Infra Insert 02

This page was last edited on 1 February 2024, at 14:08.
Revision as of 14:08, 1 February 2024 by In-grid (talk | contribs)


Nginx Reverse Proxy Configuration


Add a nginx config file at "/etc/nginx/sites-available/<SERVERNAME>.conf". To do this use the commands:

$ cd /ect/nginx/

$ nano sites-available/<NETNAME>.conf

Ours looks like this:

$ cd /ect/nginx/

$ nano sites-available/systerserver.conf

Choosing your NGINX reverse proxy setup is very much up to you. You can create a simple one with just http, and a more secure and standard one with https redirect and certificate.

Simple http configuration:

server {
# listen to http on port 80
listen 80;
listen [::]:80;
# listen to url
server_name servpub.net;

# linking the client to the vpn subnet ip address of the pi
location / {
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For
$proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;

# replace this with the user vpn subnet ip address you set earlier
proxy_pass http://10.10.12.51;
proxy_read_timeout 90;
}

location / {
rewrite ^ https://$host$request_uri? permanent;
}
}

Fragment from Servpub Docs [see page 2]