Cari file su "/"
This commit is contained in:
parent
83fb960e9a
commit
8a66f4e374
1 changed files with 276 additions and 0 deletions
276
default.conf
Normal file
276
default.conf
Normal file
|
|
@ -0,0 +1,276 @@
|
|||
map $scheme $hsts_header {
|
||||
https "max-age=63072000; preload";
|
||||
}
|
||||
|
||||
map $host $myserver1 {
|
||||
default 192.168.1.4;
|
||||
}
|
||||
map $host $myserver2 {
|
||||
default 192.168.1.3;
|
||||
}
|
||||
|
||||
|
||||
map $http_host $nameport {
|
||||
hostnames;
|
||||
|
||||
default 443;
|
||||
|
||||
forgit.* 3100;
|
||||
portainer.* 9000;
|
||||
images.* 5557;
|
||||
terminal.* 2222;
|
||||
images-ui.* 5558;
|
||||
ha.* 8123;
|
||||
pairdrop.* 3333;
|
||||
}
|
||||
|
||||
map $http_host $loc2 {
|
||||
hostnames;
|
||||
|
||||
default /;
|
||||
|
||||
ha.* /api/websocket;
|
||||
}
|
||||
|
||||
map $http_host $nameport2 {
|
||||
hostnames;
|
||||
|
||||
default 443;
|
||||
|
||||
git.* 3003;
|
||||
portainer.* 9000;
|
||||
image.* 5557;
|
||||
images.* 5558;
|
||||
abook.* 13378;
|
||||
calibre.* 8083;
|
||||
gpxstudio.* 8111;
|
||||
ha.* 8123;
|
||||
maptile.* 8810;
|
||||
music.* 4533;
|
||||
nginx.* 81;
|
||||
notes.* 8180;
|
||||
pairdrop.* 3333;
|
||||
photo.* 8888;
|
||||
photoprism.* 2342;
|
||||
plex.* 32400;
|
||||
profiles.* 70000;
|
||||
route.* 17777;
|
||||
server.* 7771;
|
||||
studio.* 8112;
|
||||
}
|
||||
|
||||
|
||||
|
||||
upstream registry {
|
||||
server 192.168.1.4:5557;
|
||||
}
|
||||
|
||||
server {
|
||||
listen 443 ssl;
|
||||
server_name images.patachina.it;
|
||||
|
||||
ssl_certificate ssl/live/patachina.it/patachina.it_ssl_certificate.cer;
|
||||
ssl_certificate_key ssl/live/patachina.it/_.patachina.it_private_key.key;
|
||||
|
||||
location / {
|
||||
proxy_pass http://192.168.1.4:5557;
|
||||
proxy_set_header Host $host;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
}
|
||||
|
||||
location /v2/ {
|
||||
proxy_pass http://registry;
|
||||
proxy_set_header Host $http_host;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
|
||||
# These headers are required for Docker to trust the registry
|
||||
# certificate and enable client-side certificate validation
|
||||
proxy_ssl_verify on;
|
||||
proxy_ssl_trusted_certificate ssl/live/patachina.casacam.net/fullchain.pem;
|
||||
proxy_ssl_session_reuse off;
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
server {
|
||||
listen 80;
|
||||
listen [::]:80;
|
||||
|
||||
listen 443 ssl;
|
||||
listen [::]:443 ssl;
|
||||
|
||||
server_name ~^(?<name>\w+)\.patachina\.duckdns\.org$;
|
||||
|
||||
ssl_certificate ssl/live/patachina.duckdns.org/fullchain.pem;
|
||||
ssl_certificate_key ssl/live/patachina.duckdns.org/privkey.pem;
|
||||
include conf.d/include/websocket.conf;
|
||||
|
||||
location /args {
|
||||
add_header Content-Type text/plain;
|
||||
return 200
|
||||
"arg_name: $arg_name
|
||||
args: $args
|
||||
nane: $name
|
||||
uri: $uri
|
||||
request_uri: $request_uri
|
||||
content_length: $content_length
|
||||
content_type: $content_type
|
||||
document_root: $document_root
|
||||
document_uri: $document_uri
|
||||
host: $host
|
||||
host_name: $hostname
|
||||
http_name: $http_name
|
||||
https: $https
|
||||
is_args: $is_args
|
||||
nginx_version: $nginx_version
|
||||
pid: $pid
|
||||
query_string: $query_string
|
||||
remote_addr: $remote_addr
|
||||
request: $request
|
||||
request_method: $request_method
|
||||
server_name: $server_name
|
||||
server_port: $server_port
|
||||
server_protocol: $server_protocol
|
||||
status: $status
|
||||
time_local: $time_local
|
||||
|
||||
ora le mie variabili:
|
||||
Connection: $http_connection
|
||||
Upgrade: $http_upgrade
|
||||
Host: $host
|
||||
X-Real-IP: $remote_addr
|
||||
X-Forwarded-For: $proxy_add_x_forwarded_for
|
||||
X-Forwarded-Proto: $scheme
|
||||
PortForwarding: $nameport
|
||||
loc2: $loc2";
|
||||
}
|
||||
|
||||
location / {
|
||||
include conf.d/include/websocket.conf;
|
||||
add_header X-Served-By $host;
|
||||
|
||||
proxy_set_header Host $host;
|
||||
proxy_set_header X-Forwarded-Scheme $scheme;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_pass http://$myserver2:$nameport2$request_uri;
|
||||
#proxy_set_header Host $host;
|
||||
#proxy_http_version 1.1;
|
||||
#proxy_set_header Upgrade $http_upgrade;
|
||||
#proxy_set_header Connection "upgrade";
|
||||
|
||||
}
|
||||
location $loc2 {
|
||||
proxy_pass http://$myserver2:$nameport2$loc2$request_uri;
|
||||
proxy_set_header Host $host;
|
||||
proxy_http_version 1.1;
|
||||
proxy_set_header Upgrade $http_upgrade;
|
||||
proxy_set_header Connection "upgrade";
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
|
||||
|
||||
server {
|
||||
listen 80;
|
||||
listen [::]:80;
|
||||
|
||||
listen 443 ssl;
|
||||
listen [::]:443 ssl;
|
||||
server_name *.patachina.casacam.net;
|
||||
|
||||
ssl_certificate ssl/live/patachina.casacam.net/fullchain.pem;
|
||||
ssl_certificate_key ssl/live/patachina.casacam.net/privkey.pem;
|
||||
include conf.d/include/websocket.conf;
|
||||
|
||||
location / {
|
||||
include conf.d/include/websocket.conf;
|
||||
add_header X-Served-By $host;
|
||||
proxy_set_header Host $host;
|
||||
proxy_set_header X-Forwarded-Scheme $scheme;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_pass http://$myserver1:$nameport$request_uri;
|
||||
#proxy_set_header Host $host;
|
||||
#proxy_http_version 1.1;
|
||||
#proxy_set_header Upgrade $http_upgrade;
|
||||
#proxy_set_header Connection "upgrade";
|
||||
}
|
||||
location $loc2 {
|
||||
proxy_pass http://$myserver1:$nameport$loc2$request_uri;
|
||||
#proxy_set_header Host $http_host;
|
||||
#proxy_set_header X-Real-IP $remote_addr;
|
||||
#proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
#proxy_set_header X-Forwarded-Proto $scheme;
|
||||
proxy_set_header Host $host;
|
||||
proxy_http_version 1.1;
|
||||
proxy_set_header Upgrade $http_upgrade;
|
||||
proxy_set_header Connection "upgrade";
|
||||
# These headers are required for Docker to trust the registry
|
||||
# certificate and enable client-side certificate validation
|
||||
#proxy_ssl_verify on;
|
||||
#proxy_ssl_trusted_certificate ssl/live/patachina.casacam.net/fullchain1.pem;
|
||||
#proxy_ssl_session_reuse off;
|
||||
}
|
||||
}
|
||||
|
||||
server {
|
||||
listen 80;
|
||||
listen [::]:80;
|
||||
|
||||
listen 443 ssl;
|
||||
listen [::]:443 ssl;
|
||||
server_name *.patachina.it;
|
||||
|
||||
ssl_certificate ssl/live/patachina.it/patachina.it_ssl_certificate.cer;
|
||||
ssl_certificate_key ssl/live/patachina.it/_.patachina.it_private_key.key;
|
||||
include conf.d/include/websocket.conf;
|
||||
|
||||
location / {
|
||||
include conf.d/include/websocket.conf;
|
||||
add_header X-Served-By $host;
|
||||
proxy_set_header Host $host;
|
||||
proxy_set_header X-Forwarded-Scheme $scheme;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_pass http://$myserver1:$nameport$request_uri;
|
||||
#proxy_set_header Host $host;
|
||||
#proxy_http_version 1.1;
|
||||
#proxy_set_header Upgrade $http_upgrade;
|
||||
#proxy_set_header Connection "upgrade";
|
||||
}
|
||||
location $loc2 {
|
||||
#proxy_pass http://$myserver1:$nameport$loc2$request_uri;
|
||||
#proxy_set_header Host $http_host;
|
||||
#proxy_set_header X-Real-IP $remote_addr;
|
||||
#proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
#proxy_set_header X-Forwarded-Proto $scheme;
|
||||
#proxy_set_header Host $host;
|
||||
#proxy_http_version 1.1;
|
||||
#proxy_set_header Upgrade $http_upgrade;
|
||||
#proxy_set_header Connection "upgrade";
|
||||
# These headers are required for Docker to trust the registry
|
||||
# certificate and enable client-side certificate validation
|
||||
#proxy_ssl_verify on;
|
||||
#proxy_ssl_trusted_certificate ssl/live/patachina.casacam.net/fullchain1.pem;
|
||||
#proxy_ssl_session_reuse off;
|
||||
|
||||
include conf.d/include/websocket.conf;
|
||||
add_header X-Served-By $host;
|
||||
proxy_set_header Host $host;
|
||||
proxy_set_header X-Forwarded-Scheme $scheme;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_pass http://$myserver1:$nameport$request_uri;
|
||||
}
|
||||
}
|
||||
|
||||
Loading…
Reference in a new issue