magic_rb/cluster
1
0
Fork 0
mirror of https://git.sr.ht/~magic_rb/cluster synced 2024-11-22 08:04:20 +01:00
Code Issues Packages Projects Releases Wiki Activity

zigbee2mqtt and jellyfin fixes

Browse source 
Signed-off-by: main <magic_rb@redalder.org>
This commit is contained in:
main 2022-04-26 09:56:23 +02:00
parent 1c8ed3236a
commit bbdef7c94e
No known key found for this signature in database
GPG key ID: 08D5287CC5DDCA0E
1 changed files with 49 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

56
infrastructure/ingress/nomad.hcl
View file

@ -450,7 +450,30 @@ server {
client_max_body_size 100M; client_max_body_size 100M;
location /jellyfin { location /jellyfin/ {
# Proxy main Jellyfin traffic
# The / at the end is significant.
# https://www.acunetix.com/blog/articles/a-fresh-look-on-reverse-proxy-related-attacks/
proxy_pass http://jellyfin/jellyfin/;
proxy_pass_request_headers on;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Forwarded-Host $http_host;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $http_connection;
# Disable buffering when the nginx proxy gets very resource heavy upon streaming
proxy_buffering off;
}
location /syncthing/ { location /syncthing/ {
include /local/headers.conf; include /local/headers.conf;
@ -479,16 +502,16 @@ server {
proxy_pass http://home-assistant; proxy_pass http://home-assistant;
} }
location /zigbee2mqtt { location /zigbee2mqtt/ {
include /local/headers.conf; include /local/headers.conf;
rewrite /zigbee2mqtt/(.*) /$1 break; # rewrite /zigbee2mqtt/(.*) /$1 break;
proxy_http_version 1.1; proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade; proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade"; proxy_set_header Connection "upgrade";
proxy_pass http://zigbee2mqtt; proxy_pass http://zigbee2mqtt/;
} }
} }
@ -501,9 +524,28 @@ server {
client_max_body_size 100M; client_max_body_size 100M;
location /jellyfin { location /jellyfin/ {
include /local/headers.conf; # Proxy main Jellyfin traffic
proxy_pass http://jellyfin;
# The / at the end is significant.
# https://www.acunetix.com/blog/articles/a-fresh-look-on-reverse-proxy-related-attacks/
proxy_pass http://jellyfin/jellyfin/;
proxy_pass_request_headers on;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Forwarded-Host $http_host;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $http_connection;
# Disable buffering when the nginx proxy gets very resource heavy upon streaming
proxy_buffering off;
} }
} }
EOF EOF