cutemeli/server
0
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

updated nginx conf

Browse Source
This commit is contained in:
cutemeli
2025-12-28 10:31:34 +00:00
parent 2d7484984c
commit 3e224d7ab2
1 changed files with 3 additions and 58 deletions
Download Patch File Download Diff File Expand all files Collapse all files

59
etc/nginx/sites-available/reverse-proxy.conf
View File

@@ -39,7 +39,7 @@ server {
#allow 127.0.0.1; #allow 127.0.0.1;
#deny all; #deny all;
client_max_body_size 2g; client_max_body_size 4g;
location / { location / {
proxy_pass http://127.0.0.1:3001; proxy_pass http://127.0.0.1:3001;
@@ -106,38 +106,13 @@ server {
deny all; deny all;
location / { location / {
proxy_pass http://127.0.0.1:3000; # Grafana UI proxy_pass http://127.0.0.1:8082;
proxy_set_header Host $host; proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto https; proxy_set_header X-Forwarded-Proto https;
} }
} }
# ====================================================
# PROMETHEUS
# ====================================================
server {
listen 443 ssl http2;
server_name prometheus.cutemeli.com;
# nutzt dasselbe Zertifikat wie monitor
ssl_certificate /etc/ssl/certs/prometheus.pem;
ssl_certificate_key /etc/ssl/private/prometheus.key;
allow 127.0.0.1;
allow 10.10.0.0/24;
deny all;
location / {
proxy_pass http://127.0.0.1:9090;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto https;
}
}
# ----------------------------- # -----------------------------
# Vaultwarden # Vaultwarden
# ----------------------------- # -----------------------------
@@ -167,36 +142,6 @@ server {
} }
} }
# -----------------------------
# OPENVPN
# -----------------------------
server {
listen 443 ssl http2;
server_name vpn.cutemeli.com;
ssl_certificate /etc/ssl/certs/vpn.pem;
ssl_certificate_key /etc/ssl/private/vpn.key;
# Zugriff nur aus deinem VPN + lokal erlauben
allow 10.10.0.0/24;
allow 172.17.0.0/16;
allow 127.0.0.1;
deny all;
location / {
proxy_pass http://127.0.0.1:8082; # <- hier der neue Port für ovpn-admin
proxy_http_version 1.1;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto https;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
}
}
# ----------------------------- # -----------------------------
# Redirect HTTP -> HTTPS # Redirect HTTP -> HTTPS
# ----------------------------- # -----------------------------