bofh/nginx_sites
9
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

multiple changes

Browse Source
This commit is contained in:
root
2021-01-10 08:10:06 +01:00
parent 3db6eadd83
commit 0c02fac0ba
10 changed files with 572 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

288
fet.at/2020.conf Normal file
View File

@@ -0,0 +1,288 @@
# -*-nginx-*-
server {
listen 80;
server_name *.2020.fet.at;
include snippets/letsencrypt.conf;
# root /var/www/html
# return 301 https://$host$request_uri;
}
server {
listen 443 ssl http2;
server_name docker.2020.fet.at;
ssl_certificate /etc/letsencrypt/live/2020.fet.at/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/2020.fet.at/privkey.pem;
ssl_trusted_certificate /etc/letsencrypt/live/2020.fet.at/chain.pem;
include snippets/ssl.conf;
include snippets/header.conf;
include snippets/ldap.conf;
client_max_body_size 100M;
location / {
proxy_pass http://fetsite4:9000;
include snippets/proxy_header.conf;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
# proxy_set_header Authorization "";
# proxy_set_header REMOTE_USER $remote_user;
}
}
server {
listen 443 ssl http2;
server_name solr.2020.fet.at;
ssl_certificate /etc/letsencrypt/live/2020.fet.at/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/2020.fet.at/privkey.pem;
ssl_trusted_certificate /etc/letsencrypt/live/2020.fet.at/chain.pem;
include snippets/ssl.conf;
include snippets/header.conf;
include snippets/ldap.conf;
client_max_body_size 100M;
location / {
proxy_pass http://fetsitedev:8980;
include snippets/proxy_header.conf;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
# proxy_set_header Authorization "";
# proxy_set_header REMOTE_USER $remote_user;
}
}
server {
listen 443 ssl http2;
server_name bot.2020.fet.at;
ssl_certificate /etc/letsencrypt/live/2020.fet.at/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/2020.fet.at/privkey.pem;
ssl_trusted_certificate /etc/letsencrypt/live/2020.fet.at/chain.pem;
include snippets/ssl.conf;
# include snippets/header.conf;
client_max_body_size 100M;
location / {
include snippets/ldap.conf;
proxy_pass http://fetsitedev:5000;
include snippets/proxy_header.conf;
proxy_http_version 1.1;
proxy_set_header REMOTE_USER $remote_user;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
}
location /income {
proxy_pass http://fetsitedev:5000;
include snippets/proxy_header.conf;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
}
}
server {
listen 443 ssl http2;
server_name uat1.2020.fet.at;
ssl_certificate /etc/letsencrypt/live/2020.fet.at/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/2020.fet.at/privkey.pem;
ssl_trusted_certificate /etc/letsencrypt/live/2020.fet.at/chain.pem;
include snippets/ssl.conf;
include snippets/header.conf;
client_max_body_size 100M;
location / {
#include snippets/ldap.conf;
proxy_pass http://fetsite4:8001;
include snippets/proxy_header.conf;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
# proxy_set_header Authorization "";
# proxy_set_header REMOTE_USER $remote_user;
}
location /api {
# deny all;
# allow 192.168.86.1/24;
# allow 128.130.95.200;
proxy_pass http://fetsite4:8001;
include snippets/proxy_header.conf;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
}
}
server {
listen 443 ssl http2;
server_name etherpad2.2020.fet.at;
ssl_certificate /etc/letsencrypt/live/2020.fet.at/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/2020.fet.at/privkey.pem;
ssl_trusted_certificate /etc/letsencrypt/live/2020.fet.at/chain.pem;
include snippets/ssl.conf;
# include snippets/header.conf;
# include snippets/ldap.conf;
client_max_body_size 1000M;
location / {
proxy_pass http://fetsitedev:80;
include snippets/proxy_header.conf;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
# proxy_set_header Authorization "";
# proxy_set_header REMOTE_USER $remote_user;
}
}
server {
listen 443 ssl http2;
server_name *.2020.fet.at;
ssl_certificate /etc/letsencrypt/live/2020.fet.at/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/2020.fet.at/privkey.pem;
ssl_trusted_certificate /etc/letsencrypt/live/2020.fet.at/chain.pem;
include snippets/ssl.conf;
# include snippets/header.conf;
client_max_body_size 1000M;
location / {
include snippets/ldap.conf;
proxy_pass http://fetsitedev:80;
include snippets/proxy_header.conf;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_set_header Authorization "";
proxy_set_header REMOTE_USER $remote_user;
}
location /api {
satisfy any;
allow 192.168.86.0/24;
allow 128.130.95.206;
allow 128.130.95.200;
include snippets/ldap.conf;
# deny all;
proxy_pass http://fetsitedev:80;
include snippets/proxy_header.conf;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_set_header Authorization "";
proxy_set_header REMOTE_USER $remote_user;
}
location /dev {
satisfy any;
allow 192.168.86.0/24;
allow 128.130.95.206;
allow 128.130.95.200;
include snippets/ldap.conf;
# deny all;
proxy_pass http://fetsitedev:80;
include snippets/proxy_header.conf;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_set_header Authorization "";
proxy_set_header REMOTE_USER $remote_user;
}
}
server {
listen 443 ssl http2;
server_name patrick.2020.fet.at;
ssl_certificate /etc/letsencrypt/live/2020.fet.at/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/2020.fet.at/privkey.pem;
ssl_trusted_certificate /etc/letsencrypt/live/2020.fet.at/chain.pem;
include snippets/ssl.conf;
# include snippets/header.conf;
client_max_body_size 1000M;
location / {
proxy_pass http://fetsitedev:80;
include snippets/proxy_header.conf;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_set_header Authorization "";
proxy_set_header REMOTE_USER $remote_user;
}
location /admin {
proxy_pass http://fetsitedev:80;
include snippets/proxy_header.conf;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_set_header Authorization "";
proxy_set_header REMOTE_USER $remote_user;
}
}
server {
listen 443 ssl http2;
server_name alpha.2020.fet.at;
ssl_certificate /etc/letsencrypt/live/2020.fet.at/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/2020.fet.at/privkey.pem;
ssl_trusted_certificate /etc/letsencrypt/live/2020.fet.at/chain.pem;
include snippets/ssl.conf;
# include snippets/header.conf;
# include snippets/ldap.conf;
client_max_body_size 1000M;
location / {
proxy_pass http://fetsite6:8001;
include snippets/proxy_header.conf;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_set_header Authorization "";
proxy_set_header REMOTE_USER $remote_user;
}
location /api {
satisfy any;
allow 192.168.86.0/24;
allow 128.130.95.206;
allow 128.130.95.200;
include snippets/ldap.conf;
# deny all;
proxy_pass http://fetsite6:8001;
include snippets/proxy_header.conf;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_set_header Authorization "";
proxy_set_header REMOTE_USER $remote_user;
}
}

30
fet.at/2020.prod.conf Normal file
View File

@@ -0,0 +1,30 @@
server {
listen 80;
server_name 2020.fet.at;
include snippets/letsencrypt.conf;
}
server {
listen 443 ssl http2;
server_name 2020.fet.at;
ssl_certificate /etc/letsencrypt/live/moses.2020.fet.at/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/moses.2020.fet.at/privkey.pem;
ssl_trusted_certificate /etc/letsencrypt/live/moses.2020.fet.at/chain.pem;
include snippets/ssl.conf;
include snippets/header.conf;
client_max_body_size 10M;
location /api {
return 403 "Contact bofh@fet.at if you really need to access this";
}
location / {
proxy_pass http://fetsite21:8001;
include snippets/proxy_header.conf;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
}
}

26
fet.at/baroness.conf Normal file
View File

@@ -0,0 +1,26 @@
# -*-nginx-*-
server {
listen 80;
server_name baroness.fet.at;
include snippets/letsencrypt.conf;
}
server {
listen 443 ssl http2;
server_name baroness.fet.at;
ssl_certificate /etc/letsencrypt/live/baroness.fet.at/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/baroness.fet.at/privkey.pem;
ssl_trusted_certificate /etc/letsencrypt/live/baroness.fet.at/chain.pem;
include snippets/ssl.conf;
include snippets/ldap.conf;
include snippets/header.conf;
location / {
proxy_pass http://baroness;
include snippets/proxy_header.conf;
}
}

26
fet.at/corona.conf
View File

@@ -20,4 +20,30 @@ server {
location / {
return 302 https://www.fet.at/rubriken/5/neuigkeiten/509;
}
location /anwesenheit {
proxy_pass http://proteus;
include snippets/proxy_header.conf;
}
location /da {
proxy_pass http://proteus;
include snippets/proxy_header.conf;
}
location /da/daten {
proxy_pass http://proteus;
include snippets/proxy_header.conf;
include snippets/ldap.conf;
}
location /LVA {
proxy_pass http://proteus;
include snippets/proxy_header.conf;
}
location /LVA/LVAs {
proxy_pass http://proteus;
include snippets/proxy_header.conf;
include snippets/ldap.conf;
}
}

1
fet.at/git.conf
View File

@@ -16,6 +16,7 @@ server {
include snippets/ssl.conf;
include snippets/header.conf;
client_max_body_size 1000M;
location / {
proxy_pass http://zyklon:3000;

8
fet.at/mail.conf
View File

@@ -25,13 +25,7 @@ server {
# proxy_redirect https://$host:8000/ https://$host:443/;
include snippets/proxy_header.conf;
}
location /http {
index index.html;
rewrite_log on;
#rewrite ^/http(.*) $1 break;
alias /srv/www/mail/static;
}
location = / {
return 302 https://mail.fet.at/http/;
return 302 https://mail.fet.at/mail;
}
}

29
fet.at/ticket.conf Normal file
View File

@@ -0,0 +1,29 @@
# -*-nginx-*-
server {
listen 80;
server_name ticket.fet.at;
include snippets/letsencrypt.conf;
}
server {
listen 443 ssl http2;
server_name ticket.fet.at;
ssl_certificate /etc/letsencrypt/live/ticket.fet.at/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/ticket.fet.at/privkey.pem;
ssl_trusted_certificate /etc/letsencrypt/live/ticket.fet.at/chain.pem;
include snippets/ssl.conf;
location / {
proxy_pass http://proteus;
include snippets/proxy_header.conf;
}
location /pma {
proxy_pass http://proteus/pma;
include snippets/proxy_header.conf;
include snippets/ldap.conf;
}
}

8
triton.fet.at/git.conf
View File

@@ -61,10 +61,10 @@ server {
root /mnt/git_repo/;
}
location ~ ^.*\.git/(HEAD|info/refs|objects/info/.*|git-(upload|receive)-pack)$ {
satisfy any;
allow 192.168.95.0/24;
allow 127.0.0.1;
deny all;
# satisfy any;
# allow 192.168.95.0/24;
# allow 127.0.0.1;
# deny all;
include snippets/ldap.conf;

142
triton.fet.at/welcome.conf
View File

@@ -7,6 +7,148 @@ server {
include snippets/letsencrypt.conf;
}
server {
listen 80;
server_name confrancher.triton.fet.at;
# deny all;
# satisfy any;
allow 192.168.86.0/24;
# allow 128.130.95.206;
# allow 128.130.95.200;
root /var/www/rancher;
index index.html;
}
server {
listen 443 ssl http2;
server_name portainer.triton.fet.at www.portainer.triton.fet.at;
ssl_certificate /etc/letsencrypt/live/triton.fet.at/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/triton.fet.at/privkey.pem;
ssl_trusted_certificate /etc/letsencrypt/live/triton.fet.at/chain.pem;
include snippets/ssl.conf;
# include snippets/ldap.conf;
location / {
proxy_pass http://rancher:9000;
# include snippets/proxy_header.conf;
# proxy_set_header Authorization "";
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "";
proxy_set_header X-Forwarded-Host $server_name;
proxy_set_header X-Upstream $upstream_addr;
}
location /api/websocket/ {
set $upstream_endpoint http://rancher:9000;
proxy_buffering off;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "Upgrade";
proxy_set_header Host $host;
proxy_set_header X-Forwarded-Server $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Host $server_name;
proxy_set_header X-Upstream $upstream_addr;
proxy_http_version 1.1;
proxy_pass $upstream_endpoint;
proxy_redirect http://rancher:9000 $scheme://$host/;
}
}
server {
listen 80;
server_name www.rancher.fet.at www.triton2.fet.at rancher.fet.at *.rancher.fet.at *.triton2.fet.at triton2.fet.at;
client_max_body_size 1000M;
location / {
#include snippets/ldap.conf;
proxy_pass http://rancher:80;
include snippets/proxy_header.conf;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
# proxy_set_header Authorization "";
# proxy_set_header REMOTE_USER $remote_user;
}
location /.well-known/ {
default_type "text/plain";
root /var/www/html;
}
location = /.well-known/acme-challenge/ {
return 404;
}
# include snippets/letsencrypt.conf;
}
server {
listen 443 ssl http2;
server_name www.rancher.fet.at www.triton2.fet.at rancher.fet.at *.rancher.fet.at *.triton2.fet.at triton2.fet.at;
ssl_certificate /etc/letsencrypt/live/triton2.fet.at/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/triton2.fet.at/privkey.pem;
ssl_trusted_certificate /etc/letsencrypt/live/triton2.fet.at/chain.pem;
include snippets/ssl.conf;
include snippets/header.conf;
client_max_body_size 1000M;
location / {
#include snippets/ldap.conf;
proxy_pass https://rancher:443;
include snippets/proxy_header.conf;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
# proxy_set_header Authorization "";
# proxy_set_header REMOTE_USER $remote_user;
}
}
server {
listen 443 ssl http2;
server_name proxy.rancher.fet.at;
ssl_certificate /etc/letsencrypt/live/2020.fet.at/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/2020.fet.at/privkey.pem;
ssl_trusted_certificate /etc/letsencrypt/live/2020.fet.at/chain.pem;
include snippets/ssl.conf;
include snippets/header.conf;
client_max_body_size 1000M;
location / {
#include snippets/ldap.conf;
proxy_pass http://rancher:81;
include snippets/proxy_header.conf;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
# proxy_set_header Authorization "";
# proxy_set_header REMOTE_USER $remote_user;
}
}
server {
listen 443 ssl http2;

23
young.ove.at/cloud.conf Normal file
View File

@@ -0,0 +1,23 @@
# -*-nginx-*-
server {
listen 80;
server_name cloud.young.ove.at;
include snippets/letsencrypt.conf;
}
server {
listen 443 ssl http2;
server_name cloud.young.ove.at;
# ssl_certificate /etc/letsencrypt/live/cloud.young.ove.at/fullchain.pem;
# ssl_certificate_key /etc/letsencrypt/live/cloud.young.ove.at/privkey.pem;
# ssl_trusted_certificate /etc/letsencrypt/live/cloud.young.ove.at/chain.pem;
# include snippets/ssl.conf;
include snippets/header.conf;
location / {
return 302 https://young.ove.at;
}
}