Skip to content

Commit ef609ac

Browse files
jlssmtjlssmt
authored
Merge branch 'master' into linkwarden
2 parents b2a44f1 + 150ede5 commit ef609ac

13 files changed

Lines changed: 417 additions & 2 deletions

‎dashy.subdomain.conf.sample‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -38,7 +38,7 @@ server {
3838
include /config/nginx/proxy.conf;
3939
include /config/nginx/resolver.conf;
4040
set $upstream_app dashy;
41-
set $upstream_port 80;
41+
set $upstream_port 8080;
4242
set $upstream_proto http;
4343
proxy_pass $upstream_proto://$upstream_app:$upstream_port;
4444
}

‎ddns-updater.subdomain.conf.sample‎

Lines changed: 56 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,56 @@
1+
## Version 2024/08/04
2+
# make sure that your ddns-updater container is named ddns-updater
3+
# make sure that your dns has a cname set for ddns-updater
4+
5+
server {
6+
listen 443 ssl;
7+
listen [::]:443 ssl;
8+
9+
server_name ddns-updater.*;
10+
11+
include /config/nginx/ssl.conf;
12+
13+
client_max_body_size 0;
14+
15+
# enable for ldap auth (requires ldap-location.conf in the location block)
16+
#include /config/nginx/ldap-server.conf;
17+
18+
# enable for Authelia (requires authelia-location.conf in the location block)
19+
#include /config/nginx/authelia-server.conf;
20+
21+
# enable for Authentik (requires authentik-location.conf in the location block)
22+
#include /config/nginx/authentik-server.conf;
23+
24+
location / {
25+
# enable the next two lines for http auth
26+
#auth_basic "Restricted";
27+
#auth_basic_user_file /config/nginx/.htpasswd;
28+
29+
# enable for ldap auth (requires ldap-server.conf in the server block)
30+
#include /config/nginx/ldap-location.conf;
31+
32+
# enable for Authelia (requires authelia-server.conf in the server block)
33+
#include /config/nginx/authelia-location.conf;
34+
35+
# enable for Authentik (requires authentik-server.conf in the server block)
36+
#include /config/nginx/authentik-location.conf;
37+
38+
include /config/nginx/proxy.conf;
39+
include /config/nginx/resolver.conf;
40+
set $upstream_app ddns-updater;
41+
set $upstream_port 8000;
42+
set $upstream_proto http;
43+
proxy_pass $upstream_proto://$upstream_app:$upstream_port;
44+
45+
}
46+
47+
location ~ (/ddns-updater)?/api {
48+
include /config/nginx/proxy.conf;
49+
include /config/nginx/resolver.conf;
50+
set $upstream_app ddns-updater;
51+
set $upstream_port 8000;
52+
set $upstream_proto http;
53+
proxy_pass $upstream_proto://$upstream_app:$upstream_port;
54+
55+
}
56+
}

‎ddns-updater.subfolder.conf.sample‎

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
## Version 2024/08/04
2+
# make sure that your ddns-updater container is named ddns-updater
3+
# make sure that ddns-updater is set to work with the base url /ddns-updater/
4+
5+
location ^~ /ddns-updater {
6+
# enable the next two lines for http auth
7+
#auth_basic "Restricted";
8+
#auth_basic_user_file /config/nginx/.htpasswd;
9+
10+
# enable for ldap auth (requires ldap-server.conf in the server block)
11+
#include /config/nginx/ldap-location.conf;
12+
13+
# enable for Authelia (requires authelia-server.conf in the server block)
14+
#include /config/nginx/authelia-location.conf;
15+
16+
# enable for Authentik (requires authentik-server.conf in the server block)
17+
#include /config/nginx/authentik-location.conf;
18+
19+
include /config/nginx/proxy.conf;
20+
include /config/nginx/resolver.conf;
21+
set $upstream_app ddns-updater;
22+
set $upstream_port 8000;
23+
set $upstream_proto http;
24+
proxy_pass $upstream_proto://$upstream_app:$upstream_port;
25+
26+
}
27+
28+
location ^~ /ddns-updater/api {
29+
include /config/nginx/proxy.conf;
30+
include /config/nginx/resolver.conf;
31+
set $upstream_app ddns-updater;
32+
set $upstream_port 8000;
33+
set $upstream_proto http;
34+
proxy_pass $upstream_proto://$upstream_app:$upstream_port;
35+
36+
}

‎dockge.subdomain.conf.sample‎

Lines changed: 46 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,46 @@
1+
## Version 2024/07/16
2+
# make sure that your dockge container is named dockge
3+
# make sure that your dns has a cname set for dockge
4+
5+
server {
6+
listen 443 ssl;
7+
listen [::]:443 ssl;
8+
9+
server_name dockge.*;
10+
11+
include /config/nginx/ssl.conf;
12+
13+
client_max_body_size 0;
14+
15+
# enable for ldap auth (requires ldap-location.conf in the location block)
16+
#include /config/nginx/ldap-server.conf;
17+
18+
# enable for Authelia (requires authelia-location.conf in the location block)
19+
#include /config/nginx/authelia-server.conf;
20+
21+
# enable for Authentik (requires authentik-location.conf in the location block)
22+
#include /config/nginx/authentik-server.conf;
23+
24+
location / {
25+
# enable the next two lines for http auth
26+
#auth_basic "Restricted";
27+
#auth_basic_user_file /config/nginx/.htpasswd;
28+
29+
# enable for ldap auth (requires ldap-server.conf in the server block)
30+
#include /config/nginx/ldap-location.conf;
31+
32+
# enable for Authelia (requires authelia-server.conf in the server block)
33+
#include /config/nginx/authelia-location.conf;
34+
35+
# enable for Authentik (requires authentik-server.conf in the server block)
36+
#include /config/nginx/authentik-location.conf;
37+
38+
include /config/nginx/proxy.conf;
39+
include /config/nginx/resolver.conf;
40+
set $upstream_app dockge;
41+
set $upstream_port 5001;
42+
set $upstream_proto http;
43+
proxy_pass $upstream_proto://$upstream_app:$upstream_port;
44+
45+
}
46+
}

‎dockge.subfolder.conf.sample‎

Lines changed: 31 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,31 @@
1+
## Version 2023/02/05
2+
# make sure that your dockge container is named dockge
3+
# make sure that dockge is set to work with the base url /dockge/
4+
5+
6+
location /dockge {
7+
return 301 $scheme://$host/dockge/;
8+
}
9+
10+
location ^~ /dockge/ {
11+
# enable the next two lines for http auth
12+
#auth_basic "Restricted";
13+
#auth_basic_user_file /config/nginx/.htpasswd;
14+
15+
# enable for ldap auth (requires ldap-server.conf in the server block)
16+
#include /config/nginx/ldap-location.conf;
17+
18+
# enable for Authelia (requires authelia-server.conf in the server block)
19+
#include /config/nginx/authelia-location.conf;
20+
21+
# enable for Authentik (requires authentik-server.conf in the server block)
22+
#include /config/nginx/authentik-location.conf;
23+
24+
include /config/nginx/proxy.conf;
25+
include /config/nginx/resolver.conf;
26+
set $upstream_app dockge;
27+
set $upstream_port 5001;
28+
set $upstream_proto http;
29+
proxy_pass $upstream_proto://$upstream_app:$upstream_port;
30+
31+
}

‎jellyfin.subdomain.conf.sample‎

Lines changed: 19 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
## Version 2024/07/16
1+
## Version 2024/08/22
22
# make sure that your jellyfin container is named jellyfin
33
# make sure that your dns has a cname set for jellyfin
44
# if jellyfin is running in bridge mode and the container is named "jellyfin", the below config should work as is
@@ -37,4 +37,22 @@ server {
3737
proxy_pass $upstream_proto://$upstream_app:$upstream_port;
3838

3939
}
40+
41+
# Restrict access to /metrics
42+
# https://jellyfin.org/docs/general/networking/monitoring/#prometheus-metrics
43+
location /metrics {
44+
allow 192.168.0.0/16;
45+
allow 10.0.0.0/8;
46+
allow 172.16.0.0/12;
47+
allow 127.0.0.0/8;
48+
49+
deny all;
50+
51+
include /config/nginx/proxy.conf;
52+
include /config/nginx/resolver.conf;
53+
set $upstream_app jellyfin;
54+
set $upstream_port 8096;
55+
set $upstream_proto http;
56+
proxy_pass $upstream_proto://$upstream_app:$upstream_port;
57+
}
4058
}

‎lubelogger.subdomain.conf.sample‎

Lines changed: 46 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,46 @@
1+
## Version 2024/08/18
2+
# make sure that your lubelogger container is named lubelogger
3+
# make sure that your dns has a cname set for lubelogger
4+
5+
server {
6+
listen 443 ssl;
7+
listen [::]:443 ssl;
8+
9+
server_name lubelogger.*;
10+
11+
include /config/nginx/ssl.conf;
12+
13+
client_max_body_size 0;
14+
15+
# enable for ldap auth (requires ldap-location.conf in the location block)
16+
#include /config/nginx/ldap-server.conf;
17+
18+
# enable for Authelia (requires authelia-location.conf in the location block)
19+
#include /config/nginx/authelia-server.conf;
20+
21+
# enable for Authentik (requires authentik-location.conf in the location block)
22+
#include /config/nginx/authentik-server.conf;
23+
24+
location / {
25+
# enable the next two lines for http auth
26+
#auth_basic "Restricted";
27+
#auth_basic_user_file /config/nginx/.htpasswd;
28+
29+
# enable for ldap auth (requires ldap-server.conf in the server block)
30+
#include /config/nginx/ldap-location.conf;
31+
32+
# enable for Authelia (requires authelia-server.conf in the server block)
33+
#include /config/nginx/authelia-location.conf;
34+
35+
# enable for Authentik (requires authentik-server.conf in the server block)
36+
#include /config/nginx/authentik-location.conf;
37+
38+
include /config/nginx/proxy.conf;
39+
include /config/nginx/resolver.conf;
40+
set $upstream_app lubelogger;
41+
set $upstream_port 8080;
42+
set $upstream_proto http;
43+
proxy_pass $upstream_proto://$upstream_app:$upstream_port;
44+
45+
}
46+
}

‎paperless.subdomain.conf.sample‎

Lines changed: 46 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,46 @@
1+
## Version 2024/07/16
2+
# make sure that your paperless container is named paperless
3+
# make sure that your dns has a cname set for paperless
4+
5+
server {
6+
listen 443 ssl;
7+
listen [::]:443 ssl;
8+
9+
server_name paperless.*;
10+
11+
include /config/nginx/ssl.conf;
12+
13+
client_max_body_size 0;
14+
15+
# enable for ldap auth (requires ldap-location.conf in the location block)
16+
#include /config/nginx/ldap-server.conf;
17+
18+
# enable for Authelia (requires authelia-location.conf in the location block)
19+
#include /config/nginx/authelia-server.conf;
20+
21+
# enable for Authentik (requires authentik-location.conf in the location block)
22+
#include /config/nginx/authentik-server.conf;
23+
24+
location / {
25+
# enable the next two lines for http auth
26+
#auth_basic "Restricted";
27+
#auth_basic_user_file /config/nginx/.htpasswd;
28+
29+
# enable for ldap auth (requires ldap-server.conf in the server block)
30+
#include /config/nginx/ldap-location.conf;
31+
32+
# enable for Authelia (requires authelia-server.conf in the server block)
33+
#include /config/nginx/authelia-location.conf;
34+
35+
# enable for Authentik (requires authentik-server.conf in the server block)
36+
#include /config/nginx/authentik-location.conf;
37+
38+
include /config/nginx/proxy.conf;
39+
include /config/nginx/resolver.conf;
40+
set $upstream_app paperless;
41+
set $upstream_port 8000;
42+
set $upstream_proto http;
43+
proxy_pass $upstream_proto://$upstream_app:$upstream_port;
44+
45+
}
46+
}

‎paperless.subfolder.conf.sample‎

Lines changed: 30 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,30 @@
1+
## Version 2023/02/05
2+
# make sure that your paperless container is named paperless
3+
# make sure that paperless is set to work with the base url /paperless/
4+
5+
location /paperless {
6+
return 301 $scheme://$host/paperless/;
7+
}
8+
9+
location ^~ /paperless/ {
10+
# enable the next two lines for http auth
11+
#auth_basic "Restricted";
12+
#auth_basic_user_file /config/nginx/.htpasswd;
13+
14+
# enable for ldap auth (requires ldap-server.conf in the server block)
15+
#include /config/nginx/ldap-location.conf;
16+
17+
# enable for Authelia (requires authelia-server.conf in the server block)
18+
#include /config/nginx/authelia-location.conf;
19+
20+
# enable for Authentik (requires authentik-server.conf in the server block)
21+
#include /config/nginx/authentik-location.conf;
22+
23+
include /config/nginx/proxy.conf;
24+
include /config/nginx/resolver.conf;
25+
set $upstream_app paperless;
26+
set $upstream_port 8000;
27+
set $upstream_proto http;
28+
proxy_pass $upstream_proto://$upstream_app:$upstream_port;
29+
30+
}

‎vaultwarden.subdomain.conf.sample‎

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -62,6 +62,13 @@ server {
6262
# enable for Authentik (requires authentik-server.conf in the server block)
6363
#include /config/nginx/authentik-location.conf;
6464

65+
# if you enable admin page via ADMIN_TOKEN env variable
66+
# consider restricting access to LAN only via uncommenting the following lines
67+
#allow 10.0.0.0/8;
68+
#allow 172.16.0.0/12;
69+
#allow 192.168.0.0/16;
70+
#deny all;
71+
6572
include /config/nginx/proxy.conf;
6673
include /config/nginx/resolver.conf;
6774
set $upstream_app vaultwarden;

0 commit comments

Comments
 (0)