2022-10-01 16:03:08

nginx/README.md

@@ -0,0 +1,7 @@
+Diverse reverse proxy conf files
+
+Kopieer ze en zet ze in de /etc/nginx/sites-enabled/
+
+nginx -t
+
+en dan service nginx restart

nginx/git.pg0h.nl.conf

@@ -0,0 +1,30 @@
+
+# Gitea config
+# destination ip is aangepast
+server {
+    #listen 443 ssl http2;
+    # if you need IPv6:
+    listen [::]:443 ssl http2;
+    server_name git.pg0h.nl www.pg0h.nl;
+    access_log /var/log/nginx/gitpg0h-access.log combined;
+    error_log /var/log/nginx/gitpg0h-error.log info;
+
+    http2_push_preload on; # Enable HTTP/2 Server Push
+
+    ssl_certificate /etc/letsencrypt/live/pg0h.nl-0001/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/pg0h.nl-0001/privkey.pem;
+    include /etc/letsencrypt/options-ssl-nginx.conf;
+    ssl_dhparam /etc/letsencrypt/ssl-dhparams2.pem;
+
+    ssl_stapling on;
+    ssl_stapling_verify on;
+
+    location / {
+        proxy_pass http://172.16.69.69:3000;
+        client_max_body_size 100g;
+	proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+    }
+}

nginx/unifi.conf

@@ -0,0 +1,37 @@
+upstream unifi {
+    server 172.16.60.99:8443;
+    keepalive 64;
+}
+# bedoelt voor een unifi controller
+server {
+    #listen 443 ssl http2;
+    # nee ik gebruik geen ipv4 meer op de internet kant
+    # if you need IPv6:
+     listen [::]:443 ssl http2;
+    server_name unifi.blablabla;
+    access_log /var/log/nginx/unifi-access.log combined;
+    error_log /var/log/nginx/unifi-error.log info;
+    http2_push_preload on; # Enable HTTP/2 Server Push
+
+    ssl_certificate /etc/letsencrypt/live/uniifi.blablabla/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/unifi.blablabla/privkey.pem;
+    include /etc/letsencrypt/options-ssl-nginx.conf;
+    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
+
+    add_header Strict-Transport-Security max-age=15768000;
+    ssl_stapling on;
+    ssl_stapling_verify on;
+    
+     location / {
+
+        proxy_pass https://unifi;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection "upgrade";
+        include /etc/nginx/proxy_params;
+        proxy_buffers 256 16k;
+        proxy_buffer_size 16k;
+        proxy_read_timeout 600s;
+	proxy_ssl_verify off;
+        proxy_http_version 1.1;
+    }
+}