Geri/reverse-proxy-setup
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Compare commits

base: Geri:a1056ba9004307f93900f7d9522b8ebb902928b8
Branches Tags
Geri:master
..
compare: Geri:87279cd7d4ebd3807f7a7a65d3c0e335227f92f9
Branches Tags
Geri:master

No commits in common. "a1056ba9004307f93900f7d9522b8ebb902928b8" and "87279cd7d4ebd3807f7a7a65d3c0e335227f92f9" have entirely different histories.
a1056ba900 ... 87279cd7d4

2 changed files with 1 additions and 25 deletions
Download patch file Download diff file Expand all files Collapse all files

24
README.md
View file

@ -24,26 +24,4 @@ All subsequent domains I want to point to a home server service will have a CNAM
``` ```
git.gerardgascon.com. IN CNAME vps.gerardgascon.com. git.gerardgascon.com. IN CNAME vps.gerardgascon.com.
``` ```
## Steps to add a new service
1. Add CNAME record to DNS
2. Modify nginx.conf to add support for the new service:
```nginx configuration
server {
listen 443 ssl;
server_name <<url>>;
ssl_certificate /etc/letsencrypt/live/<<url>>/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/<<url>>/privkey.pem;
location / {
proxy_pass http://<<tailnet_ip>>:<<service_port>>/;
}
}
```
3. Request SSL certificate and deploy:
```shell
docker compose stop nginx && certbot certonly --standalone -d <<url>> --expand && docker compose up -d
```

2
nginx.conf
View file

@ -37,7 +37,6 @@ http {
server { server {
listen 443 ssl; listen 443 ssl;
server_name git.gerardgascon.com; server_name git.gerardgascon.com;
client_max_body_size 0;
ssl_certificate /etc/letsencrypt/live/git.gerardgascon.com/fullchain.pem; ssl_certificate /etc/letsencrypt/live/git.gerardgascon.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/git.gerardgascon.com/privkey.pem; ssl_certificate_key /etc/letsencrypt/live/git.gerardgascon.com/privkey.pem;
@ -50,7 +49,6 @@ http {
server { server {
listen 443 ssl; listen 443 ssl;
server_name obsidian.gerardgascon.com; server_name obsidian.gerardgascon.com;
client_max_body_size 128M;
ssl_certificate /etc/letsencrypt/live/obsidian.gerardgascon.com/fullchain.pem; ssl_certificate /etc/letsencrypt/live/obsidian.gerardgascon.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/obsidian.gerardgascon.com/privkey.pem; ssl_certificate_key /etc/letsencrypt/live/obsidian.gerardgascon.com/privkey.pem;