Initial backup import

root/docker/Webproxy/Data/nginx/auth/.htpasswd

@@ -0,0 +1,2 @@
+drawioUser:$2y$05$Ckt.CPSBzFPWkkRhCe3M7eYePnkPVfhfjDcjpw.1Knn7Amh0N.gxq
+

root/docker/Webproxy/Data/nginx/service.conf

@@ -0,0 +1,171 @@
+
+#/root/docker/Webproxy/Data/nginx/service.conf
+
+map $http_upgrade $connection_upgrade {
+  default upgrade;
+  ''      close;
+}
+
+server {
+  listen 80;
+  server_name service.focus-on-it.net;
+
+  location /.well-known/acme-challenge/ { root /var/www/certbot; }
+  location / { return 301 https://$host$request_uri; }
+}
+
+server {
+  listen 443 ssl;
+  server_name service.focus-on-it.net;
+
+  ssl_certificate     /etc/letsencrypt/live/service.focus-on-it.net/fullchain.pem;
+  ssl_certificate_key /etc/letsencrypt/live/service.focus-on-it.net/privkey.pem;
+
+  location / {
+    return 200 "service endpoint\n";
+  }
+}
+
+server {
+  listen 80;
+  server_name dokuwiki.focus-on-it.net;
+  location /.well-known/acme-challenge/ { root /var/www/certbot; }
+  location / { return 301 https://$host$request_uri; }
+}
+
+server {
+  listen 443 ssl;
+  server_name dokuwiki.focus-on-it.net;
+  resolver 127.0.0.11 valid=30s ipv6=off;
+  ssl_certificate     /etc/letsencrypt/live/service.focus-on-it.net/fullchain.pem;
+  ssl_certificate_key /etc/letsencrypt/live/service.focus-on-it.net/privkey.pem;
+
+  location / {
+    set $dokuwiki_upstream dokuwiki:8080;
+    proxy_pass http://$dokuwiki_upstream;
+    proxy_set_header Host $host;
+    proxy_set_header X-Real-IP $remote_addr;
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_set_header X-Forwarded-Proto $scheme;
+    proxy_set_header X-Forwarded-Port 443;
+  }
+}
+server {
+  listen 80;
+  server_name guacamole.focus-on-it.net;
+
+  location /.well-known/acme-challenge/ { root /var/www/certbot; }
+  location / { return 301 https://$host$request_uri; }
+}
+
+server {
+  listen 443 ssl;
+  server_name guacamole.focus-on-it.net;
+
+  ssl_certificate     /etc/letsencrypt/live/service.focus-on-it.net/fullchain.pem;
+  ssl_certificate_key /etc/letsencrypt/live/service.focus-on-it.net/privkey.pem;
+
+  # optional sinnvoll
+  client_max_body_size 50m;
+
+  # Guacamole läuft standardmäßig unter /guacamole/
+  location / {
+    return 302 /guacamole/;
+  }
+
+  location /guacamole/ {
+    proxy_pass http://guacamole:8080/guacamole/;
+    proxy_http_version 1.1;
+
+    proxy_set_header Host              $host;
+    proxy_set_header X-Real-IP         $remote_addr;
+    proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;
+    proxy_set_header X-Forwarded-Proto $scheme;
+    proxy_set_header X-Forwarded-Port  443;
+
+    # WebSocket für Guacamole Tunnel
+    proxy_set_header Upgrade           $http_upgrade;
+    proxy_set_header Connection        $connection_upgrade;
+
+    proxy_buffering off;
+  }
+}
+server {
+    listen 80;
+    server_name drawio.focus-on-it.net;
+
+    location /.well-known/acme-challenge/ {
+        root /var/www/certbot;
+    }
+
+    location / {
+        return 301 https://$host$request_uri;
+    }
+}
+
+server {
+    listen 443 ssl;
+    server_name drawio.focus-on-it.net;
+
+    ssl_certificate     /etc/letsencrypt/live/service.focus-on-it.net/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/service.focus-on-it.net/privkey.pem;
+
+    client_max_body_size 50m;
+
+    location / {
+	auth_basic "Restricted";
+        auth_basic_user_file /etc/nginx/auth/.htpasswd;    
+        proxy_pass http://drawio:8080;
+
+        proxy_http_version 1.1;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_set_header X-Forwarded-Port 443;
+
+        proxy_read_timeout 300;
+        proxy_send_timeout 300;
+    }
+}
+server {
+    listen 80;
+    server_name nextcloud.focus-on-it.net;
+
+    location /.well-known/acme-challenge/ {
+        root /var/www/certbot;
+    }
+
+    location / {
+        return 301 https://$host$request_uri;
+    }
+}
+
+server {
+    listen 443 ssl;
+    server_name nextcloud.focus-on-it.net;
+
+    resolver 127.0.0.11 valid=30s ipv6=off;
+
+    ssl_certificate     /etc/letsencrypt/live/service.focus-on-it.net/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/service.focus-on-it.net/privkey.pem;
+
+    client_max_body_size 10G;
+    proxy_read_timeout 3600;
+    proxy_send_timeout 3600;
+
+    location / {
+        set $nextcloud_upstream nextcloud-nginx:80;
+        proxy_pass http://$nextcloud_upstream;
+
+        proxy_http_version 1.1;
+        proxy_request_buffering off;
+
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto https;
+        proxy_set_header X-Forwarded-Host $host;
+        proxy_set_header X-Forwarded-Port 443;
+    }
+}