diff --git a/README.md b/README.md index ae82ebc..ffa0e9d 100644 --- a/README.md +++ b/README.md @@ -15,4 +15,13 @@ Note: we are not using pi-hole as a DHCP server. We leave this to the router, al 2. Do not use `.local` for domain in local DNS. You will see a warning when using dig that `.local` is reserved for mDNS. ## Container registry -For saving docker images. +For saving docker images. We run a private registry. + +_Ask Arjun to add another user for you._ +username: talksik +password: (it's typical arjun) + +## Reverse-proxy +We run our reverse-proxy on homelab1 or talksik-homelab-main. + +The current configuration is at `talksik@homelab1.home:/etc/nginx/nginx.conf` as one would expect. However, we have a (likely stale) copy in `./reverse-proxy`. diff --git a/reverse-proxy/docker-compose.yaml b/reverse-proxy/docker-compose.yaml deleted file mode 100644 index 3c41953..0000000 --- a/reverse-proxy/docker-compose.yaml +++ /dev/null @@ -1,27 +0,0 @@ -version: "2.1" -services: - swag: - image: lscr.io/linuxserver/swag:latest - container_name: swag - cap_add: - - NET_ADMIN - environment: - - PUID=1000 - - PGID=1000 - - TZ=Etc/UTC - - URL=flowy.live - - VALIDATION=http - - SUBDOMAINS=www,api,registry, #optional - - CERTPROVIDER= #optional - - DNSPLUGIN=cloudflare #optional - - PROPAGATION= #optional - - EMAIL= #optional - - ONLY_SUBDOMAINS=false #optional - - EXTRA_DOMAINS= #optional - - STAGING=false #optional - volumes: - - ~/path/to/appdata/config:~/config - ports: - - 443:443 - - 80:80 #optional - restart: unless-stopped diff --git a/reverse-proxy/nginx.conf b/reverse-proxy/nginx.conf new file mode 100644 index 0000000..5546035 --- /dev/null +++ b/reverse-proxy/nginx.conf @@ -0,0 +1,46 @@ +events { +} + +http { + server { + listen 80; + server_name flowy.live www.flowy.live; + + location / { + proxy_pass http://192.168.50.103; + } + } + + server { + listen 443 ssl; + server_name flowy.live www.flowy.live; + + ssl_certificate /etc/letsencrypt/live/flowy.live/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/flowy.live/privkey.pem; + + location / { + proxy_pass http://192.168.50.103; + } + } + + server { + listen 443 ssl; + server_name registry.flowy.live; + + client_max_body_size 500M; + + ssl_certificate /etc/letsencrypt/live/flowy.live/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/flowy.live/privkey.pem; + + location / { + proxy_pass http://localhost:5000; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + } + } + + +} +