Advertisement
Guest User

Untitled

a guest
Jan 22nd, 2020
141
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 7.45 KB | None | 0 0
  1. server {
  2.  
  3. listen 80;
  4.  
  5. server_name _;
  6.  
  7. return 301 https://$host$request_uri;
  8. }
  9.  
  10. server {
  11.  
  12. listen 443 ssl;
  13. ssl_certificate /etc/nginx/ssl/home.network.pem;
  14. ssl_certificate_key /etc/nginx/ssl/home.network.key;
  15.  
  16. server_name sickrage.home.network;
  17.  
  18. location / {
  19.  
  20. proxy_pass http://media.home.network:8081;
  21. proxy_set_header Host $host;
  22. proxy_set_header X-Real-IP $remote_addr;
  23. proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  24. }
  25. }
  26.  
  27. server {
  28.  
  29. listen 443 ssl;
  30. ssl_certificate /etc/nginx/ssl/home.network.pem;
  31. ssl_certificate_key /etc/nginx/ssl/home.network.key;
  32.  
  33. server_name couchpotato.home.network;
  34.  
  35. location / {
  36.  
  37. proxy_pass http://media.home.network:5050;
  38. proxy_set_header Host $host;
  39. proxy_set_header X-Real-IP $remote_addr;
  40. proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  41. }
  42. }
  43.  
  44. server {
  45.  
  46. listen 443 ssl;
  47. ssl_certificate /etc/nginx/ssl/home.network.pem;
  48. ssl_certificate_key /etc/nginx/ssl/home.network.key;
  49.  
  50. server_name deluge.home.network;
  51.  
  52. location / {
  53.  
  54. proxy_pass http://media.home.network:8112;
  55. }
  56. }
  57.  
  58. server {
  59.  
  60. listen 443 ssl;
  61. ssl_certificate /etc/nginx/ssl/home.network.pem;
  62. ssl_certificate_key /etc/nginx/ssl/home.network.key;
  63.  
  64. server_name plex.home.network;
  65.  
  66. location /web {
  67.  
  68. proxy_pass http://media.home.network:32400;
  69. proxy_set_header Host $host;
  70. proxy_set_header X-Real-IP $remote_addr;
  71. proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  72. }
  73. }
  74.  
  75. server {
  76.  
  77. listen 443 ssl;
  78. ssl_certificate /etc/nginx/ssl/home.network.pem;
  79. ssl_certificate_key /etc/nginx/ssl/home.network.key;
  80.  
  81. server_name unifi.home.network;
  82.  
  83. location / {
  84.  
  85. proxy_set_header Host $http_host;
  86. proxy_set_header X-Forwarded-Host $host;
  87. proxy_set_header X-Forwarded-Server $host;
  88. proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  89. proxy_set_header X-Real-IP $remote_addr;
  90. proxy_set_header X-Scheme $scheme;
  91. proxy_set_header Referer "";
  92. proxy_set_header Upgrade $http_upgrade;
  93. proxy_set_header Connection "upgrade";
  94. proxy_pass https://unifi-controller.home.network:8443;
  95. }
  96.  
  97. ssl_trusted_certificate /etc/nginx/ssl/home.network.pem;
  98.  
  99. }
  100.  
  101. server {
  102.  
  103. listen 443 ssl;
  104. ssl_certificate /etc/nginx/ssl/home.network.pem;
  105. ssl_certificate_key /etc/nginx/ssl/home.network.key;
  106.  
  107. server_name phpmyadmin.home.network;
  108.  
  109. root /var/www/phpmyadmin;
  110. index index.php index.html index.htm index.nginx-debian.html;
  111.  
  112. location / {
  113.  
  114. try_files $uri $uri/ =404;
  115.  
  116. }
  117.  
  118. location ~ \.php$ {
  119.  
  120. include snippets/fastcgi-php.conf;
  121. fastcgi_pass unix:/run/php/php7.3-fpm.sock;
  122. }
  123. }
  124.  
  125. server {
  126.  
  127. listen 443 ssl;
  128. ssl_certificate /etc/nginx/ssl/home.network.pem;
  129. ssl_certificate_key /etc/nginx/ssl/home.network.key;
  130.  
  131. server_name nextcloud.home.network;
  132. add_header X-Content-Type-Options nosniff;
  133. add_header X-XSS-Protection "1; mode=block";
  134. add_header X-Robots-Tag none;
  135. add_header X-Download-Options noopen;
  136. add_header X-Permitted-Cross-Domain-Policies none;
  137. add_header 'Referrer-Policy' 'no-referrer';
  138.  
  139. root /var/www/nextcloud/;
  140.  
  141. location = /robots.txt {
  142.  
  143. allow all;
  144. log_not_found off;
  145. access_log off;
  146. }
  147.  
  148. location = /.well-known/carddav {
  149.  
  150. return 301 $scheme://$host/remote.php/dav;
  151. }
  152.  
  153. client_max_body_size 512M;
  154. fastcgi_buffers 64 4K;
  155. gzip on;
  156. gzip_vary on;
  157. gzip_comp_level 4;
  158. gzip_min_length 256;
  159. gzip_proxied expired no-cache no-store private no_last_modified no_etag auth;
  160. gzip_types application/atom+xml application/javascript application/json application/ld+json application/manifest+json application/rss+xml application/vnd.geo+json application/vnd.ms-fontobject application/x-font-ttf application/x-web-app-manifest+json application/xhtml+xml application/xml font/opentype image/bmp image/svg+xml image/x-icon text/cache-manifest text/css text/plain text/vcard text/vnd.rim.location.xloc text/vtt text/x-component text/x-cross-domain-policy;
  161.  
  162. location / {
  163.  
  164. rewrite ^ /index.php$request_uri;
  165. }
  166.  
  167. location ~ ^/(?:build|tests|config|lib|3rdparty|templates|data)/ {
  168.  
  169. deny all;
  170. }
  171.  
  172. location ~ ^/(?:\.|autotest|occ|issue|indie|db_|console) {
  173.  
  174. deny all;
  175. }
  176.  
  177. location ~ ^/(?:index|remote|public|cron|core/ajax/update|status|ocs/v[12]|updater/.+|ocs-provider/.+)\.php(?:$|/) {
  178.  
  179. fastcgi_split_path_info ^(.+?\.php)(/.*)$;
  180. include fastcgi_params;
  181. fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
  182. fastcgi_param PATH_INFO $fastcgi_path_info;
  183. fastcgi_param modHeadersAvailable true;
  184. fastcgi_param front_controller_active true;
  185. fastcgi_pass unix:/run/php/php7.4-fpm.sock;
  186. fastcgi_intercept_errors on;
  187. fastcgi_request_buffering off;
  188. }
  189.  
  190. location ~ ^/(?:updater|ocs-provider)(?:$|/) {
  191.  
  192. try_files $uri/ =404;
  193. index index.php;
  194. }
  195.  
  196. location ~ \.(?:css|js|woff|svg|gif)$ {
  197.  
  198. try_files $uri /index.php$request_uri;
  199. add_header Cache-Control "public, max-age=15778463";
  200. add_header X-Content-Type-Options nosniff;
  201. add_header X-XSS-Protection "1; mode=block";
  202. add_header X-Robots-Tag none;
  203. add_header X-Download-Options noopen;
  204. add_header X-Permitted-Cross-Domain-Policies none;
  205. access_log off;
  206. }
  207.  
  208. location ~ \.(?:png|html|ttf|ico|jpg|jpeg)$ {
  209.  
  210. try_files $uri /index.php$request_uri;
  211. access_log off;
  212. }
  213. }
  214.  
  215. server {
  216.  
  217. listen 443 ssl;
  218. ssl_certificate /etc/nginx/ssl/home.network.pem;
  219. ssl_certificate_key /etc/nginx/ssl/home.network.key;
  220.  
  221. server_name sync.home.network;
  222. location / {
  223.  
  224. proxy_pass http://web.home.network:8800;
  225. }
  226. }
  227.  
  228. server {
  229.  
  230. listen 443 ssl;
  231. ssl_certificate /etc/nginx/ssl/home.network.pem;
  232. ssl_certificate_key /etc/nginx/ssl/home.network.key;
  233.  
  234. server_name ombi.home.network;
  235. location / {
  236.  
  237. proxy_pass http://media.home.network:5000;
  238. }
  239. }
  240.  
  241. server {
  242.  
  243. listen 443 ssl;
  244. ssl_certificate /etc/nginx/ssl/home.network.pem;
  245. ssl_certificate_key /etc/nginx/ssl/home.network.key;
  246.  
  247. server_name unmanic.home.network;
  248. location / {
  249.  
  250. proxy_pass http://media.home.network:8888;
  251. }
  252. }
  253.  
  254. server {
  255.  
  256. listen 443 ssl;
  257. ssl_certificate /etc/letsencrypt/live/ombi.lettuce.expert/fullchain.pem; # managed by Certbot
  258. ssl_certificate_key /etc/letsencrypt/live/ombi.lettuce.expert/privkey.pem; # managed by Certbot
  259.  
  260. server_name ombi.lettuce.expert;
  261. location / {
  262.  
  263. proxy_pass http://media.home.network:5000;
  264. }
  265.  
  266. }
  267.  
  268. server {
  269.  
  270. listen 443 ssl;
  271. ssl_certificate /etc/nginx/ssl/home.network.pem;
  272. ssl_certificate_key /etc/nginx/ssl/home.network.key;
  273.  
  274. server_name netdata.home.network;
  275. location / {
  276.  
  277. proxy_pass http://web.home.network:19999;
  278. }
  279. }
  280.  
  281. server {
  282.  
  283. listen 443 ssl;
  284. ssl_certificate /etc/nginx/ssl/home.network.pem;
  285. ssl_certificate_key /etc/nginx/ssl/home.network.key;
  286.  
  287. server_name tautulli.home.network;
  288. location / {
  289.  
  290. proxy_pass http://media.home.network:8181;
  291. }
  292. }
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement