58 lines
2.0 KiB
Plaintext
58 lines
2.0 KiB
Plaintext
|
## Version 2023/02/05
|
||
|
|
# make sure that your synclounge container is named synclounge
|
||
|
|
# make sure that your dns has a cname set for synclounge
|
||
|
|
# Use this with SyncLounge v3 and up.
|
||
|
|
# Make sure that you do not have HSTS enabled, otherwise http access won't work
|
||
|
|
|
||
|
|
server {
|
||
|
|
listen 443 ssl;
|
||
|
|
listen [::]:443 ssl;
|
||
|
|
listen 80;
|
||
|
|
listen [::]:80;
|
||
|
|
|
||
|
|
server_name synclounge.*;
|
||
|
|
|
||
|
|
include /config/nginx/ssl.conf;
|
||
|
|
|
||
|
|
client_max_body_size 0;
|
||
|
|
|
||
|
|
# enable for ldap auth (requires ldap-location.conf in the location block)
|
||
|
|
#include /config/nginx/ldap-server.conf;
|
||
|
|
|
||
|
|
# enable for Authelia (requires authelia-location.conf in the location block)
|
||
|
|
#include /config/nginx/authelia-server.conf;
|
||
|
|
|
||
|
|
# enable for Authentik (requires authentik-location.conf in the location block)
|
||
|
|
#include /config/nginx/authentik-server.conf;
|
||
|
|
|
||
|
|
location / {
|
||
|
|
# enable the next two lines for http auth
|
||
|
|
#auth_basic "Restricted";
|
||
|
|
#auth_basic_user_file /config/nginx/.htpasswd;
|
||
|
|
|
||
|
|
# enable for ldap auth (requires ldap-server.conf in the server block)
|
||
|
|
#include /config/nginx/ldap-location.conf;
|
||
|
|
|
||
|
|
# enable for Authelia (requires authelia-server.conf in the server block)
|
||
|
|
#include /config/nginx/authelia-location.conf;
|
||
|
|
|
||
|
|
# enable for Authentik (requires authentik-server.conf in the server block)
|
||
|
|
#include /config/nginx/authentik-location.conf;
|
||
|
|
|
||
|
|
include /config/nginx/proxy.conf;
|
||
|
|
include /config/nginx/resolver.conf;
|
||
|
|
set $upstream_app synclounge;
|
||
|
|
set $upstream_port 8088;
|
||
|
|
set $upstream_proto http;
|
||
|
|
proxy_pass $upstream_proto://$upstream_app:$upstream_port;
|
||
|
|
|
||
|
|
proxy_buffering off;
|
||
|
|
proxy_socket_keepalive on;
|
||
|
|
proxy_set_header X-Forwarded-Proto $scheme;
|
||
|
|
proxy_set_header Sec-WebSocket-Extensions $http_sec_websocket_extensions;
|
||
|
|
proxy_set_header Sec-WebSocket-Key $http_sec_websocket_key;
|
||
|
|
proxy_set_header Sec-WebSocket-Version $http_sec_websocket_version;
|
||
|
|
|
||
|
|
}
|
||
|
|
}
|