|
|
| (9 intermediate revisions by 2 users not shown) |
| Line 1: |
Line 1: |
| <!------------------------> | | <!------------------------> |
| <!-- do not remove this --> | | <!-- do not remove this --> |
| <div id="infra##" class="infra-insert"> | | <div id="Infra Insert 02" class="infra-insert"> |
| <!------------------------> | | <!------------------------> |
|
| |
|
| | | proxy_add_x_forwarded_for; </br> |
| '''Nginx Reverse Proxy Configuration'''
| | proxy_set_header X-Forwarded-Proto $scheme; |
| | |
| | |
| Add a nginx config file at "/etc/nginx/sites-available/<SERVERNAME>.conf". To do this use the commands:
| |
| | |
| '''$ cd /ect/nginx/
| |
| '''
| |
| | |
| '''$ nano sites-available/<NETNAME>.conf
| |
| '''
| |
| | |
| Ours looks like this:
| |
| | |
| '''$ cd /ect/nginx/
| |
| '''
| |
| | |
| '''$ nano sites-available/systerserver.conf
| |
| '''
| |
| | |
| Choosing your NGINX reverse proxy setup is very much up to you. You can create a simple one with just ''http'', and a more secure and standard one with ''https'' redirect and certificate.
| |
| | |
| Simple http configuration:
| |
| | |
| server { <br>
| |
| # listen to http on port 80 <br>
| |
| listen 80; <br>
| |
| listen [::]:80; <br>
| |
| # listen to url <br>
| |
| server_name servpub.net; <br>
| |
| | |
| # linking the client to the vpn subnet ip address of the pi <br>
| |
| location / {<br>
| |
| proxy_set_header Host $host;<br>
| |
| proxy_set_header X-Real-IP $remote_addr;<br>
| |
| proxy_set_header X-Forwarded-For<br>
| |
| $proxy_add_x_forwarded_for;<br>
| |
| proxy_set_header X-Forwarded-Proto $scheme;<br>
| |
| | |
| # replace this with the user vpn subnet ip address you set earlier <br>
| |
| proxy_pass http://10.10.12.51;<br>
| |
| proxy_read_timeout 90;<br>
| |
| }<br>
| |
|
| |
| location / {<br>
| |
| rewrite ^ https://$host$request_uri? permanent;<br>
| |
| }<br>
| |
| }
| |
| | |
| ''Fragment from Servpub Docs [see page 2]''
| |
|
| |
|
| <!------------------------> | | <!------------------------> |