Skip to content

Commit 9c27513

Browse files
aptalcaaptalca
authored
Merge branch 'master' into cadvisor-endpoints
2 parents 1f3538f + e662dcb commit 9c27513

6 files changed

Lines changed: 115 additions & 9 deletions

‎frigate.subdomain.conf.sample‎

Lines changed: 46 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,46 @@
1+
## Version 2023/06/21
2+
# make sure that your frigate container is named frigate
3+
# make sure that your dns has a cname set for frigate
4+
5+
server {
6+
listen 443 ssl http2;
7+
listen [::]:443 ssl http2;
8+
9+
server_name frigate.*;
10+
11+
include /config/nginx/ssl.conf;
12+
13+
client_max_body_size 0;
14+
15+
# enable for ldap auth (requires ldap-location.conf in the location block)
16+
#include /config/nginx/ldap-server.conf;
17+
18+
# enable for Authelia (requires authelia-location.conf in the location block)
19+
#include /config/nginx/authelia-server.conf;
20+
21+
# enable for Authentik (requires authentik-location.conf in the location block)
22+
#include /config/nginx/authentik-server.conf;
23+
24+
location / {
25+
# enable the next two lines for http auth
26+
#auth_basic "Restricted";
27+
#auth_basic_user_file /config/nginx/.htpasswd;
28+
29+
# enable for ldap auth (requires ldap-server.conf in the server block)
30+
#include /config/nginx/ldap-location.conf;
31+
32+
# enable for Authelia (requires authelia-server.conf in the server block)
33+
#include /config/nginx/authelia-location.conf;
34+
35+
# enable for Authentik (requires authentik-server.conf in the server block)
36+
#include /config/nginx/authentik-location.conf;
37+
38+
include /config/nginx/proxy.conf;
39+
include /config/nginx/resolver.conf;
40+
set $upstream_app frigate;
41+
set $upstream_port 5000;
42+
set $upstream_proto http;
43+
proxy_pass $upstream_proto://$upstream_app:$upstream_port;
44+
45+
}
46+
}

‎libreddit.subdomain.conf.sample‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,10 +1,10 @@
1-
## Version 2023/02/05
1+
## Version 2023/06/21
22
# make sure that your libreddit container is named libreddit
33
# make sure that your dns has a cname set for libreddit
44

55
server {
6-
listen 443 ssl;
7-
listen [::]:443 ssl;
6+
listen 443 ssl http2;
7+
listen [::]:443 ssl http2;
88

99
server_name libreddit.*;
1010

‎linkstack.subdomain.conf.sample‎

Lines changed: 44 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,44 @@
1+
## Version 2023/06/27
2+
# make sure that your dns has a cname set for linkstack and that your linkstack container is not using a base url
3+
4+
server {
5+
listen 443 ssl;
6+
listen [::]:443 ssl;
7+
8+
server_name linkstack.*;
9+
10+
include /config/nginx/ssl.conf;
11+
12+
client_max_body_size 0;
13+
14+
# enable for ldap auth (requires ldap-location.conf in the location block)
15+
#include /config/nginx/ldap-server.conf;
16+
17+
# enable for Authelia (requires authelia-location.conf in the location block)
18+
#include /config/nginx/authelia-server.conf;
19+
20+
# enable for Authentik (requires authentik-location.conf in the location block)
21+
#include /config/nginx/authentik-server.conf;
22+
23+
location / {
24+
# enable the next two lines for http auth
25+
#auth_basic "Restricted";
26+
#auth_basic_user_file /config/nginx/.htpasswd;
27+
28+
# enable for ldap auth (requires ldap-server.conf in the server block)
29+
#include /config/nginx/ldap-location.conf;
30+
31+
# enable for Authelia (requires authelia-server.conf in the server block)
32+
#include /config/nginx/authelia-location.conf;
33+
34+
# enable for Authentik (requires authentik-server.conf in the server block)
35+
#include /config/nginx/authentik-location.conf;
36+
37+
include /config/nginx/proxy.conf;
38+
include /config/nginx/resolver.conf;
39+
set $upstream_app linkstack;
40+
set $upstream_port 443;
41+
set $upstream_proto https;
42+
proxy_pass $upstream_proto://$upstream_app:$upstream_port;
43+
}
44+
}

‎nextcloud.subdomain.conf.sample‎

Lines changed: 8 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
## Version 2023/06/06
1+
## Version 2023/06/24
22
# make sure that your nextcloud container is named nextcloud
33
# make sure that your dns has a cname set for nextcloud
44
# assuming this container is called "swag", edit your nextcloud container's config
@@ -32,8 +32,14 @@ server {
3232
set $upstream_proto https;
3333
proxy_pass $upstream_proto://$upstream_app:$upstream_port;
3434

35-
# Uncomment X-Frame-Options directive in ssl.conf to pass security checks.
35+
# Hide proxy response headers from Nextcloud that conflict with ssl.conf
36+
# Uncomment the Optional additional headers in SWAG's ssl.conf to pass Nextcloud's security scan
37+
proxy_hide_header Referrer-Policy;
38+
proxy_hide_header X-Content-Type-Options;
3639
proxy_hide_header X-Frame-Options;
40+
proxy_hide_header X-XSS-Protection;
41+
42+
# Disable proxy buffering
3743
proxy_buffering off;
3844
}
3945
}

‎nextcloud.subfolder.conf.sample‎

Lines changed: 12 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
## Version 2023/06/06
1+
## Version 2023/06/24
22
# make sure that your nextcloud container is named nextcloud
33
# make sure that nextcloud is set to work with the base url /nextcloud/
44
# Assuming this container is called "swag", edit your nextcloud container's config
@@ -34,10 +34,18 @@ location ^~ /nextcloud/ {
3434
proxy_pass $upstream_proto://$upstream_app:$upstream_port;
3535

3636
rewrite /nextcloud(.*) $1 break;
37-
# Uncomment X-Frame-Options directive in ssl.conf to pass security checks.
38-
proxy_hide_header X-Frame-Options;
39-
proxy_buffering off;
37+
4038
proxy_set_header Range $http_range;
4139
proxy_set_header If-Range $http_if_range;
4240
proxy_ssl_session_reuse off;
41+
42+
# Hide proxy response headers from Nextcloud that conflict with ssl.conf
43+
# Uncomment the Optional additional headers in SWAG's ssl.conf to pass Nextcloud's security scan
44+
proxy_hide_header Referrer-Policy;
45+
proxy_hide_header X-Content-Type-Options;
46+
proxy_hide_header X-Frame-Options;
47+
proxy_hide_header X-XSS-Protection;
48+
49+
# Disable proxy buffering
50+
proxy_buffering off;
4351
}

‎notifiarr.subdomain.conf.sample‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -31,6 +31,8 @@ server {
3131

3232
# enable for Authelia (requires authelia-server.conf in the server block)
3333
#include /config/nginx/authelia-location.conf;
34+
# Enable if you use webauth for Notifiarr client website authentication
35+
#proxy_set_header X-WebAuth-User $user;
3436

3537
# enable for Authentik (requires authentik-server.conf in the server block)
3638
#include /config/nginx/authentik-location.conf;

0 commit comments

Comments
 (0)