From 0886cc26aa5e3aa8d02271a4c02b317db1183516 Mon Sep 17 00:00:00 2001 From: Patrick Spek Date: Sat, 24 Sep 2022 08:49:12 +0200 Subject: Add nginx site for k3s reverse proxies --- .../webserver-nginx/share/sites.d/revproxy/k3s | 30 ++++++++++++++++++++++ 1 file changed, 30 insertions(+) create mode 100644 playbooks.d/webserver-nginx/share/sites.d/revproxy/k3s (limited to 'playbooks.d/webserver-nginx') diff --git a/playbooks.d/webserver-nginx/share/sites.d/revproxy/k3s b/playbooks.d/webserver-nginx/share/sites.d/revproxy/k3s new file mode 100644 index 0000000..7b33139 --- /dev/null +++ b/playbooks.d/webserver-nginx/share/sites.d/revproxy/k3s @@ -0,0 +1,30 @@ +server { + listen 80 default_server; + listen [::]:80 default_server; + + include /etc/nginx/snippets.d/certbot.conf; + + location / { + return 301 https://$host$request_uri; + } +} + +server { + listen 443 ssl http2 default_server; + listen [::]:443 ssl http2 default_server; + + ssl_certificate /etc/letsencrypt/live/$ssl_server_name/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/$ssl_server_name/privkey.pem; + + include /etc/nginx/snippets.d/certbot.conf; + + location / { + proxy_http_version 1.1; + proxy_set_header Connection $http_connection; + proxy_set_header Host $host; + proxy_set_header Upgrade $http_upgrade; + proxy_set_header X-Forwarded-For $remote_addr; + + proxy_pass http://10.57.100.7:8080; + } +} -- cgit v1.1