Skip to content

Commit f793c1e

Browse files
authored
Merge branch 'master' into tinyauth
2 parents a7f340b + 0ea06f4 commit f793c1e

15 files changed

+526
-9
lines changed

asciinema.subdomain.conf.sample

Lines changed: 67 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,67 @@
1+
## Version 2025/02/21
2+
# make sure that your asciinema container is named asciinema
3+
# make sure that your dns has a cname set for asciinema
4+
5+
server {
6+
listen 443 ssl;
7+
listen [::]:443 ssl;
8+
9+
server_name asciinema.*;
10+
11+
include /config/nginx/ssl.conf;
12+
13+
client_max_body_size 0;
14+
15+
# enable for ldap auth (requires ldap-location.conf in the location block)
16+
#include /config/nginx/ldap-server.conf;
17+
18+
# enable for Authelia (requires authelia-location.conf in the location block)
19+
#include /config/nginx/authelia-server.conf;
20+
21+
# enable for Authentik (requires authentik-location.conf in the location block)
22+
#include /config/nginx/authentik-server.conf;
23+
24+
location / {
25+
# enable the next two lines for http auth
26+
#auth_basic "Restricted";
27+
#auth_basic_user_file /config/nginx/.htpasswd;
28+
29+
# enable for ldap auth (requires ldap-server.conf in the server block)
30+
#include /config/nginx/ldap-location.conf;
31+
32+
# enable for Authelia (requires authelia-server.conf in the server block)
33+
#include /config/nginx/authelia-location.conf;
34+
35+
# enable for Authentik (requires authentik-server.conf in the server block)
36+
#include /config/nginx/authentik-location.conf;
37+
38+
include /config/nginx/proxy.conf;
39+
include /config/nginx/resolver.conf;
40+
set $upstream_app asciinema;
41+
set $upstream_port 4000;
42+
set $upstream_proto http;
43+
proxy_pass $upstream_proto://$upstream_app:$upstream_port;
44+
}
45+
46+
location ~ (/asciinema)?/dashboard {
47+
# enable the next two lines for http auth
48+
#auth_basic "Restricted";
49+
#auth_basic_user_file /config/nginx/.htpasswd;
50+
51+
# enable for ldap auth (requires ldap-server.conf in the server block)
52+
#include /config/nginx/ldap-location.conf;
53+
54+
# enable for Authelia (requires authelia-server.conf in the server block)
55+
#include /config/nginx/authelia-location.conf;
56+
57+
# enable for Authentik (requires authentik-server.conf in the server block)
58+
#include /config/nginx/authentik-location.conf;
59+
60+
include /config/nginx/proxy.conf;
61+
include /config/nginx/resolver.conf;
62+
set $upstream_app asciinema;
63+
set $upstream_port 4002;
64+
set $upstream_proto http;
65+
proxy_pass $upstream_proto://$upstream_app:$upstream_port;
66+
}
67+
}

discount-bandit.subdomain.conf.sample

Lines changed: 45 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,45 @@
1+
## Version 2025/01/20
2+
# make sure that your discount-bandit container is named discount-bandit
3+
# make sure that your dns has a cname set for discount-bandit
4+
5+
server {
6+
listen 443 ssl;
7+
listen [::]:443 ssl;
8+
9+
server_name discount-bandit.*;
10+
11+
include /config/nginx/ssl.conf;
12+
13+
client_max_body_size 0;
14+
15+
# enable for ldap auth (requires ldap-location.conf in the location block)
16+
#include /config/nginx/ldap-server.conf;
17+
18+
# enable for Authelia (requires authelia-location.conf in the location block)
19+
#include /config/nginx/authelia-server.conf;
20+
21+
# enable for Authentik (requires authentik-location.conf in the location block)
22+
#include /config/nginx/authentik-server.conf;
23+
24+
location / {
25+
# enable the next two lines for http auth
26+
#auth_basic "Restricted";
27+
#auth_basic_user_file /config/nginx/.htpasswd;
28+
29+
# enable for ldap auth (requires ldap-server.conf in the server block)
30+
#include /config/nginx/ldap-location.conf;
31+
32+
# enable for Authelia (requires authelia-server.conf in the server block)
33+
#include /config/nginx/authelia-location.conf;
34+
35+
# enable for Authentik (requires authentik-server.conf in the server block)
36+
#include /config/nginx/authentik-location.conf;
37+
38+
include /config/nginx/proxy.conf;
39+
include /config/nginx/resolver.conf;
40+
set $upstream_app discount-bandit;
41+
set $upstream_port 80;
42+
set $upstream_proto http;
43+
proxy_pass $upstream_proto://$upstream_app:$upstream_port;
44+
}
45+
}

gitea.subdomain.conf.sample

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
## Version 2024/07/16
1+
## Version 2025/04/26
22
# make sure that your gitea container is named gitea
33
# make sure that your dns has a cname set for gitea
44
# edit the following parameters in /data/gitea/conf/app.ini
@@ -49,7 +49,7 @@ server {
4949

5050
}
5151

52-
location ~ (/gitea)?/info/lfs {
52+
location ~ (/gitea)?/(api|info/lfs) {
5353
include /config/nginx/proxy.conf;
5454
include /config/nginx/resolver.conf;
5555
set $upstream_app gitea;

immich_server.subdomain.conf.sample

Lines changed: 57 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,57 @@
1+
## Version 2025/01/30
2+
# make sure that your immich container is named immich_server
3+
# make sure that your dns has a cname set for immich
4+
# immich v1.118+ only. For earlier versions, change $upstream_port to 3001
5+
6+
server {
7+
listen 443 ssl;
8+
listen [::]:443 ssl;
9+
10+
server_name immich.*;
11+
12+
include /config/nginx/ssl.conf;
13+
14+
client_max_body_size 0;
15+
16+
# enable for ldap auth (requires ldap-location.conf in the location block)
17+
#include /config/nginx/ldap-server.conf;
18+
19+
# enable for Authelia (requires authelia-location.conf in the location block)
20+
#include /config/nginx/authelia-server.conf;
21+
22+
# enable for Authentik (requires authentik-location.conf in the location block)
23+
#include /config/nginx/authentik-server.conf;
24+
25+
location / {
26+
# enable the next two lines for http auth
27+
#auth_basic "Restricted";
28+
#auth_basic_user_file /config/nginx/.htpasswd;
29+
30+
# enable for ldap auth (requires ldap-server.conf in the server block)
31+
#include /config/nginx/ldap-location.conf;
32+
33+
# enable for Authelia (requires authelia-server.conf in the server block)
34+
#include /config/nginx/authelia-location.conf;
35+
36+
# enable for Authentik (requires authentik-server.conf in the server block)
37+
#include /config/nginx/authentik-location.conf;
38+
39+
include /config/nginx/proxy.conf;
40+
include /config/nginx/resolver.conf;
41+
set $upstream_app immich_server;
42+
set $upstream_port 2283;
43+
set $upstream_proto http;
44+
proxy_pass $upstream_proto://$upstream_app:$upstream_port;
45+
46+
}
47+
48+
location ~ (/immich)?/api {
49+
include /config/nginx/proxy.conf;
50+
include /config/nginx/resolver.conf;
51+
set $upstream_app immich_server;
52+
set $upstream_port 2283;
53+
set $upstream_proto http;
54+
proxy_pass $upstream_proto://$upstream_app:$upstream_port;
55+
56+
}
57+
}

iplayarr.subdomain.conf.sample

Lines changed: 46 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,46 @@
1+
## Version 2025/04/15
2+
# make sure that your iplayarr container is named iplayarr
3+
# make sure that your dns has a cname set for iplayarr
4+
5+
server {
6+
listen 443 ssl;
7+
listen [::]:443 ssl;
8+
9+
server_name iplayarr.*;
10+
11+
include /config/nginx/ssl.conf;
12+
13+
client_max_body_size 0;
14+
15+
# enable for ldap auth (requires ldap-location.conf in the location block)
16+
#include /config/nginx/ldap-server.conf;
17+
18+
# enable for Authelia (requires authelia-location.conf in the location block)
19+
#include /config/nginx/authelia-server.conf;
20+
21+
# enable for Authentik (requires authentik-location.conf in the location block)
22+
#include /config/nginx/authentik-server.conf;
23+
24+
location / {
25+
# enable the next two lines for http auth
26+
#auth_basic "Restricted";
27+
#auth_basic_user_file /config/nginx/.htpasswd;
28+
29+
# enable for ldap auth (requires ldap-server.conf in the server block)
30+
#include /config/nginx/ldap-location.conf;
31+
32+
# enable for Authelia (requires authelia-server.conf in the server block)
33+
#include /config/nginx/authelia-location.conf;
34+
35+
# enable for Authentik (requires authentik-server.conf in the server block)
36+
#include /config/nginx/authentik-location.conf;
37+
38+
include /config/nginx/proxy.conf;
39+
include /config/nginx/resolver.conf;
40+
set $upstream_app iplayarr;
41+
set $upstream_port 4404;
42+
set $upstream_proto http;
43+
proxy_pass $upstream_proto://$upstream_app:$upstream_port;
44+
45+
}
46+
}

jellyfin.subdomain.conf.sample

Lines changed: 7 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
## Version 2025/01/11
1+
## Version 2025/05/18
22
# make sure that your jellyfin container is named jellyfin
33
# make sure that your dns has a cname set for jellyfin
44
# if jellyfin is running in bridge mode and the container is named "jellyfin", the below config should work as is
@@ -22,7 +22,9 @@ server {
2222
set $upstream_app jellyfin;
2323
set $upstream_port 8096;
2424
set $upstream_proto http;
25-
add_header Access-Control-Allow-Origin "luna://com.webos.service.config" always;
25+
if ($http_user_agent ~ Web0S) {
26+
add_header Access-Control-Allow-Origin "luna://com.webos.service.config" always;
27+
}
2628
proxy_pass $upstream_proto://$upstream_app:$upstream_port;
2729

2830
proxy_set_header Range $http_range;
@@ -35,7 +37,9 @@ server {
3537
set $upstream_app jellyfin;
3638
set $upstream_port 8096;
3739
set $upstream_proto http;
38-
add_header Access-Control-Allow-Origin "luna://com.webos.service.config" always;
40+
if ($http_user_agent ~ Web0S) {
41+
add_header Access-Control-Allow-Origin "luna://com.webos.service.config" always;
42+
}
3943
proxy_pass $upstream_proto://$upstream_app:$upstream_port;
4044

4145
}

jellyfin.subfolder.conf.sample

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
## Version 2025/01/11
1+
## Version 2025/05/18
22
# make sure that your jellyfin container is named jellyfin
33
# if jellyfin is running in bridge mode and the container is named "jellyfin", the below config should work as is
44
# if not, replace the line "set $upstream_app jellyfin;" with "set $upstream_app <containername>;"
@@ -15,7 +15,9 @@ location ^~ /jellyfin/ {
1515
set $upstream_app jellyfin;
1616
set $upstream_port 8096;
1717
set $upstream_proto http;
18-
add_header Access-Control-Allow-Origin "luna://com.webos.service.config" always;
18+
if ($http_user_agent ~ Web0S) {
19+
add_header Access-Control-Allow-Origin "luna://com.webos.service.config" always;
20+
}
1921
proxy_pass $upstream_proto://$upstream_app:$upstream_port;
2022

2123
proxy_set_header Range $http_range;

kopia.subdomain.conf.sample

Lines changed: 46 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,46 @@
1+
## Version 2024/07/16
2+
# make sure that your kopia container is named kopia
3+
# make sure that your dns has a cname set for kopia
4+
5+
server {
6+
listen 443 ssl;
7+
listen [::]:443 ssl;
8+
9+
server_name kopia.*;
10+
11+
include /config/nginx/ssl.conf;
12+
13+
client_max_body_size 0;
14+
15+
# enable for ldap auth (requires ldap-location.conf in the location block)
16+
#include /config/nginx/ldap-server.conf;
17+
18+
# enable for Authelia (requires authelia-location.conf in the location block)
19+
#include /config/nginx/authelia-server.conf;
20+
21+
# enable for Authentik (requires authentik-location.conf in the location block)
22+
#include /config/nginx/authentik-server.conf;
23+
24+
location / {
25+
# enable the next two lines for http auth
26+
#auth_basic "Restricted";
27+
#auth_basic_user_file /config/nginx/.htpasswd;
28+
29+
# enable for ldap auth (requires ldap-server.conf in the server block)
30+
#include /config/nginx/ldap-location.conf;
31+
32+
# enable for Authelia (requires authelia-server.conf in the server block)
33+
#include /config/nginx/authelia-location.conf;
34+
35+
# enable for Authentik (requires authentik-server.conf in the server block)
36+
#include /config/nginx/authentik-location.conf;
37+
38+
include /config/nginx/proxy.conf;
39+
include /config/nginx/resolver.conf;
40+
set $upstream_app kopia;
41+
set $upstream_port 51515;
42+
set $upstream_proto http;
43+
proxy_pass $upstream_proto://$upstream_app:$upstream_port;
44+
45+
}
46+
}

metabase.subdomain.conf.sample

Lines changed: 54 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,54 @@
1+
## Version 2025/02/04
2+
# make sure that your metabase container is named metabase
3+
# make sure that your dns has a cname set for metabase
4+
5+
server {
6+
listen 443 ssl;
7+
listen [::]:443 ssl;
8+
9+
server_name metabase.*;
10+
11+
include /config/nginx/ssl.conf;
12+
13+
client_max_body_size 0;
14+
15+
# enable for ldap auth (requires ldap-location.conf in the location block)
16+
#include /config/nginx/ldap-server.conf;
17+
18+
# enable for Authelia (requires authelia-location.conf in the location block)
19+
#include /config/nginx/authelia-server.conf;
20+
21+
# enable for Authentik (requires authentik-location.conf in the location block)
22+
#include /config/nginx/authentik-server.conf;
23+
24+
location / {
25+
# enable the next two lines for http auth
26+
#auth_basic "Restricted";
27+
#auth_basic_user_file /config/nginx/.htpasswd;
28+
29+
# enable for ldap auth (requires ldap-server.conf in the server block)
30+
#include /config/nginx/ldap-location.conf;
31+
32+
# enable for Authelia (requires authelia-server.conf in the server block)
33+
#include /config/nginx/authelia-location.conf;
34+
35+
# enable for Authentik (requires authentik-server.conf in the server block)
36+
#include /config/nginx/authentik-location.conf;
37+
38+
include /config/nginx/proxy.conf;
39+
include /config/nginx/resolver.conf;
40+
set $upstream_app metabase;
41+
set $upstream_port 3000;
42+
set $upstream_proto http;
43+
proxy_pass $upstream_proto://$upstream_app:$upstream_port;
44+
}
45+
46+
location ~ ^/api {
47+
include /config/nginx/proxy.conf;
48+
include /config/nginx/resolver.conf;
49+
set $upstream_app metabase;
50+
set $upstream_port 3000;
51+
set $upstream_proto http;
52+
proxy_pass $upstream_proto://$upstream_app:$upstream_port;
53+
}
54+
}

0 commit comments

Comments
 (0)