From 40f4bf22b4e552d3c765d7bec0347ec2e9b5cd36 Mon Sep 17 00:00:00 2001
From: Patrick Spek
Date: Sat, 24 Sep 2022 09:00:06 +0200
Subject: Use revproxy dir
---
.../webserver-nginx/share/sites.d/revproxy/k3s | 30 ++++++++++++++++++++++
1 file changed, 30 insertions(+)
create mode 100644 playbooks.d/webserver-nginx/share/sites.d/revproxy/k3s
(limited to 'playbooks.d/webserver-nginx/share/sites.d/revproxy/k3s')
diff --git a/playbooks.d/webserver-nginx/share/sites.d/revproxy/k3s b/playbooks.d/webserver-nginx/share/sites.d/revproxy/k3s
new file mode 100644
index 0000000..7b33139
--- /dev/null
+++ b/playbooks.d/webserver-nginx/share/sites.d/revproxy/k3s
@@ -0,0 +1,30 @@
+server {
+ listen 80 default_server;
+ listen [::]:80 default_server;
+
+ include /etc/nginx/snippets.d/certbot.conf;
+
+ location / {
+ return 301 https://$host$request_uri;
+ }
+}
+
+server {
+ listen 443 ssl http2 default_server;
+ listen [::]:443 ssl http2 default_server;
+
+ ssl_certificate /etc/letsencrypt/live/$ssl_server_name/fullchain.pem;
+ ssl_certificate_key /etc/letsencrypt/live/$ssl_server_name/privkey.pem;
+
+ include /etc/nginx/snippets.d/certbot.conf;
+
+ location / {
+ proxy_http_version 1.1;
+ proxy_set_header Connection $http_connection;
+ proxy_set_header Host $host;
+ proxy_set_header Upgrade $http_upgrade;
+ proxy_set_header X-Forwarded-For $remote_addr;
+
+ proxy_pass http://10.57.100.7:8080;
+ }
+}
--
cgit v1.1