From 01f4373a9abcc095302e68be8254a450d87f8290 Mon Sep 17 00:00:00 2001 From: thomas Date: Sat, 28 Jun 2025 13:40:18 +0200 Subject: [PATCH] Initial commit: Nginx-Konfiguration --- .gitignore | 1 + nginx.conf | 234 +++++++++++++++++++++++++++++++++++++++++++++++++++++ 2 files changed, 235 insertions(+) create mode 100644 .gitignore create mode 100644 nginx.conf diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..56109ad --- /dev/null +++ b/.gitignore @@ -0,0 +1 @@ +.htpasswd \ No newline at end of file diff --git a/nginx.conf b/nginx.conf new file mode 100644 index 0000000..1d5b274 --- /dev/null +++ b/nginx.conf @@ -0,0 +1,234 @@ +events {} + +http { + server { + listen 80; + server_name _; + + # Root zeigt auf statische Seite oder 404, keine Weiterleitung! + location = / { + root /usr/share/nginx/html; + index index.html; + } + + # Webshop (Django) + location /webshop/ { + proxy_pass http://webshop-app:8000; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + } + + # Weitere Seite + location /seite2/ { + proxy_pass http://localhost:8081/; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + } + + # Login und Logout + location /login/ { + proxy_pass http://webshop-app:8000; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + } + location /logout/ { + proxy_pass http://webshop-app:8000; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + } + + # Standardseite (optional) + location / { + root /usr/share/nginx/html; + index index.html; + } + + location /ssv/ { + rewrite ^/ssv(/.*)$ $1 break; + proxy_pass http://ssv-new-app:8000; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + } + + location /pihole/ { + auth_basic "Pi-hole Login"; + auth_basic_user_file /etc/nginx/.htpasswd; + + proxy_pass http://pihole:80/; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + + sub_filter 'href="/' 'href="/pihole/'; + sub_filter 'src="/' 'src="/pihole/'; + sub_filter_once off; + } + + location /homeassistant/ { + proxy_pass http://192.168.178.175:8123/; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + proxy_http_version 1.1; + proxy_set_header Upgrade $http_upgrade; + proxy_set_header Connection "upgrade"; + } + + location /static/ { + proxy_pass http://ssv-app:8000/static/; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + } + location /media/ { + proxy_pass http://ssv-app:8000/media/; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + } + } + + server { + listen 80; + server_name pihole; + + auth_basic "Pi-hole Login"; + auth_basic_user_file /etc/nginx/.htpasswd; + + location / { + proxy_pass http://pihole:80/; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + } + } + + server { + listen 8002; + server_name _; + + location / { + proxy_pass http://ssv-new-app:8000/; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + } + } + + server { + listen 443 ssl; + server_name kasimirat.de; + + ssl_certificate /etc/letsencrypt/live/kasimirat.de/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/kasimirat.de/privkey.pem; + ssl_protocols TLSv1.2 TLSv1.3; + ssl_ciphers HIGH:!aNULL:!MD5; + + location = / { + root /usr/share/nginx/html; + index index.html; + } + + location /webshop/ { + proxy_pass http://webshop-app:8000; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + } + + location /seite2/ { + proxy_pass http://localhost:8081/; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + } + + location /login/ { + proxy_pass http://webshop-app:8000; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + } + location /logout/ { + proxy_pass http://webshop-app:8000; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + } + + location / { + root /usr/share/nginx/html; + index index.html; + } + + location /ssv/ { + rewrite ^/ssv(/.*)$ $1 break; + proxy_pass http://ssv-new-app:8000; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + } + + location /pihole/ { + auth_basic "Pi-hole Login"; + auth_basic_user_file /etc/nginx/.htpasswd; + + proxy_pass http://pihole:80/; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + + sub_filter 'href="/' 'href="/pihole/'; + sub_filter 'src="/' 'src="/pihole/'; + sub_filter_once off; + } + + location /homeassistant/ { + proxy_pass http://192.168.178.175:8123/; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + proxy_http_version 1.1; + proxy_set_header Upgrade $http_upgrade; + proxy_set_header Connection "upgrade"; + } + + location /static/ { + proxy_pass http://ssv-app:8000/static/; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + } + location /media/ { + proxy_pass http://ssv-app:8000/media/; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + } + } +} \ No newline at end of file