx/conf.d/lemmy.conf @@ -0,0 +1,39 @@ +# ---------------------------------------------------------------------- +# | Config file for host | +# ---------------------------------------------------------------------- +server { + listen [::]:443 ssl; + listen 443 ssl; + http2 on; + + server_name lemmy.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_balanced.conf; + include custom.d/basic.conf; + + # ---------------------------------------------------------------------- + # | Custom rules & config for specific website | + # ---------------------------------------------------------------------- + location / { + set $upstream http://127.0.0.1:10633; + proxy_pass $upstream; + + include custom.d/reverse_proxy/basic.conf; + } + + include custom.d/security/robots_index_only.conf; + # ---------------------------------------------------------------------- +} + +# ---------------------------------------------------------------------- +# | Config file for non-secure host | +# ---------------------------------------------------------------------- +server { + listen [::]:80; + listen 80; + server_name lemmy.cleberg.net; + + return 301 https://$host$request_uri; +} diff --git a/linux/nginx/etc/nginx/conf.d/lt.conf b/linux/nginx/etc/nginx/conf.d/lt.conf new file mode 100644 index 0000000..620f02b --- /dev/null +++ b/linux/nginx/etc/nginx/conf.d/lt.conf @@ -0,0 +1,39 @@ +# ---------------------------------------------------------------------- +# | Config file for host | +# ---------------------------------------------------------------------- +server { + listen [::]:443 ssl; + listen 443 ssl; + http2 on; + + server_name lt.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_balanced.conf; + include custom.d/basic.conf; + + # ---------------------------------------------------------------------- + # | Custom rules & config for specific website | + # ---------------------------------------------------------------------- + location / { + set $upstream http://127.0.0.1:5000; + proxy_pass $upstream; + + include custom.d/reverse_proxy/basic.conf; + } + + include custom.d/security/robots_index_only.conf; + # ---------------------------------------------------------------------- +} + +# ---------------------------------------------------------------------- +# | Config file for non-secure host | +# ---------------------------------------------------------------------- +server { + listen [::]:80; + listen 80; + server_name lt.cleberg.net; + + return 301 https://$host$request_uri; +} diff --git a/linux/nginx/etc/nginx/conf.d/mz.conf b/linux/nginx/etc/nginx/conf.d/mz.conf new file mode 100644 index 0000000..df7d7b2 --- /dev/null +++ b/linux/nginx/etc/nginx/conf.d/mz.conf @@ -0,0 +1,39 @@ +# ---------------------------------------------------------------------- +# | Config file for host | +# ---------------------------------------------------------------------- +server { + listen [::]:443 ssl; + listen 443 ssl; + http2 on; + + server_name mz.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_balanced.conf; + include custom.d/basic.conf; + + # ---------------------------------------------------------------------- + # | Custom rules & config for specific website | + # ---------------------------------------------------------------------- + location / { + set $upstream http://127.0.0.1:3474; + proxy_pass $upstream; + + include custom.d/reverse_proxy/basic.conf; + } + + include custom.d/security/robots_index_only.conf; + # ---------------------------------------------------------------------- +} + +# ---------------------------------------------------------------------- +# | Config file for non-secure host | +# ---------------------------------------------------------------------- +server { + listen [::]:80; + listen 80; + server_name mz.cleberg.net; + + return 301 https://$host$request_uri; +} diff --git a/linux/nginx/etc/nginx/conf.d/paste.conf b/linux/nginx/etc/nginx/conf.d/paste.conf new file mode 100644 index 0000000..9164097 --- /dev/null +++ b/linux/nginx/etc/nginx/conf.d/paste.conf @@ -0,0 +1,39 @@ +# ---------------------------------------------------------------------- +# | Config file for host | +# ---------------------------------------------------------------------- +server { + listen [::]:443 ssl; + listen 443 ssl; + http2 on; + + server_name paste.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_balanced.conf; + include custom.d/basic.conf; + + # ---------------------------------------------------------------------- + # | Custom rules & config for specific website | + # ---------------------------------------------------------------------- + location / { + set $upstream http://127.0.0.1:8084; + proxy_pass $upstream; + + include custom.d/reverse_proxy/basic.conf; + } + + include custom.d/security/robots_index_only.conf; + # ---------------------------------------------------------------------- +} + +# ---------------------------------------------------------------------- +# | Config file for non-secure host | +# ---------------------------------------------------------------------- +server { + listen [::]:80; + listen 80; + server_name paste.cleberg.net; + + return 301 https://$host$request_uri; +} diff --git a/linux/nginx/etc/nginx/conf.d/pb.conf b/linux/nginx/etc/nginx/conf.d/pb.conf new file mode 100644 index 0000000..4adbc0a --- /dev/null +++ b/linux/nginx/etc/nginx/conf.d/pb.conf @@ -0,0 +1,39 @@ +# ---------------------------------------------------------------------- +# | Config file for host | +# ---------------------------------------------------------------------- +server { + listen [::]:443 ssl; + listen 443 ssl; + http2 on; + + server_name pb.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_balanced.conf; + include custom.d/basic.conf; + + # ---------------------------------------------------------------------- + # | Custom rules & config for specific website | + # ---------------------------------------------------------------------- + location / { + set $upstream http://127.0.0.1:8745; + proxy_pass $upstream; + + include custom.d/reverse_proxy/basic.conf; + } + + # include custom.d/security/robots_index_only.conf; + # ---------------------------------------------------------------------- +} + +# ---------------------------------------------------------------------- +# | Config file for non-secure host | +# ---------------------------------------------------------------------- +server { + listen [::]:80; + listen 80; + server_name pb.cleberg.net; + + return 301 https://$host$request_uri; +} diff --git a/linux/nginx/etc/nginx/conf.d/photos.conf b/linux/nginx/etc/nginx/conf.d/photos.conf new file mode 100644 index 0000000..1a1e41a --- /dev/null +++ b/linux/nginx/etc/nginx/conf.d/photos.conf @@ -0,0 +1,54 @@ +# ---------------------------------------------------------------------- +# | Config file for host | +# ---------------------------------------------------------------------- +server { + listen [::]:443 ssl; + listen 443 ssl; + http2 on; + + server_name photos.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_balanced.conf; + include custom.d/basic.conf; + + # ---------------------------------------------------------------------- + # | Custom rules & config for specific website | + # ---------------------------------------------------------------------- + # allow large file uploads + client_max_body_size 50000M; + + # Set headers + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + + # enable websockets: http://nginx.org/en/docs/http/websocket.html + proxy_http_version 1.1; + proxy_set_header Upgrade $http_upgrade; + proxy_set_header Connection "upgrade"; + proxy_redirect off; + + # set timeout + proxy_read_timeout 600s; + proxy_send_timeout 600s; + send_timeout 600s; + + location / { + proxy_pass http://127.0.0.1:2283; + } + # ---------------------------------------------------------------------- +} + +# ---------------------------------------------------------------------- +# | Config file for non-secure host | +# ---------------------------------------------------------------------- +server { + listen [::]:80; + listen 80; + server_name photos.cleberg.net; + + return 301 https://$host$request_uri; +} diff --git a/linux/nginx/etc/nginx/conf.d/pin.conf b/linux/nginx/etc/nginx/conf.d/pin.conf new file mode 100644 index 0000000..228cfd0 --- /dev/null +++ b/linux/nginx/etc/nginx/conf.d/pin.conf @@ -0,0 +1,39 @@ +# ---------------------------------------------------------------------- +# | Config file for host | +# ---------------------------------------------------------------------- +server { + listen [::]:443 ssl; + listen 443 ssl; + http2 on; + + server_name pin.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_balanced.conf; + include custom.d/basic.conf; + + # ---------------------------------------------------------------------- + # | Custom rules & config for specific website | + # ---------------------------------------------------------------------- + location / { + set $upstream http://127.0.0.1:8086; + proxy_pass $upstream; + + include custom.d/reverse_proxy/basic.conf; + } + + include custom.d/security/robots_index_only.conf; + # ---------------------------------------------------------------------- +} + +# ---------------------------------------------------------------------- +# | Config file for non-secure host | +# ---------------------------------------------------------------------- +server { + listen [::]:80; + listen 80; + server_name pin.cleberg.net; + + return 301 https://$host$request_uri; +} diff --git a/linux/nginx/etc/nginx/conf.d/piped.conf b/linux/nginx/etc/nginx/conf.d/piped.conf new file mode 100644 index 0000000..8efa6aa --- /dev/null +++ b/linux/nginx/etc/nginx/conf.d/piped.conf @@ -0,0 +1,40 @@ +# ---------------------------------------------------------------------- +# | Config file for host | +# ---------------------------------------------------------------------- +server { + listen [::]:443 ssl; + listen 443 ssl; + http2 on; + + server_name piped.cleberg.net pipedapi.cleberg.net pipedproxy.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_balanced.conf; + include custom.d/basic.conf; + + # ---------------------------------------------------------------------- + # | Custom rules & config for specific website | + # ---------------------------------------------------------------------- + location / { + set $upstream http://127.0.0.1:8077; + proxy_pass $upstream; + + proxy_set_header Host $host; + # include custom.d/reverse_proxy/basic.conf; + } + + include custom.d/security/robots_index_only.conf; + # ---------------------------------------------------------------------- +} + +# ---------------------------------------------------------------------- +# | Config file for non-secure host | +# ---------------------------------------------------------------------- +server { + listen [::]:80; + listen 80; + server_name piped.cleberg.net pipedapi.cleberg.net pipedproxy.cleberg.net; + + return 301 https://$host$request_uri; +} diff --git a/linux/nginx/etc/nginx/conf.d/rd.conf b/linux/nginx/etc/nginx/conf.d/rd.conf new file mode 100644 index 0000000..bea88da --- /dev/null +++ b/linux/nginx/etc/nginx/conf.d/rd.conf @@ -0,0 +1,39 @@ +# ---------------------------------------------------------------------- +# | Config file for host | +# ---------------------------------------------------------------------- +server { + listen [::]:443 ssl; + listen 443 ssl; + http2 on; + + server_name rd.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_balanced.conf; + include custom.d/basic.conf; + + # ---------------------------------------------------------------------- + # | Custom rules & config for specific website | + # ---------------------------------------------------------------------- + location / { + set $upstream http://127.0.0.1:5758; + proxy_pass $upstream; + + include custom.d/reverse_proxy/basic.conf; + } + + include custom.d/security/robots_index_only.conf; + # ---------------------------------------------------------------------- +} + +# ---------------------------------------------------------------------- +# | Config file for non-secure host | +# ---------------------------------------------------------------------- +server { + listen [::]:80; + listen 80; + server_name rd.cleberg.net; + + return 301 https://$host$request_uri; +} diff --git a/linux/nginx/etc/nginx/conf.d/rimgo.conf b/linux/nginx/etc/nginx/conf.d/rimgo.conf new file mode 100644 index 0000000..2d1272f --- /dev/null +++ b/linux/nginx/etc/nginx/conf.d/rimgo.conf @@ -0,0 +1,39 @@ +# ---------------------------------------------------------------------- +# | Config file for host | +# ---------------------------------------------------------------------- +server { + listen [::]:443 ssl; + listen 443 ssl; + http2 on; + + server_name rimgo.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_balanced.conf; + include custom.d/basic.conf; + + # ---------------------------------------------------------------------- + # | Custom rules & config for specific website | + # ---------------------------------------------------------------------- + location / { + set $upstream http://127.0.0.1:3869; + proxy_pass $upstream; + + include custom.d/reverse_proxy/basic.conf; + } + + include custom.d/security/robots_index_only.conf; + # ---------------------------------------------------------------------- +} + +# ---------------------------------------------------------------------- +# | Config file for non-secure host | +# ---------------------------------------------------------------------- +server { + listen [::]:80; + listen 80; + server_name rimgo.cleberg.net; + + return 301 https://$host$request_uri; +} diff --git a/linux/nginx/etc/nginx/conf.d/rl.conf b/linux/nginx/etc/nginx/conf.d/rl.conf new file mode 100644 index 0000000..d00f563 --- /dev/null +++ b/linux/nginx/etc/nginx/conf.d/rl.conf @@ -0,0 +1,44 @@ +# ---------------------------------------------------------------------- +# | Config file for host | +# ---------------------------------------------------------------------- +server { + listen [::]:443 ssl; + listen 443 ssl; + http2 on; + + server_name rl.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_balanced.conf; + include custom.d/basic.conf; + + # ---------------------------------------------------------------------- + # | Custom rules & config for specific website | + # ---------------------------------------------------------------------- + location /authelia { + include custom.d/reverse_proxy/authelia.conf; + } + + location / { + set $upstream http://192.168.0.251:8983; + proxy_pass $upstream; + + include custom.d/reverse_proxy/authelia_request.conf; + include custom.d/reverse_proxy/basic.conf; + } + + include custom.d/security/robots_index_only.conf; + # ---------------------------------------------------------------------- +} + +# ---------------------------------------------------------------------- +# | Config file for non-secure host | +# ---------------------------------------------------------------------- +server { + listen [::]:80; + listen 80; + server_name rl.cleberg.net; + + return 301 https://$host$request_uri; +} diff --git a/linux/nginx/etc/nginx/conf.d/rss.conf b/linux/nginx/etc/nginx/conf.d/rss.conf new file mode 100644 index 0000000..a097b50 --- /dev/null +++ b/linux/nginx/etc/nginx/conf.d/rss.conf @@ -0,0 +1,58 @@ +# ---------------------------------------------------------------------- +# | Config file for host | +# ---------------------------------------------------------------------- +upstream freshrss { + server 192.168.0.251:8081; + keepalive 64; +} + +server { + listen [::]:443 ssl; + listen 443 ssl; + http2 on; + + server_name rss.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_balanced.conf; + include custom.d/basic.conf; + + # ---------------------------------------------------------------------- + # | Custom rules & config for specific website | + # ---------------------------------------------------------------------- + location / { + proxy_pass http://freshrss/; + + # include custom.d/reverse_proxy/basic.conf; + + add_header X-Frame-Options SAMEORIGIN; + add_header X-XSS-Protection "1; mode=block"; + proxy_redirect off; + proxy_buffering off; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + proxy_set_header X-Forwarded-Port $server_port; + proxy_read_timeout 90; + + # Forward the Authorization header for the Google Reader API. + proxy_set_header Authorization $http_authorization; + proxy_pass_header Authorization; + } + + include custom.d/security/robots_index_only.conf; + # ---------------------------------------------------------------------- +} + +# ---------------------------------------------------------------------- +# | Config file for non-secure host | +# ---------------------------------------------------------------------- +server { + listen [::]:80; + listen 80; + server_name rss.cleberg.net; + + return 301 https://$host$request_uri; +} diff --git a/linux/nginx/etc/nginx/conf.d/search.conf b/linux/nginx/etc/nginx/conf.d/search.conf new file mode 100644 index 0000000..8ba49b0 --- /dev/null +++ b/linux/nginx/etc/nginx/conf.d/search.conf @@ -0,0 +1,44 @@ +# ---------------------------------------------------------------------- +# | Config file for host | +# ---------------------------------------------------------------------- +server { + listen [::]:443 ssl; + listen 443 ssl; + http2 on; + + server_name search.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_balanced.conf; + include custom.d/basic.conf; + + # ---------------------------------------------------------------------- + # | Custom rules & config for specific website | + # ---------------------------------------------------------------------- + location / { + set $upstream http://127.0.0.1:9191; + proxy_pass $upstream; + + # include custom.d/reverse_proxy/basic.conf; + proxy_set_header Host $host; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header Upgrade $http_upgrade; + proxy_set_header Connection "upgrade"; + proxy_http_version 1.1; + } + + include custom.d/security/robots_index_only.conf; + # ---------------------------------------------------------------------- +} + +# ---------------------------------------------------------------------- +# | Config file for non-secure host | +# ---------------------------------------------------------------------- +server { + listen [::]:80; + listen 80; + server_name search.cleberg.net; + + return 301 https://$host$request_uri; +} diff --git a/linux/nginx/etc/nginx/conf.d/send.conf b/linux/nginx/etc/nginx/conf.d/send.conf new file mode 100644 index 0000000..0314bb5 --- /dev/null +++ b/linux/nginx/etc/nginx/conf.d/send.conf @@ -0,0 +1,39 @@ +# ---------------------------------------------------------------------- +# | Config file for host | +# ---------------------------------------------------------------------- +server { + listen [::]:443 ssl; + listen 443 ssl; + http2 on; + + server_name send.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_balanced.conf; + include custom.d/basic.conf; + + # ---------------------------------------------------------------------- + # | Custom rules & config for specific website | + # ---------------------------------------------------------------------- + location / { + set $upstream http://192.168.0.251:1443; + proxy_pass $upstream; + + include custom.d/reverse_proxy/basic.conf; + } + + include custom.d/security/robots_index_only.conf; + # ---------------------------------------------------------------------- +} + +# ---------------------------------------------------------------------- +# | Config file for non-secure host | +# ---------------------------------------------------------------------- +server { + listen [::]:80; + listen 80; + server_name send.cleberg.net; + + return 301 https://$host$request_uri; +} diff --git a/linux/nginx/etc/nginx/conf.d/slash.conf b/linux/nginx/etc/nginx/conf.d/slash.conf new file mode 100644 index 0000000..b7489dd --- /dev/null +++ b/linux/nginx/etc/nginx/conf.d/slash.conf @@ -0,0 +1,39 @@ +# ---------------------------------------------------------------------- +# | Config file for host | +# ---------------------------------------------------------------------- +server { + listen [::]:443 ssl; + listen 443 ssl; + http2 on; + + server_name slash.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_balanced.conf; + include custom.d/basic.conf; + + # ---------------------------------------------------------------------- + # | Custom rules & config for specific website | + # ---------------------------------------------------------------------- + location / { + set $upstream http://192.168.0.251:5231; + proxy_pass $upstream; + + include custom.d/reverse_proxy/basic.conf; + } + + include custom.d/security/robots_index_only.conf; + # ---------------------------------------------------------------------- +} + +# ---------------------------------------------------------------------- +# | Config file for non-secure host | +# ---------------------------------------------------------------------- +server { + listen [::]:80; + listen 80; + server_name slash.cleberg.net; + + return 301 https://$host$request_uri; +} diff --git a/linux/nginx/etc/nginx/conf.d/small.conf b/linux/nginx/etc/nginx/conf.d/small.conf new file mode 100644 index 0000000..1bdb145 --- /dev/null +++ b/linux/nginx/etc/nginx/conf.d/small.conf @@ -0,0 +1,39 @@ +# ---------------------------------------------------------------------- +# | Config file for host | +# ---------------------------------------------------------------------- +server { + listen [::]:443 ssl; + listen 443 ssl; + http2 on; + + server_name small.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_balanced.conf; + include custom.d/basic.conf; + + # ---------------------------------------------------------------------- + # | Custom rules & config for specific website | + # ---------------------------------------------------------------------- + location / { + set $upstream http://127.0.0.1:8002; + proxy_pass $upstream; + + include custom.d/reverse_proxy/basic.conf; + } + + include custom.d/security/robots_index_only.conf; + # ---------------------------------------------------------------------- +} + +# ---------------------------------------------------------------------- +# | Config file for non-secure host | +# ---------------------------------------------------------------------- +server { + listen [::]:80; + listen 80; + server_name small.cleberg.net; + + return 301 https://$host$request_uri; +} diff --git a/linux/nginx/etc/nginx/conf.d/ssh.conf b/linux/nginx/etc/nginx/conf.d/ssh.conf new file mode 100644 index 0000000..726a0d8 --- /dev/null +++ b/linux/nginx/etc/nginx/conf.d/ssh.conf @@ -0,0 +1,44 @@ +# ---------------------------------------------------------------------- +# | Config file for host | +# ---------------------------------------------------------------------- +server { + listen [::]:443 ssl; + listen 443 ssl; + http2 on; + + server_name ssh.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_balanced.conf; + include custom.d/basic.conf; + + # ---------------------------------------------------------------------- + # | Custom rules & config for specific website | + # ---------------------------------------------------------------------- + location /authelia { + include custom.d/reverse_proxy/authelia.conf; + } + + location / { + set $upstream http://127.0.0.1:8169; + proxy_pass $upstream; + + include custom.d/reverse_proxy/authelia_request.conf; + include custom.d/reverse_proxy/basic.conf; + } + + include custom.d/security/robots_index_only.conf; + # ---------------------------------------------------------------------- +} + +# ---------------------------------------------------------------------- +# | Config file for non-secure host | +# ---------------------------------------------------------------------- +server { + listen [::]:80; + listen 80; + server_name ssh.cleberg.net; + + return 301 https://$host$request_uri; +} diff --git a/linux/nginx/etc/nginx/conf.d/teddit.conf b/linux/nginx/etc/nginx/conf.d/teddit.conf new file mode 100644 index 0000000..f96bd34 --- /dev/null +++ b/linux/nginx/etc/nginx/conf.d/teddit.conf @@ -0,0 +1,44 @@ +# ---------------------------------------------------------------------- +# | Config file for host | +# ---------------------------------------------------------------------- +server { + listen [::]:443 ssl; + listen 443 ssl; + http2 on; + + server_name teddit.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_balanced.conf; + include custom.d/basic.conf; + + # ---------------------------------------------------------------------- + # | Custom rules & config for specific website | + # ---------------------------------------------------------------------- + location /authelia { + include custom.d/reverse_proxy/authelia.conf; + } + + location / { + set $upstream http://192.168.0.251:8181; + proxy_pass $upstream; + + include custom.d/reverse_proxy/authelia_request.conf; + include custom.d/reverse_proxy/basic.conf; + } + + include custom.d/security/robots_index_only.conf; + # ---------------------------------------------------------------------- +} + +# ---------------------------------------------------------------------- +# | Config file for non-secure host | +# ---------------------------------------------------------------------- +server { + listen [::]:80; + listen 80; + server_name teddit.cleberg.net; + + return 301 https://$host$request_uri; +} diff --git a/linux/nginx/etc/nginx/conf.d/wyl.conf b/linux/nginx/etc/nginx/conf.d/wyl.conf new file mode 100644 index 0000000..da20b69 --- /dev/null +++ b/linux/nginx/etc/nginx/conf.d/wyl.conf @@ -0,0 +1,44 @@ +# ---------------------------------------------------------------------- +# | Config file for host | +# ---------------------------------------------------------------------- +server { + listen [::]:443 ssl; + listen 443 ssl; + http2 on; + + server_name wyl.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_balanced.conf; + include custom.d/basic.conf; + + # ---------------------------------------------------------------------- + # | Custom rules & config for specific website | + # ---------------------------------------------------------------------- + location /authelia { + include custom.d/reverse_proxy/authelia.conf; + } + + location / { + set $upstream http://192.168.0.251:8840; + proxy_pass $upstream; + + include custom.d/reverse_proxy/authelia_request.conf; + include custom.d/reverse_proxy/basic.conf; + } + + include custom.d/security/robots_index_only.conf; + # ---------------------------------------------------------------------- +} + +# ---------------------------------------------------------------------- +# | Config file for non-secure host | +# ---------------------------------------------------------------------- +server { + listen [::]:80; + listen 80; + server_name wyl.cleberg.net; + + return 301 https://$host$request_uri; +} |