copy of current nginx config

2023-11-17 18:28:18 -08:00
parent e7d4bceb3b
commit 5b200a9667
3 changed files with 56 additions and 28 deletions
@@ -15,4 +15,13 @@ Note: we are not using pi-hole as a DHCP server. We leave this to the router, al
 2. Do not use `.local` for domain in local DNS. You will see a warning when using dig that `.local` is reserved for mDNS.

 ## Container registry
-For saving docker images.
+For saving docker images. We run a private registry.
+
+_Ask Arjun to add another user for you._
+username: talksik
+password: (it's typical arjun)
+
+## Reverse-proxy
+We run our reverse-proxy on homelab1 or talksik-homelab-main.
+
+The current configuration is at `talksik@homelab1.home:/etc/nginx/nginx.conf` as one would expect. However, we have a (likely stale) copy in `./reverse-proxy`.
@@ -1,27 +0,0 @@
-version: "2.1"
-services:
-  swag:
-    image: lscr.io/linuxserver/swag:latest
-    container_name: swag
-    cap_add:
-      - NET_ADMIN
-    environment:
-      - PUID=1000
-      - PGID=1000
-      - TZ=Etc/UTC
-      - URL=flowy.live
-      - VALIDATION=http
-      - SUBDOMAINS=www,api,registry, #optional
-      - CERTPROVIDER= #optional
-      - DNSPLUGIN=cloudflare #optional
-      - PROPAGATION= #optional
-      - EMAIL= #optional
-      - ONLY_SUBDOMAINS=false #optional
-      - EXTRA_DOMAINS= #optional
-      - STAGING=false #optional
-    volumes:
-      - ~/path/to/appdata/config:~/config
-    ports:
-      - 443:443
-      - 80:80 #optional
-    restart: unless-stopped
@@ -0,0 +1,46 @@
+events {
+}
+
+http {
+        server {
+                listen 80;
+                server_name flowy.live www.flowy.live;
+
+                location / {
+                        proxy_pass http://192.168.50.103;
+                }
+        }
+
+        server {
+                listen 443 ssl;
+                server_name flowy.live www.flowy.live;
+
+                ssl_certificate /etc/letsencrypt/live/flowy.live/fullchain.pem;
+                ssl_certificate_key /etc/letsencrypt/live/flowy.live/privkey.pem;
+
+                location / {
+                        proxy_pass http://192.168.50.103;
+                }
+        }
+
+        server {
+                listen 443 ssl;
+                server_name registry.flowy.live;
+
+                client_max_body_size 500M;
+
+                ssl_certificate /etc/letsencrypt/live/flowy.live/fullchain.pem;
+                ssl_certificate_key /etc/letsencrypt/live/flowy.live/privkey.pem;
+
+                location / {
+                        proxy_pass http://localhost:5000;
+                        proxy_set_header Host $host;
+                        proxy_set_header X-Real-IP $remote_addr;
+                        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+                        proxy_set_header X-Forwarded-Proto $scheme;
+                }
+        }
+
+
+}
+