services/homelab
1
1
Fork 0
Code Issues 5 Pull Requests Actions Packages Projects Releases Wiki Activity

post home assistant update

Browse Source
This commit is contained in:
Reese Wells
2024-05-22 08:48:51 -04:00
parent 5940c16d91
commit eb934c32e2
37 changed files with 1077 additions and 731 deletions
Download Patch File Download Diff File Expand all files Collapse all files

35
nginx/nginx.conf
View File

@@ -5,14 +5,14 @@ worker_processes 8;
events {}
stream {
log_format basic '$remote_addr $restricted_domain [$time_local] '
log_format basic '$remote_addr $domain [$time_local] '
'$protocol $status $bytes_sent $bytes_received '
'$session_time';
include /etc/nginx/stream.d/*.conf;
# Map all SSL parsed server names to hosts
map $ssl_preread_server_name $unrestricted_domain {
map $ssl_preread_server_name $domain {
"" 127.0.0.1:443;
@@ -22,26 +22,11 @@ stream {
{% endfor %}
# For each domain we want to terminate, forward to internal http server
{% for domain in terminate_ssl %}
{% if not domain.restricted %}
{% for domain in reeseapps %}
{{ domain.external.domain }} 127.0.0.1:443;
{% endif %}
{% endfor %}
default {{ nginx.defaults.domain }}:443;
}
map $ssl_preread_server_name $restricted_domain {
"" 127.0.0.1:443;
# For each domain we need to stream to a remote server, forward to internal domain
{% for domain in stream_ssl %}
{{ domain.external.domain }} {{ domain.internal.domain }}:{{ domain.internal.port }};
{% endfor %}
# For each domain we want to terminate, forward to internal http server
{% for domain in terminate_ssl %}
{% for domain in reeseseal %}
{{ domain.external.domain }} 127.0.0.1:443;
{% endfor %}
@@ -53,17 +38,7 @@ stream {
access_log /var/log/nginx/stream-access-443.log basic;
listen {{ ansible_default_ipv4.address }}:443;
resolver 1.1.1.1;
proxy_pass $restricted_domain;
ssl_preread on;
proxy_socket_keepalive on;
}
# Forward 444 (restricted) traffic
server {
access_log /var/log/nginx/stream-access-444.log basic;
listen {{ ansible_default_ipv4.address }}:444;
resolver 1.1.1.1;
proxy_pass $unrestricted_domain;
proxy_pass $domain;
ssl_preread on;
proxy_socket_keepalive on;
}