This commit is contained in:
Roland Schneider
2023-06-06 09:14:58 +00:00
parent e1d153f71c
commit 03f79b2d9f
28 changed files with 450 additions and 6 deletions

View File

@@ -53,6 +53,6 @@ server {
ssl_certificate_key /etc/nginx/ssl/live/ios.rschneider.hu/privkey.pem;
location / {
proxy_pass http://rocho02.ddns.net:3085;
proxy_pass http://46.251.21.47:3085;
}
}

View File

@@ -19,7 +19,7 @@ server {
ssl_certificate_key /etc/nginx/ssl/live/docker.rschneider.hu/privkey.pem;
location / {
proxy_pass http://rocho02.ddns.net:3082;
proxy_pass http://46.251.21.47:3082;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

View File

@@ -0,0 +1,28 @@
server {
listen 443 ssl http2;
listen [::]:443 ssl http2;
server_name heimdall.rschneider.hu;
proxy_send_timeout 120;
proxy_read_timeout 300;
proxy_buffering off;
proxy_request_buffering off;
keepalive_timeout 5 5;
tcp_nodelay on;
# allow large uploads of files - refer to nginx documentation
client_max_body_size 2G;
ssl_certificate /etc/nginx/ssl/live/heimdall.rschneider.hu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/heimdall.rschneider.hu/privkey.pem;
location / {
proxy_pass https://46.251.21.47:3002;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
}

View File

@@ -0,0 +1,28 @@
server {
listen 443 ssl http2;
listen [::]:443 ssl http2;
server_name k8sdash.rschneider.hu;
proxy_send_timeout 120;
proxy_read_timeout 300;
proxy_buffering off;
proxy_request_buffering off;
keepalive_timeout 5 5;
tcp_nodelay on;
# allow large uploads of files - refer to nginx documentation
client_max_body_size 2G;
ssl_certificate /etc/nginx/ssl/live/k8sdash.rschneider.hu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/k8sdash.rschneider.hu/privkey.pem;
location / {
proxy_pass http://46.251.21.47:5000;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
}

View File

@@ -9,7 +9,7 @@ server {
ssl_certificate_key /etc/nginx/ssl/live/nextcloud.rschneider.hu/privkey.pem;
location / {
proxy_pass http://rocho02.ddns.net:3680;
proxy_pass http://46.251.21.47:3680;
}
}

View File

@@ -19,7 +19,7 @@ server {
ssl_certificate_key /etc/nginx/ssl/live/nexus.rschneider.hu/privkey.pem;
location / {
proxy_pass http://rocho02.ddns.net:3082;
proxy_pass http://46.251.21.47:3081;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

View File

@@ -19,7 +19,7 @@ server {
ssl_certificate_key /etc/nginx/ssl/live/registry.rschneider.hu/privkey.pem;
location / {
proxy_pass http://rocho02.ddns.net:3082;
proxy_pass http://46.251.21.47:3082;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

View File

@@ -0,0 +1,10 @@
upstream nas1-ssh {
server 46.251.21.47:10022;
}
server {
listen 80;
server_name ssh.nas1.rschneider.hu
proxy_pass nas1-ssh;
}

View File

@@ -0,0 +1,10 @@
upstream nuc-ssh {
server 46.251.21.47:2022;
}
server {
listen 80;
server_name ssh.nuc.rschneider.hu
proxy_pass nuc-ssh;
}

View File

@@ -0,0 +1,15 @@
server {
listen 443 ssl http2;
listen [::]:443 ssl http2;
server_name wikijs.rschneider.hu;
ssl_certificate /etc/nginx/ssl/live/wikijs.rschneider.hu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/wikijs.rschneider.hu/privkey.pem;
location / {
proxy_pass http://46.251.21.47:3010;
}
}

View File

@@ -0,0 +1,28 @@
server {
listen 443 ssl http2;
listen [::]:443 ssl http2;
server_name wiki.rschneider.hu;
proxy_send_timeout 120;
proxy_read_timeout 300;
proxy_buffering off;
proxy_request_buffering off;
keepalive_timeout 5 5;
tcp_nodelay on;
# allow large uploads of files - refer to nginx documentation
client_max_body_size 2G;
ssl_certificate /etc/nginx/ssl/live/wiki.rschneider.hu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/wiki.rschneider.hu/privkey.pem;
location / {
proxy_pass http://46.251.21.47:3030;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
}

View File

@@ -0,0 +1,58 @@
server {
listen 80;
listen [::]:80;
server_name rschneider.hu www.rschneider.hu;
server_tokens off;
location /.well-known/acme-challenge/ {
root /var/www/certbot;
}
location / {
return 301 https://rschneider.hu$request_uri;
}
}
server {
listen 443 default_server ssl http2;
listen [::]:443 ssl http2;
server_name rschneider.hu;
ssl_certificate /etc/nginx/ssl/live/rschneider.hu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/rschneider.hu/privkey.pem;
location / {
proxy_pass http://rschneider.hu:40001;
}
}
server {
listen 443 ssl http2;
listen [::]:443 ssl http2;
server_name cutlergyor.rschneider.hu;
ssl_certificate /etc/nginx/ssl/live/cutlergyor.rschneider.hu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/cutlergyor.rschneider.hu/privkey.pem;
location / {
proxy_pass http://rschneider.hu:40001;
}
}
server {
listen 443 ssl http2;
listen [::]:443 ssl http2;
server_name ios.rschneider.hu;
ssl_certificate /etc/nginx/ssl/live/ios.rschneider.hu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/ios.rschneider.hu/privkey.pem;
location / {
proxy_pass http://${nuc}:3085;
}
}

View File

@@ -0,0 +1,28 @@
server {
listen 443 ssl http2;
listen [::]:443 ssl http2;
server_name docker.rschneider.hu;
proxy_send_timeout 120;
proxy_read_timeout 300;
proxy_buffering off;
proxy_request_buffering off;
keepalive_timeout 5 5;
tcp_nodelay on;
# allow large uploads of files - refer to nginx documentation
client_max_body_size 2G;
ssl_certificate /etc/nginx/ssl/live/docker.rschneider.hu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/docker.rschneider.hu/privkey.pem;
location / {
proxy_pass http://${nuc}:3082;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
}

View File

@@ -0,0 +1,28 @@
server {
listen 443 ssl http2;
listen [::]:443 ssl http2;
server_name heimdall.rschneider.hu;
proxy_send_timeout 120;
proxy_read_timeout 300;
proxy_buffering off;
proxy_request_buffering off;
keepalive_timeout 5 5;
tcp_nodelay on;
# allow large uploads of files - refer to nginx documentation
client_max_body_size 2G;
ssl_certificate /etc/nginx/ssl/live/heimdall.rschneider.hu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/heimdall.rschneider.hu/privkey.pem;
location / {
proxy_pass https://${nuc}:3002;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
}

View File

@@ -0,0 +1,28 @@
server {
listen 443 ssl http2;
listen [::]:443 ssl http2;
server_name k8sdash.rschneider.hu;
proxy_send_timeout 120;
proxy_read_timeout 300;
proxy_buffering off;
proxy_request_buffering off;
keepalive_timeout 5 5;
tcp_nodelay on;
# allow large uploads of files - refer to nginx documentation
client_max_body_size 2G;
ssl_certificate /etc/nginx/ssl/live/k8sdash.rschneider.hu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/k8sdash.rschneider.hu/privkey.pem;
location / {
proxy_pass http://${nuc}:5000;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
}

View File

@@ -0,0 +1,15 @@
server {
listen 443 ssl http2;
listen [::]:443 ssl http2;
server_name nextcloud.rschneider.hu;
ssl_certificate /etc/nginx/ssl/live/nextcloud.rschneider.hu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/nextcloud.rschneider.hu/privkey.pem;
location / {
proxy_pass http://${nuc}:3680;
}
}

View File

@@ -0,0 +1,28 @@
server {
listen 443 ssl http2;
listen [::]:443 ssl http2;
server_name nexus.rschneider.hu;
proxy_send_timeout 120;
proxy_read_timeout 300;
proxy_buffering off;
proxy_request_buffering off;
keepalive_timeout 5 5;
tcp_nodelay on;
# allow large uploads of files - refer to nginx documentation
client_max_body_size 2G;
ssl_certificate /etc/nginx/ssl/live/nexus.rschneider.hu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/nexus.rschneider.hu/privkey.pem;
location / {
proxy_pass http://${nuc}:3081;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
}

View File

@@ -0,0 +1,28 @@
server {
listen 443 ssl http2;
listen [::]:443 ssl http2;
server_name registry.rschneider.hu;
proxy_send_timeout 120;
proxy_read_timeout 300;
proxy_buffering off;
proxy_request_buffering off;
keepalive_timeout 5 5;
tcp_nodelay on;
# allow large uploads of files - refer to nginx documentation
client_max_body_size 2G;
ssl_certificate /etc/nginx/ssl/live/registry.rschneider.hu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/registry.rschneider.hu/privkey.pem;
location / {
proxy_pass http://${nuc}:3082;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
}

View File

@@ -0,0 +1,10 @@
upstream nas1-ssh {
server ${nuc}:10022;
}
server {
listen 80;
server_name ssh.nas1.rschneider.hu
proxy_pass nas1-ssh;
}

View File

@@ -0,0 +1,11 @@
stream{
upstream nuc-ssh {
server ${nuc}:2022;
}
server {
listen 80;
server_name ssh.nuc.rschneider.hu
proxy_pass nuc-ssh;
}
}

View File

@@ -0,0 +1,15 @@
server {
listen 443 ssl http2;
listen [::]:443 ssl http2;
server_name wikijs.rschneider.hu;
ssl_certificate /etc/nginx/ssl/live/wikijs.rschneider.hu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/wikijs.rschneider.hu/privkey.pem;
location / {
proxy_pass http://${nuc}:3010;
}
}

View File

@@ -0,0 +1,28 @@
server {
listen 443 ssl http2;
listen [::]:443 ssl http2;
server_name wiki.rschneider.hu;
proxy_send_timeout 120;
proxy_read_timeout 300;
proxy_buffering off;
proxy_request_buffering off;
keepalive_timeout 5 5;
tcp_nodelay on;
# allow large uploads of files - refer to nginx documentation
client_max_body_size 2G;
ssl_certificate /etc/nginx/ssl/live/wiki.rschneider.hu/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/wiki.rschneider.hu/privkey.pem;
location / {
proxy_pass http://${nuc}:3030;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
}