initial commit

.gitignore

@@ -0,0 +1 @@
+certbot

default.conf.bak

@@ -0,0 +1,59 @@
+server {
+    listen 80;
+    listen [::]:80;
+
+    server_name rschneider.hu www.rschneider.hu;
+    server_tokens off;
+
+    location /.well-known/acme-challenge/ {
+        root /var/www/certbot;
+    }
+
+    location / {
+        return 301 https://rschneider.hu$request_uri;
+    }
+}
+
+server {
+    listen 443 default_server ssl http2;
+    listen [::]:443 ssl http2;
+
+    server_name rschneider.hu;
+
+    ssl_certificate /etc/nginx/ssl/live/rschneider.hu/fullchain.pem;
+    ssl_certificate_key /etc/nginx/ssl/live/rschneider.hu/privkey.pem;
+    
+    location / {
+        proxy_pass http://rschneider.hu:40001;
+    }
+}
+
+
+server {
+    listen 443 ssl http2;
+    listen [::]:443 ssl http2;
+
+    server_name cutlergyor.rschneider.hu;
+
+    ssl_certificate /etc/nginx/ssl/live/cutlergyor.rschneider.hu/fullchain.pem;
+    ssl_certificate_key /etc/nginx/ssl/live/cutlergyor.rschneider.hu/privkey.pem;
+    
+    location / {
+        proxy_pass http://rschneider.hu:40001;
+    }
+}
+
+server {
+
+    listen 443 ssl http2;
+    listen [::]:443 ssl http2;
+
+    server_name wiki.rschneider.hu;
+
+    ssl_certificate /etc/nginx/ssl/live/wiki.rschneider.hu/fullchain.pem;
+    ssl_certificate_key /etc/nginx/ssl/live/wiki.rschneider.hu/privkey.pem;
+    
+    location / {
+        proxy_pass http://rocho02.ddns.net:3030;
+    }
+}

docker-compose.yaml

@@ -0,0 +1,18 @@
+version: '3'
+
+services:
+  webserver:
+    image: nginx:latest
+    ports:
+      - 80:80
+      - 443:443
+#    restart: always
+    volumes:
+      - ./nginx/conf/:/etc/nginx/conf.d/:ro
+      - ./certbot/www:/var/www/certbot/:ro
+      - ./certbot/conf/:/etc/nginx/ssl/:ro
+  certbot:
+    image: certbot/certbot:latest
+    volumes:
+      - ./certbot/www/:/var/www/certbot/:rw
+      - ./certbot/conf/:/etc/letsencrypt/:rw

nextcloud.rschneider.hu.conf

@@ -0,0 +1,15 @@
+server {
+
+    listen 443 ssl http2;
+    listen [::]:443 ssl http2;
+
+    server_name nextcloud.rschneider.hu;
+
+    ssl_certificate /etc/nginx/ssl/live/nextcloud.rschneider.hu/fullchain.pem;
+    ssl_certificate_key /etc/nginx/ssl/live/nextcloud.rschneider.hu/privkey.pem;
+    
+    location / {
+        proxy_pass http://rocho02.ddns.net:3680;
+    }
+}
+

nginx/conf/default.conf

@@ -0,0 +1,58 @@
+server {
+    listen 80;
+    listen [::]:80;
+
+    server_name rschneider.hu www.rschneider.hu;
+    server_tokens off;
+
+    location /.well-known/acme-challenge/ {
+        root /var/www/certbot;
+    }
+
+    location / {
+        return 301 https://rschneider.hu$request_uri;
+    }
+}
+
+server {
+    listen 443 default_server ssl http2;
+    listen [::]:443 ssl http2;
+
+    server_name rschneider.hu;
+
+    ssl_certificate /etc/nginx/ssl/live/rschneider.hu/fullchain.pem;
+    ssl_certificate_key /etc/nginx/ssl/live/rschneider.hu/privkey.pem;
+    
+    location / {
+        proxy_pass http://rschneider.hu:40001;
+    }
+}
+
+
+server {
+    listen 443 ssl http2;
+    listen [::]:443 ssl http2;
+
+    server_name cutlergyor.rschneider.hu;
+
+    ssl_certificate /etc/nginx/ssl/live/cutlergyor.rschneider.hu/fullchain.pem;
+    ssl_certificate_key /etc/nginx/ssl/live/cutlergyor.rschneider.hu/privkey.pem;
+    
+    location / {
+        proxy_pass http://rschneider.hu:40001;
+    }
+}
+
+server {
+    listen 443 ssl http2;
+    listen [::]:443 ssl http2;
+
+    server_name ios.rschneider.hu;
+
+    ssl_certificate /etc/nginx/ssl/live/ios.rschneider.hu/fullchain.pem;
+    ssl_certificate_key /etc/nginx/ssl/live/ios.rschneider.hu/privkey.pem;
+    
+    location / {
+        proxy_pass http://rocho02.ddns.net:3085;
+    }
+}

nginx/conf/docker.rschneider.hu.conf

@@ -0,0 +1,28 @@
+server {
+
+    listen 443 ssl http2;
+    listen [::]:443 ssl http2;
+
+    server_name docker.rschneider.hu;
+
+    proxy_send_timeout 120;
+    proxy_read_timeout 300;
+    proxy_buffering    off;
+    proxy_request_buffering off;
+    keepalive_timeout  5 5;
+    tcp_nodelay        on;
+
+    # allow large uploads of files - refer to nginx documentation
+    client_max_body_size 2G;
+
+    ssl_certificate /etc/nginx/ssl/live/docker.rschneider.hu/fullchain.pem;
+    ssl_certificate_key /etc/nginx/ssl/live/docker.rschneider.hu/privkey.pem;
+    
+    location / {
+        proxy_pass http://rocho02.ddns.net:3082;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    }
+}
+

nginx/conf/nextcloud.rschneider.hu.conf

@@ -0,0 +1,15 @@
+server {
+
+    listen 443 ssl http2;
+    listen [::]:443 ssl http2;
+
+    server_name nextcloud.rschneider.hu;
+
+    ssl_certificate /etc/nginx/ssl/live/nextcloud.rschneider.hu/fullchain.pem;
+    ssl_certificate_key /etc/nginx/ssl/live/nextcloud.rschneider.hu/privkey.pem;
+    
+    location / {
+        proxy_pass http://rocho02.ddns.net:3680;
+    }
+}
+

nginx/conf/nexus.rschneider.hu.conf

@@ -0,0 +1,28 @@
+server {
+
+    listen 443 ssl http2;
+    listen [::]:443 ssl http2;
+
+    server_name nexus.rschneider.hu;
+
+    proxy_send_timeout 120;
+    proxy_read_timeout 300;
+    proxy_buffering    off;
+    proxy_request_buffering off;
+    keepalive_timeout  5 5;
+    tcp_nodelay        on;
+
+    # allow large uploads of files - refer to nginx documentation
+    client_max_body_size 2G;
+
+    ssl_certificate /etc/nginx/ssl/live/nexus.rschneider.hu/fullchain.pem;
+    ssl_certificate_key /etc/nginx/ssl/live/nexus.rschneider.hu/privkey.pem;
+    
+    location / {
+        proxy_pass http://rocho02.ddns.net:3082;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    }
+}
+

nginx/conf/registry.rschneider.hu.conf

@@ -0,0 +1,28 @@
+server {
+
+    listen 443 ssl http2;
+    listen [::]:443 ssl http2;
+
+    server_name registry.rschneider.hu;
+
+    proxy_send_timeout 120;
+    proxy_read_timeout 300;
+    proxy_buffering    off;
+    proxy_request_buffering off;
+    keepalive_timeout  5 5;
+    tcp_nodelay        on;
+
+    # allow large uploads of files - refer to nginx documentation
+    client_max_body_size 2G;
+
+    ssl_certificate /etc/nginx/ssl/live/registry.rschneider.hu/fullchain.pem;
+    ssl_certificate_key /etc/nginx/ssl/live/registry.rschneider.hu/privkey.pem;
+    
+    location / {
+        proxy_pass http://rocho02.ddns.net:3082;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    }
+}
+

wikijs.rschneider.hu.conf

@@ -0,0 +1,15 @@
+server {
+
+    listen 443 ssl http2;
+    listen [::]:443 ssl http2;
+
+    server_name wikijs.rschneider.hu;
+
+    ssl_certificate /etc/nginx/ssl/live/wikijs.rschneider.hu/fullchain.pem;
+    ssl_certificate_key /etc/nginx/ssl/live/wikijs.rschneider.hu/privkey.pem;
+    
+    location / {
+        proxy_pass http://rocho02.ddns.net:3010;
+    }
+}
+