diff --git a/etc/nginx/sites-available/reverse-proxy.conf b/etc/nginx/sites-available/reverse-proxy.conf index 8853666f11..83b41ab575 100644 --- a/etc/nginx/sites-available/reverse-proxy.conf +++ b/etc/nginx/sites-available/reverse-proxy.conf @@ -39,7 +39,7 @@ server { #allow 127.0.0.1; #deny all; - client_max_body_size 2g; + client_max_body_size 4g; location / { proxy_pass http://127.0.0.1:3001; @@ -106,38 +106,13 @@ server { deny all; location / { - proxy_pass http://127.0.0.1:3000; # Grafana UI + proxy_pass http://127.0.0.1:8082; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto https; } -} - -# ==================================================== -# PROMETHEUS -# ==================================================== -server { - listen 443 ssl http2; - server_name prometheus.cutemeli.com; - - # nutzt dasselbe Zertifikat wie monitor - ssl_certificate /etc/ssl/certs/prometheus.pem; - ssl_certificate_key /etc/ssl/private/prometheus.key; - - allow 127.0.0.1; - allow 10.10.0.0/24; - deny all; - - location / { - proxy_pass http://127.0.0.1:9090; - proxy_set_header Host $host; - proxy_set_header X-Real-IP $remote_addr; - proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; - proxy_set_header X-Forwarded-Proto https; - } -} - +} # ----------------------------- # Vaultwarden # ----------------------------- @@ -167,36 +142,6 @@ server { } } - -# ----------------------------- -# OPENVPN -# ----------------------------- -server { - listen 443 ssl http2; - server_name vpn.cutemeli.com; - - ssl_certificate /etc/ssl/certs/vpn.pem; - ssl_certificate_key /etc/ssl/private/vpn.key; - - # Zugriff nur aus deinem VPN + lokal erlauben - allow 10.10.0.0/24; - allow 172.17.0.0/16; - allow 127.0.0.1; - deny all; - - location / { - proxy_pass http://127.0.0.1:8082; # <- hier der neue Port für ovpn-admin - proxy_http_version 1.1; - proxy_set_header Host $host; - proxy_set_header X-Real-IP $remote_addr; - proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; - proxy_set_header X-Forwarded-Proto https; - proxy_set_header Upgrade $http_upgrade; - proxy_set_header Connection "upgrade"; - } -} - - # ----------------------------- # Redirect HTTP -> HTTPS # -----------------------------