Addes support for reverse proxy to home server

2025-06-01 17:14:33 +02:00
parent 8dd48ec2c7
commit b0162abb88
25 changed files with 632 additions and 18 deletions
@@ -0,0 +1,22 @@
+server {
+    listen ${http_port};
+%{ if tls ~}
+    listen ${https_port} ssl;
+    ssl_certificate /etc/ssl/certs/private/tls.crt;
+    ssl_certificate_key /etc/ssl/certs/private/tls.key;
+    ssl_protocols TLSv1.2 TLSv1.3;
+%{ endif ~}
+    server_name ${fqdn};
+%{ if custom_snippet != "" ~}
+${custom_snippet}
+%{ endif ~}
+%{ for l in locations ~}
+    location ${l.path} {
+        proxy_pass ${upstream};
+        proxy_http_version 1.1;
+%{ for k,v in l.headers ~}        
+        proxy_set_header ${k} ${v};
+%{ endfor ~}
+    }
+%{ endfor ~}
+}
@@ -0,0 +1,36 @@
+worker_processes  auto;
+
+error_log  /var/log/nginx/error.log notice;
+pid        /tmp/nginx.pid;
+
+
+events {
+    worker_connections  1024;
+}
+
+http {
+    proxy_temp_path /tmp/proxy_temp;
+    client_body_temp_path /tmp/client_temp;
+    fastcgi_temp_path /tmp/fastcgi_temp;
+    uwsgi_temp_path /tmp/uwsgi_temp;
+    scgi_temp_path /tmp/scgi_temp;
+
+    client_max_body_size 10M;
+    proxy_buffering off;
+    proxy_request_buffering off;
+
+    include       /etc/nginx/mime.types;
+    default_type  application/octet-stream;
+
+    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
+                      '$status $body_bytes_sent "$http_referer" '
+                      '"$http_user_agent" "$http_x_forwarded_for"';
+
+    access_log  /var/log/nginx/access.log  main;
+
+    sendfile        on;
+
+    keepalive_timeout  65;
+
+    include /etc/nginx/conf.d/*.conf;
+}
@@ -0,0 +1,10 @@
+[Interface]
+PrivateKey = ${wireguard_private_key}
+Address = ${wireguard_address}
+
+[Peer]
+PublicKey = ${wireguard_public_key}
+PresharedKey = ${wireguard_pre_shared_key}
+AllowedIPs = ${wireguard_allowed_ips}
+Endpoint = ${wireguard_endpoint}
+PersistentKeepalive = 25