ProjectSegfault/ansible
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

RIP Soleil Levant

Browse Source
This commit is contained in:
Arya
2023-09-14 14:42:16 +05:30
parent f77518cf79
commit c5282c4705
14 changed files with 198 additions and 321 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
privfrontends/caddy-update.yaml
View File

@@ -1,6 +1,6 @@
---
- name: Setup Caddy
hosts: core,privfrontends
hosts: privfrontends
roles:
- role: caddy-ansible
caddy_systemd_capabilities_enabled: true

14
privfrontends/docker-tasks.yaml
View File

@@ -4,7 +4,7 @@
path: "{{ docker_dir }}/{{ item }}"
state: directory
mode: "0755"
tags: docker,soleil,pizza
tags: docker,pizza
- name: Copy docker-compose templates for the {{item}}
ansible.builtin.template:
@@ -13,14 +13,14 @@
backup: true
mode: preserve
register: check_status
tags: docker,soleil,pizza
tags: docker,pizza
- name: Check if extras file exists for the {{item}}
delegate_to: localhost
ansible.builtin.stat:
path: ./compose/{{ item }}/extras.conf.j2
register: file
tags: docker,soleil,pizza
tags: docker,pizza
- name: Copy extras file
ansible.builtin.template:
@@ -29,7 +29,7 @@
backup: true
mode: preserve
when: file.stat.exists
tags: docker,soleil,pizza
tags: docker,pizza
- name: "Update docker {{item}} image"
ansible.builtin.command:
@@ -38,7 +38,7 @@
when: check_status.changed
register: updateout
changed_when: updateout.rc != 0
tags: docker,soleil,pizza
tags: docker,pizza
- name: "Stop docker {{item}}"
ansible.builtin.command:
@@ -47,7 +47,7 @@
when: check_status.changed
register: stopout
changed_when: stopout.rc != 0
tags: docker,soleil,pizza
tags: docker,pizza
- name: "Start docker {{item}}"
ansible.builtin.command:
@@ -56,4 +56,4 @@
when: check_status.changed
register: startout
changed_when: startout.rc != 0
tags: docker,soleil,pizza
tags: docker,pizza

19
privfrontends/playbook.yaml
View File

@@ -1,6 +1,6 @@
---
- name: Setup Caddy
hosts: privfrontends,core
hosts: privfrontends
tasks:
- name: Copy Caddyfile
ansible.builtin.template:
@@ -30,17 +30,6 @@
- nitter
- teddit
- watchtower
tasks:
# community.docker does not support compose 2.0 right now.
# https://github.com/ansible-collections/community.docker/issues/216
- name: Update docker compose files and restart those with changes
ansible.builtin.include_tasks: docker-tasks.yaml
with_items: "{{ docker_services }}"
tags: docker,pizza
- name: Setup docker compose for privacy frontends (soleil+normal)
hosts: in,us,docker
vars:
non_pizza_docker_services:
- anonymousoverflow
- breezewiki
- gothub
@@ -54,7 +43,7 @@
tasks:
# community.docker does not support compose 2.0 right now.
# https://github.com/ansible-collections/community.docker/issues/216
- name: Update docker compose files and restart those with changes (Privacy Frontends but without Pizza1)
- name: Update docker compose files and restart those with changes
ansible.builtin.include_tasks: docker-tasks.yaml
with_items: "{{ non_pizza_docker_services }}"
tags: docker,soleil
with_items: "{{ docker_services }}"
tags: docker,pizza

36
privfrontends/templates/Caddyfile.j2
View File

@@ -61,11 +61,9 @@
import ./*.Caddyfile
{{ inventory_hostname }}.projectsegfau.lt {% if inventory_hostname == 'eu' %} pizza1.projectsegfau.lt {% endif %} {% if inventory_hostname == 'core' %} soleil.projectsegfau.lt {% endif %} {
{{ inventory_hostname }}.projectsegfau.lt {% if inventory_hostname == 'eu' %} pizza1.projectsegfau.lt {% endif %} {
redir https://wiki.projectsegfau.lt/index.php?title={{ wiki_page }}
}
# PIZZA + US + IN
{% if inventory_hostname == 'eu' or inventory_hostname == 'us' or inventory_hostname == 'in' %}
cdn.projectsegfau.lt cdn.{{ server_prefix }}.projectsegfau.lt {
encode zstd gzip
root * /var/cdn
@@ -117,11 +115,8 @@ teddit.{{ server_prefix }}.projectsegfau.lt teddit.projectsegfau.lt t.psf.lt t.{
import def
import torloc teddit
}
{% endif %}
# SOLEIL + US + IN
{% if inventory_hostname == 'core' or inventory_hostname == 'us' or inventory_hostname == 'in' %}
inv.{{ server_prefix }}.projectsegfau.lt inv.projectsegfau.lt invidious.projectsegfau.lt i.{{ server_prefix }}.psf.lt i.psf.lt {
reverse_proxy {% if inventory_hostname == 'core' %}192.168.5.2{% endif %}:7573
reverse_proxy :7573
header {
# disable FLoC tracking
Permissions-Policy "accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), clipboard-read=(), display-capture=(), document-domain=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), screen-wake-lock=(), serial=(), usb=(), sync-xhr=(), xr-spatial-tracking=()";
@@ -148,17 +143,17 @@ inv.{{ server_prefix }}.projectsegfau.lt inv.projectsegfau.lt invidious.projects
{% endif %}
}
gothub.{{ server_prefix }}.projectsegfau.lt gothub.projectsegfau.lt gh.psf.lt gh.{{ server_prefix }}.psf.lt {
reverse_proxy {% if inventory_hostname == 'core' %}192.168.5.2{% endif %}:1024
reverse_proxy :1024
import def
import torloc gothub
}
overflow.{{ server_prefix }}.projectsegfau.lt overflow.projectsegfau.lt o.psf.lt o.{{ server_prefix }}.psf.lt {
reverse_proxy {% if inventory_hostname == 'core' %}192.168.5.2{% endif %}:8694
reverse_proxy :8694
import def
import torloc overflow
}
rimgo.{{ server_prefix }}.projectsegfau.lt rimgo.projectsegfau.lt rg.psf.lt rg.{{ server_prefix }}.psf.lt {
reverse_proxy {% if inventory_hostname == 'core' %}192.168.5.2{% endif %}:9016
reverse_proxy :9016
import def
import torloc rimgo
}
@@ -166,38 +161,38 @@ bw.{{ server_prefix }}.projectsegfau.lt bw.projectsegfau.lt bw.psf.lt bw.{{ serv
import def
import torloc breezewiki
import i2ploc pjsfk4xvekoc7wx4pteevp3q2wy7jmzlem7rvl74nx33zkdr4vyq.b32.i2p
reverse_proxy {% if inventory_hostname == 'core' %}192.168.5.2{% endif %}:10416
reverse_proxy :10416
}
scribe.{{ server_prefix }}.projectsegfau.lt scribe.projectsegfau.lt sc.psf.lt sc.{{ server_prefix }}.psf.lt {
import def
import torloc scribe
import i2ploc pjsflkkkcn33ahmzmpyq6idy2knkzh4atp7zaetqfsnenpyori6a.b32.i2p
reverse_proxy {% if inventory_hostname == 'core' %}192.168.5.2{% endif %}:8006
reverse_proxy :8006
}
translate.{{ server_prefix }}.projectsegfau.lt translate.projectsegfau.lt tl.psf.lt tl.{{ server_prefix }}.psf.lt {
import def
reverse_proxy {% if inventory_hostname == 'core' %}192.168.5.2{% endif %}:5046
reverse_proxy :5046
import torloc translate
}
safetwitch.{{ server_prefix }}.projectsegfau.lt safetwitch.projectsegfau.lt tw.psf.lt tw.{{ server_prefix }}.psf.lt {
import def
reverse_proxy {% if inventory_hostname == 'core' %}192.168.5.2{% endif %}:5070
reverse_proxy :5070
import torloc safetwitch
}
api.safetwitch.{{ server_prefix }}.projectsegfau.lt {
reverse_proxy {% if inventory_hostname == 'core' %}192.168.5.2{% endif %}:5071
reverse_proxy :5071
}
hyperpipe.{{ server_prefix }}.projectsegfau.lt hyperpipe.projectsegfau.lt hp.psf.lt hp.{{ server_prefix }}.psf.lt {
import def
reverse_proxy {% if inventory_hostname == 'core' %}192.168.5.2{% endif %}:8843
reverse_proxy :8843
}
hyperpipebackend.{{ server_prefix }}.projectsegfau.lt {
reverse_proxy {% if inventory_hostname == 'core' %}192.168.5.2{% endif %}:3536
reverse_proxy :3536
}
search.{{ server_prefix }}.projectsegfau.lt search.projectsegfau.lt s.psf.lt s.{{ server_prefix }}.psf.lt {
import def
import torloc search
reverse_proxy {% if inventory_hostname == 'core' %}192.168.5.2{% endif %}:8081
reverse_proxy :8081
@api {
path /config
path /healthz
@@ -258,7 +253,7 @@ search.{{ server_prefix }}.projectsegfau.lt search.projectsegfau.lt s.psf.lt s.{
}
}
{% if server_prefix == 'eu' %}piped.projectsegfau.lt proxy.piped.projectsegfau.lt api.piped.projectsegfau.lt {%else%} piped.{{ server_prefix }}.projectsegfau.lt pipedproxy.{{ server_prefix }}.projectsegfau.lt pipedapi.{{ server_prefix }}.projectsegfau.lt {%endif%} {
reverse_proxy {% if inventory_hostname == 'core' %}192.168.5.2{% endif %}:6970
reverse_proxy :6970
header {
# disable FLoC tracking
Permissions-Policy "accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), clipboard-read=(), display-capture=(), document-domain=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), screen-wake-lock=(), serial=(), usb=(), sync-xhr=(), xr-spatial-tracking=()";
@@ -283,7 +278,7 @@ search.{{ server_prefix }}.projectsegfau.lt search.projectsegfau.lt s.psf.lt s.{
{% endif %}
}
pi.{{ server_prefix }}.psf.lt pi.psf.lt {
reverse_proxy {% if inventory_hostname == 'core' %}192.168.5.2{% endif %}:6970 {
reverse_proxy :6970 {
header_up Host "{% if server_prefix == 'eu' %}piped.projectsegfau.lt{%else%}piped.{{ server_prefix }}.projectsegfau.lt{%endif%}"
}
header {
@@ -306,4 +301,3 @@ pi.{{ server_prefix }}.psf.lt pi.psf.lt {
}
respond @badbots "Access to this route denied" 403
}
{% endif %}

99
privfrontends/templates/core/internal.Caddyfile
View File

@@ -1,99 +0,0 @@
# ---Internal Caddyfile---
# Authentik
sekuritee.projectsegfau.lt {
reverse_proxy https://192.168.5.2:7443 {
transport http {
tls_insecure_skip_verify
}
header_up X-Real-IP {remote_host}
}
import def
}
# MailU
mail.projectsegfau.lt {
import def
reverse_proxy 192.168.5.5:8082
}
# Plausible
analytics.projectsegfau.lt {
reverse_proxy 192.168.5.2:8001
import def
}
# Website dev
web.dev.projectsegfau.lt {
reverse_proxy 192.168.5.2:1339
import def
}
blog.projectsegfau.lt {
reverse_proxy 192.168.5.2:2368 {
header_up X-Forwarded-Proto https
header_up X-Real-IP {remote_host}
}
import def
}
# Midou PersoVM
matrix.midou.dev {
reverse_proxy /_matrix/* 192.168.5.6:8008
import def
}
file.midou.dev {
reverse_proxy 192.168.5.6:8080
import def
}
c.midou.dev {
reverse_proxy 192.168.5.6:8978
import def
}
rss.midou.dev {
reverse_proxy 192.168.5.6:3002
import def
}
sub.midou.dev {
reverse_proxy 192.168.5.6:8480
import def
}
qb.midou.dev {
reverse_proxy 192.168.5.6:8182
import def
}
slsk.midou.dev {
reverse_proxy 192.168.5.6:8283
import def
}
# Headscale (tailscale control server)
hs.projectsegfau.lt {
reverse_proxy /web* https://192.168.5.5:9443 {
transport http {
tls_insecure_skip_verify
}
}
reverse_proxy * 192.168.5.5:8089
}
# Caddy daily build (for ansible)
cb.projectsegfau.lt {
root * /var/www/caddy-build
file_server browse
encode gzip
}
# GotHub
docs.gothub.app {
redir https://gothub.app/docs{uri}
}
# OLD URLs
http://mutahar.rocks, http://*.mutahar.rocks {
redir https://projectsegfau.lt
}

101
privfrontends/templates/core/apps.Caddyfile → privfrontends/templates/in/apps.Caddyfile
View File

@@ -7,7 +7,7 @@ social.projectsegfau.lt {
# this is explicitly IPv4 since Pleroma.Web.Endpoint binds on IPv4 only
# and `localhost.` resolves to [::0] on some systems: see issue #930
reverse_proxy 192.168.5.2:4011
reverse_proxy 192.168.1.5:4011
handle /media/* {
redir https://media.social.projectsegfau.lt{uri} permanent
@@ -23,7 +23,7 @@ social.projectsegfau.lt {
# And https://gleasonator.com/notice/AW3PsTi4WCWEUbN0uO
media.social.projectsegfau.lt {
handle /media/* {
reverse_proxy 192.168.5.2:4011 {
reverse_proxy 192.168.1.5:4011 {
transport http {
response_header_timeout 10s
read_timeout 15s
@@ -32,7 +32,7 @@ media.social.projectsegfau.lt {
}
handle /proxy/* {
reverse_proxy 192.168.5.2:4011 {
reverse_proxy 192.168.1.5:4011 {
transport http {
response_header_timeout 10s
read_timeout 15s
@@ -43,29 +43,29 @@ media.social.projectsegfau.lt {
# Cinny
cinny.projectsegfau.lt cy.psf.lt {
reverse_proxy 192.168.5.2:3069
reverse_proxy :3069
import def
}
# Website
projectsegfau.lt {
reverse_proxy 192.168.5.2:1337
reverse_proxy :1337
import def
reverse_proxy /_matrix/* 192.168.5.2:8449 {
reverse_proxy /_matrix/* 192.168.1.5:8449 {
header_up Host "matrix.projectsegfau.lt"
}
reverse_proxy /_matrix/client/* 192.168.5.2:81 {
reverse_proxy /_matrix/client/* 192.168.1.5:81 {
header_up Host "matrix.projectsegfau.lt"
}
reverse_proxy /_synapse/* 192.168.5.2:81 {
reverse_proxy /_synapse/* 192.168.1.5:81 {
header_up Host "matrix.projectsegfau.lt"
}
reverse_proxy /.well-known/acme-challenge/* 192.168.5.5:5380
reverse_proxy /converse 192.168.5.5:5280
reverse_proxy /converseemojis.js 192.168.5.5:5280
reverse_proxy /converse/* 192.168.5.5:5280
reverse_proxy /bosh 192.168.5.5:5280
reverse_proxy /ws 192.168.5.5:5280
reverse_proxy /.well-known/acme-challenge/* 192.168.1.5:5380
reverse_proxy /converse 192.168.1.5:5280
reverse_proxy /converseemojis.js 192.168.1.5:5280
reverse_proxy /converse/* 192.168.1.5:5280
reverse_proxy /bosh 192.168.1.5:5280
reverse_proxy /ws 192.168.1.5:5280
header /.well-known/matrix/* Content-Type application/json
header /.well-known/matrix/* Access-Control-Allow-Origin *
handle_path /.well-known/* {
@@ -79,18 +79,19 @@ projectsegfau.lt {
import torloc www
}
psf.lt {
reverse_proxy 192.168.5.2:1337
reverse_proxy :1337
import def
import torloc www
header /.well-known/matrix/* Content-Type application/json
header /.well-known/matrix/* Access-Control-Allow-Origin *
handle_path /.well-known/* {
root * /var/www/psf-well-known
file_server
}
import acmedns
header /.well-known/matrix/* Content-Type application/json
header /.well-known/matrix/* Access-Control-Allow-Origin *
handle_path /.well-known/* {
root * /var/www/psf-well-known
file_server
}
}
ssync.projectsegfau.lt {
reverse_proxy 192.168.5.2:3333
reverse_proxy 192.168.1.5:3333
import def
}
@@ -100,17 +101,17 @@ www.projectsegfau.lt www.psf.lt {
}
matrix.projectsegfau.lt {
reverse_proxy /_matrix/* 192.168.5.2:8449 {
reverse_proxy /_matrix/* 192.168.1.5:8449 {
header_up Host "matrix.projectsegfau.lt"
}
reverse_proxy /_matrix/client/* 192.168.5.2:81 {
reverse_proxy /_matrix/client/* 192.168.1.5:81 {
header_up Host "matrix.projectsegfau.lt"
}
reverse_proxy /_synapse/* 192.168.5.2:81 {
reverse_proxy /_synapse/* 192.168.1.5:81 {
header_up Host "matrix.projectsegfau.lt"
}
import def
#reverse_proxy /_synapse/client/* 192.168.5.2:81 {
#reverse_proxy /_synapse/client/* 192.168.1.5:81 {
# header_up Host "matrix.projectsegfau.lt"
#}
handle_path / {
@@ -118,21 +119,15 @@ matrix.projectsegfau.lt {
}
}
# Directus
cms.projectsegfau.lt {
reverse_proxy 192.168.5.2:9456
import def
}
# Element
chat.projectsegfau.lt el.psf.lt {
reverse_proxy 192.168.5.2:3070
reverse_proxy :3070
import def
}
# Gitea
git.projectsegfau.lt {
reverse_proxy 192.168.5.5:3444
reverse_proxy :3444
respond /metrics 403
import def
request_body {
@@ -144,7 +139,7 @@ git.projectsegfau.lt {
import torloc git
}
git.psf.lt {
reverse_proxy 192.168.5.5:3444 {
reverse_proxy :3444 {
header_up Host "git.projectsegfau.lt"
}
respond /metrics 403
@@ -159,7 +154,7 @@ git.psf.lt {
}
# HedgeDoc
doc.projectsegfau.lt {
reverse_proxy 192.168.5.2:2069 {
reverse_proxy :2069 {
header_up X-Real-IP {remote_host}
}
import def
@@ -167,30 +162,30 @@ doc.projectsegfau.lt {
# Hydrogen
h2.projectsegfau.lt, hydrogen.projectsegfau.lt, h2.psf.lt {
reverse_proxy 192.168.5.2:3071
reverse_proxy :3071
import def
}
# Jitsi
jitsi.projectsegfau.lt {
reverse_proxy 192.168.5.5:8000 {
reverse_proxy :8000 {
header_up X-Real-IP {remote_host}
}
}
# Excalidraw backend for jitsi
excalidraw.projectsegfau.lt {
reverse_proxy 192.168.5.5:8694
reverse_proxy :8694
}
# Maubot
mau.projectsegfau.lt {
reverse_proxy 192.168.5.2:29316
reverse_proxy :29316
import def
}
# MediaWiki
wiki.projectsegfau.lt w.psf.lt {
reverse_proxy 192.168.5.2:8000 {
reverse_proxy 10.0.3.39:80 {
header_up X-Real-IP {remote_host}
}
import def
@@ -200,18 +195,18 @@ wiki.projectsegfau.lt w.psf.lt {
# Vikunja
todo.projectsegfau.lt vi.psf.lt {
reverse_proxy 192.168.5.2:3456
reverse_proxy :3456
import def
import torloc todo
}
# Vaultwarden
pass.projectsegfau.lt vw.psf.lt {
reverse_proxy 192.168.5.2:6980 {
reverse_proxy :6980 {
header_up X-Real-IP {remote_host}
}
import def
reverse_proxy /notifications/hub 192.168.5.2:3012 {
reverse_proxy /notifications/hub :3012 {
header_up X-Real-IP {remote_host}
}
import torloc pass
@@ -219,10 +214,10 @@ pass.projectsegfau.lt vw.psf.lt {
# XMPP
xmpp.projectsegfau.lt, conference.projectsegfau.lt, proxy.projectsegfau.lt, pubsub.projectsegfau.lt, upload.projectsegfau.lt {
reverse_proxy 192.168.5.5:5280 {
reverse_proxy 192.168.1.5:5280 {
header_up X-Real-IP {remote_host}
}
reverse_proxy /.well-known/acme-challenge/* 192.168.5.5:5380
reverse_proxy /.well-known/acme-challenge/* 192.168.1.5:5380
@register {
path /new/
path /change_password/
@@ -247,16 +242,16 @@ xmpp.projectsegfau.lt, conference.projectsegfau.lt, proxy.projectsegfau.lt, pubs
}
xmpp-web.projectsegfau.lt, x.psf.lt {
import def
reverse_proxy 192.168.5.2:3072
reverse_proxy :3072
}
healthchecks.projectsegfau.lt, hc.psf.lt {
import def
reverse_proxy 192.168.5.2:8450
reverse_proxy :8450
import torloc healthchecks
}
# Pubthentik
auth.p.projectsegfau.lt {
reverse_proxy 192.168.5.2:7444 {
reverse_proxy :7444 {
transport http {
tls_insecure_skip_verify
}
@@ -266,17 +261,13 @@ auth.p.projectsegfau.lt {
}
# kbin
kbin.projectsegfau.lt, kb.psf.lt {
reverse_proxy 192.168.5.2:80 {
reverse_proxy 192.168.1.5:8014 {
header_up X-Real-IP {remote_host}
}
import def
}
libretranslate.projectsegfau.lt lt.psf.lt {
reverse_proxy 192.168.5.2:5005
import def
}
gothub.dev.projectsegfau.lt gh.dev.psf.lt {
reverse_proxy 192.168.5.2:1025
reverse_proxy :1025
import def
import torloc gothub.dev
}

95
privfrontends/templates/in/internal.Caddyfile Normal file
View File

@@ -0,0 +1,95 @@
# ---Internal Caddyfile---
# MailU
mail.projectsegfau.lt {
import def
reverse_proxy :8082
}
# Plausible
analytics.projectsegfau.lt {
reverse_proxy :8001
import def
}
# Website dev
web.dev.projectsegfau.lt {
reverse_proxy :1339
import def
}
blog.projectsegfau.lt {
reverse_proxy :2368 {
header_up X-Forwarded-Proto https
header_up X-Real-IP {remote_host}
}
import def
}
# Headscale (tailscale control server)
hs.projectsegfau.lt {
reverse_proxy /web* https://:9443 {
transport http {
tls_insecure_skip_verify
}
}
reverse_proxy * :8089
}
# Caddy daily build (for ansible)
cb.projectsegfau.lt {
root * /var/www/caddy-build
file_server browse
encode gzip
}
# GotHub
docs.gothub.app {
redir https://gothub.app/docs{uri}
}
# OLD URLs
http://mutahar.rocks, http://*.mutahar.rocks {
redir https://projectsegfau.lt
}
synapseadmin.vpn.projectsegfau.lt s.v.psf.lt {
import acmedns
reverse_proxy :8420
}
bitpuit.vpn.projectsegfau.lt b.v.psf.lt {
import acmedns
reverse_proxy https://192.168.1.2:8006 {
transport http {
tls_insecure_skip_verify
}
}
import def
}
bitpuit2.vpn.projectsegfau.lt b2.v.psf.lt {
import acmedns
reverse_proxy https://192.168.1.58:8006 {
transport http {
tls_insecure_skip_verify
}
}
import def
}
ansible.vpn.projectsegfau.lt a.v.psf.lt {
import acmedns
reverse_proxy :3527
}
grafana.vpn.projectsegfau.lt g.v.psf.lt {
import acmedns
reverse_proxy :3170
}
prometheus.vpn.projectsegfau.lt {
import acmedns
reverse_proxy :9090
}
rabbitmq.vpn.projectsegfau.lt rq.v.psf.lt {
import acmedns
reverse_proxy 192.168.1.5:15672
}

19
privfrontends/templates/in/misc.Caddyfile
View File

@@ -1,6 +1,3 @@
dd.psf.lt {
reverse_proxy :8008
}
# PERSONAL
https://m.in.projectsegfau.lt:8448 m.in.projectsegfau.lt {
import def
@@ -18,19 +15,3 @@ tnfiles.perso.in.projectsegfau.lt {
}
root * /zfspool/files/tn-sw
}
discourse.tildevarsh.in {
reverse_proxy https://192.168.1.21:443 {
transport http {
tls_insecure_skip_verify
}
header_up X-Real-IP {remote_host}
}
}
jf.perso.in.projectsegfau.lt {
reverse_proxy 192.168.1.20:8096
import def
}
nc.perso.in.projectsegfau.lt {
reverse_proxy 192.168.1.20:80
import def
}