From 98b14edb812de783ef5e2945110516c64cf0e4e8 Mon Sep 17 00:00:00 2001 From: Vahagn Khachatryan Date: Mon, 19 May 2025 00:15:06 +0100 Subject: [PATCH] local apps are added --- docker-compose.yml | 10 ++++- sites/org.vostan.books | 44 +++++++++++++++++++ sites/org.vostan.deluge | 44 +++++++++++++++++++ sites/{drive.vostan.org => org.vostan.drive} | 0 sites/org.vostan.gerbera | 44 +++++++++++++++++++ sites/org.vostan.gitea | 44 +++++++++++++++++++ sites/org.vostan.pihole | 44 +++++++++++++++++++ ...{private.vostan.org => org.vostan.private} | 0 sites/org.vostan.wireguard | 44 +++++++++++++++++++ sites/{www.vostan.org => org.vostan.www} | 15 +++++++ 10 files changed, 287 insertions(+), 2 deletions(-) create mode 100644 sites/org.vostan.books create mode 100644 sites/org.vostan.deluge rename sites/{drive.vostan.org => org.vostan.drive} (100%) create mode 100644 sites/org.vostan.gerbera create mode 100644 sites/org.vostan.gitea create mode 100644 sites/org.vostan.pihole rename sites/{private.vostan.org => org.vostan.private} (100%) create mode 100644 sites/org.vostan.wireguard rename sites/{www.vostan.org => org.vostan.www} (75%) diff --git a/docker-compose.yml b/docker-compose.yml index 57ae647..0bfe879 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -14,8 +14,14 @@ services: - ./certbot/conf/archive/:/etc/nginx/ssl/archive/:ro - ./sites/default.conf:/etc/nginx/conf.d/default.conf:ro - ./sites/default_ssl.conf:/etc/nginx/conf.d/default_ssl.conf:ro - - ./sites/www.vostan.org:/etc/nginx/conf.d/www.vostan.org.conf:ro - - ./sites/drive.vostan.org:/etc/nginx/conf.d/drive.vostan.org.conf:ro + - ./sites/org.vostan.books:/etc/nginx/conf.d/org.vostan.books.conf:ro + - ./sites/org.vostan.deluge:/etc/nginx/conf.d/org.vostan.deluge.conf:ro + - ./sites/org.vostan.drive:/etc/nginx/conf.d/org.vostan.drive.conf:ro + - ./sites/org.vostan.gerbera:/etc/nginx/conf.d/org.vostan.gerbera.conf:ro + - ./sites/org.vostan.gitea:/etc/nginx/conf.d/org.vostan.gitea.conf:ro + - ./sites/org.vostan.pihole:/etc/nginx/conf.d/org.vostan.pihole.conf:ro + - ./sites/org.vostan.wireguard:/etc/nginx/conf.d/org.vostan.wireguard.conf:ro + - ./sites/org.vostan.www:/etc/nginx/conf.d/org.vostan.www.conf:ro network_mode: host # command: [nginx-debug, '-g', 'daemon off;'] certbot: diff --git a/sites/org.vostan.books b/sites/org.vostan.books new file mode 100644 index 0000000..c819049 --- /dev/null +++ b/sites/org.vostan.books @@ -0,0 +1,44 @@ +## +# You should look at the following URL's in order to grasp a solid understanding of Nginx configuration files in order to fully unleash the power of Nginx. +# https://www.nginx.com/resources/wiki/start/ https://www.nginx.com/resources/wiki/start/topics/tutorials/config_pitfalls/ https://wiki.debian.org/Nginx/DirectoryStructure +# +# In most cases, administrators will remove this file from sites-enabled/ and +# leave it as reference inside of sites-available where it will continue to be +# updated by the nginx packaging team. +# +# This file will automatically load configuration files provided by other +# applications, such as Drupal or Wordpress. These applications will be made +# available underneath a path with that package name, such as /drupal8. +# +# Please see /usr/share/doc/nginx-doc/examples/ for more detailed examples. +## + +server { + listen 80; + listen [::]:80; + #listen 443 ssl; + #listen [::]:443 ssl; + http2 on; + server_name books.vostan.org; + + # SSL configuration + # + ssl_certificate /etc/nginx/ssl/live/www.vostan.org/fullchain.pem; + ssl_certificate_key /etc/nginx/ssl/live/www.vostan.org/privkey.pem; + + # + set $upstream 192.168.11.4; + location / { + proxy_pass_header Authorization; + proxy_pass http://$upstream:9083; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_http_version 1.1; + proxy_set_header Connection ""; + proxy_buffering off; + client_max_body_size 0; + proxy_read_timeout 36000s; + proxy_redirect off; + } +} diff --git a/sites/org.vostan.deluge b/sites/org.vostan.deluge new file mode 100644 index 0000000..add6349 --- /dev/null +++ b/sites/org.vostan.deluge @@ -0,0 +1,44 @@ +## +# You should look at the following URL's in order to grasp a solid understanding of Nginx configuration files in order to fully unleash the power of Nginx. +# https://www.nginx.com/resources/wiki/start/ https://www.nginx.com/resources/wiki/start/topics/tutorials/config_pitfalls/ https://wiki.debian.org/Nginx/DirectoryStructure +# +# In most cases, administrators will remove this file from sites-enabled/ and +# leave it as reference inside of sites-available where it will continue to be +# updated by the nginx packaging team. +# +# This file will automatically load configuration files provided by other +# applications, such as Drupal or Wordpress. These applications will be made +# available underneath a path with that package name, such as /drupal8. +# +# Please see /usr/share/doc/nginx-doc/examples/ for more detailed examples. +## + +server { + # listen 80; + # listen [::]:80; + listen 443 ssl; + listen [::]:443 ssl; + http2 on; + server_name deluge.vostan.org; + + # SSL configuration + # + ssl_certificate /etc/nginx/ssl/live/www.vostan.org/fullchain.pem; + ssl_certificate_key /etc/nginx/ssl/live/www.vostan.org/privkey.pem; + + # + set $upstream 192.168.11.4; + location / { + proxy_pass_header Authorization; + proxy_pass http://$upstream:8112; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_http_version 1.1; + proxy_set_header Connection ""; + proxy_buffering off; + client_max_body_size 0; + proxy_read_timeout 36000s; + proxy_redirect off; + } +} diff --git a/sites/drive.vostan.org b/sites/org.vostan.drive similarity index 100% rename from sites/drive.vostan.org rename to sites/org.vostan.drive diff --git a/sites/org.vostan.gerbera b/sites/org.vostan.gerbera new file mode 100644 index 0000000..13a33b6 --- /dev/null +++ b/sites/org.vostan.gerbera @@ -0,0 +1,44 @@ +## +# You should look at the following URL's in order to grasp a solid understanding of Nginx configuration files in order to fully unleash the power of Nginx. +# https://www.nginx.com/resources/wiki/start/ https://www.nginx.com/resources/wiki/start/topics/tutorials/config_pitfalls/ https://wiki.debian.org/Nginx/DirectoryStructure +# +# In most cases, administrators will remove this file from sites-enabled/ and +# leave it as reference inside of sites-available where it will continue to be +# updated by the nginx packaging team. +# +# This file will automatically load configuration files provided by other +# applications, such as Drupal or Wordpress. These applications will be made +# available underneath a path with that package name, such as /drupal8. +# +# Please see /usr/share/doc/nginx-doc/examples/ for more detailed examples. +## + +server { + listen 80; + listen [::]:80; + #listen 443 ssl; + #listen [::]:443 ssl; + http2 on; + server_name gerbera.vostan.org; + + # SSL configuration + # + ssl_certificate /etc/nginx/ssl/live/www.vostan.org/fullchain.pem; + ssl_certificate_key /etc/nginx/ssl/live/www.vostan.org/privkey.pem; + + # + set $upstream 192.168.11.4; + location / { + proxy_pass_header Authorization; + proxy_pass http://$upstream:49152; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_http_version 1.1; + proxy_set_header Connection ""; + proxy_buffering off; + client_max_body_size 0; + proxy_read_timeout 36000s; + proxy_redirect off; + } +} diff --git a/sites/org.vostan.gitea b/sites/org.vostan.gitea new file mode 100644 index 0000000..ad127ac --- /dev/null +++ b/sites/org.vostan.gitea @@ -0,0 +1,44 @@ +## +# You should look at the following URL's in order to grasp a solid understanding of Nginx configuration files in order to fully unleash the power of Nginx. +# https://www.nginx.com/resources/wiki/start/ https://www.nginx.com/resources/wiki/start/topics/tutorials/config_pitfalls/ https://wiki.debian.org/Nginx/DirectoryStructure +# +# In most cases, administrators will remove this file from sites-enabled/ and +# leave it as reference inside of sites-available where it will continue to be +# updated by the nginx packaging team. +# +# This file will automatically load configuration files provided by other +# applications, such as Drupal or Wordpress. These applications will be made +# available underneath a path with that package name, such as /drupal8. +# +# Please see /usr/share/doc/nginx-doc/examples/ for more detailed examples. +## + +server { + listen 80; + listen [::]:80; + #listen 443 ssl; + #listen [::]:443 ssl; + http2 on; + server_name gitea.vostan.org; + + # SSL configuration + # + ssl_certificate /etc/nginx/ssl/live/www.vostan.org/fullchain.pem; + ssl_certificate_key /etc/nginx/ssl/live/www.vostan.org/privkey.pem; + + # + set $upstream 192.168.11.4; + location / { + proxy_pass_header Authorization; + proxy_pass http://$upstream:9082; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_http_version 1.1; + proxy_set_header Connection ""; + proxy_buffering off; + client_max_body_size 0; + proxy_read_timeout 36000s; + proxy_redirect off; + } +} diff --git a/sites/org.vostan.pihole b/sites/org.vostan.pihole new file mode 100644 index 0000000..18c9d82 --- /dev/null +++ b/sites/org.vostan.pihole @@ -0,0 +1,44 @@ +## +# You should look at the following URL's in order to grasp a solid understanding of Nginx configuration files in order to fully unleash the power of Nginx. +# https://www.nginx.com/resources/wiki/start/ https://www.nginx.com/resources/wiki/start/topics/tutorials/config_pitfalls/ https://wiki.debian.org/Nginx/DirectoryStructure +# +# In most cases, administrators will remove this file from sites-enabled/ and +# leave it as reference inside of sites-available where it will continue to be +# updated by the nginx packaging team. +# +# This file will automatically load configuration files provided by other +# applications, such as Drupal or Wordpress. These applications will be made +# available underneath a path with that package name, such as /drupal8. +# +# Please see /usr/share/doc/nginx-doc/examples/ for more detailed examples. +## + +server { + listen 80; + listen [::]:80; + #listen 443 ssl; + #listen [::]:443 ssl; + http2 on; + server_name pihole.vostan.org; + + # SSL configuration + # + ssl_certificate /etc/nginx/ssl/live/www.vostan.org/fullchain.pem; + ssl_certificate_key /etc/nginx/ssl/live/www.vostan.org/privkey.pem; + + # + set $upstream 192.168.11.3; + location / { + proxy_pass_header Authorization; + proxy_pass http://$upstream:8880; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_http_version 1.1; + proxy_set_header Connection ""; + proxy_buffering off; + client_max_body_size 0; + proxy_read_timeout 36000s; + proxy_redirect off; + } +} diff --git a/sites/private.vostan.org b/sites/org.vostan.private similarity index 100% rename from sites/private.vostan.org rename to sites/org.vostan.private diff --git a/sites/org.vostan.wireguard b/sites/org.vostan.wireguard new file mode 100644 index 0000000..270ddcc --- /dev/null +++ b/sites/org.vostan.wireguard @@ -0,0 +1,44 @@ +## +# You should look at the following URL's in order to grasp a solid understanding of Nginx configuration files in order to fully unleash the power of Nginx. +# https://www.nginx.com/resources/wiki/start/ https://www.nginx.com/resources/wiki/start/topics/tutorials/config_pitfalls/ https://wiki.debian.org/Nginx/DirectoryStructure +# +# In most cases, administrators will remove this file from sites-enabled/ and +# leave it as reference inside of sites-available where it will continue to be +# updated by the nginx packaging team. +# +# This file will automatically load configuration files provided by other +# applications, such as Drupal or Wordpress. These applications will be made +# available underneath a path with that package name, such as /drupal8. +# +# Please see /usr/share/doc/nginx-doc/examples/ for more detailed examples. +## + +server { + listen 80; + listen [::]:80; + #listen 443 ssl; + #listen [::]:443 ssl; + http2 on; + server_name wireguard.vostan.org; + + # SSL configuration + # + ssl_certificate /etc/nginx/ssl/live/www.vostan.org/fullchain.pem; + ssl_certificate_key /etc/nginx/ssl/live/www.vostan.org/privkey.pem; + + # + set $upstream 192.168.11.3; + location / { + proxy_pass_header Authorization; + proxy_pass http://$upstream:51821; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_http_version 1.1; + proxy_set_header Connection ""; + proxy_buffering off; + client_max_body_size 0; + proxy_read_timeout 36000s; + proxy_redirect off; + } +} diff --git a/sites/www.vostan.org b/sites/org.vostan.www similarity index 75% rename from sites/www.vostan.org rename to sites/org.vostan.www index bfd60a3..a5b7cac 100644 --- a/sites/www.vostan.org +++ b/sites/org.vostan.www @@ -32,6 +32,21 @@ server { # Add index.php to the list if you are using PHP index index.html index.htm index.nginx-debian.html; + #set $upstream 192.168.11.3; + #location /private/wireguard/ { + # proxy_pass http://127.0.0.1:51821; + # proxy_pass_header Authorization; + # proxy_set_header Host $host; + # proxy_set_header X-Real-IP $remote_addr; + # proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + # proxy_http_version 1.1; + # proxy_set_header Connection ""; + # proxy_buffering off; + # client_max_body_size 0; + # proxy_read_timeout 36000s; + # # proxy_redirect off; + # proxy_redirect http://127.0.0.1:51821/ https://www.vostan.org/private/wireguard/; + #} location / { # First attempt to serve request as file, then