Reverse Proxy Config (local only "friendly url" for on-network access)

[moofur]

I need help getting an NGINX proxy-conf file created for DockFlare.

I'm currently in the process of implementing "split horizon" DNS (I think this is the proper term). I'm using Dockflare to create and manage tunnels for applications that need to be accessible from outside my network (e.g., Nextcloud and Immich), while using local DNS records to enable "friendly url" access for all of my internal applications as well.

Dockflare currently works just fine by accessing ip:port, but on the local network I want to be able to access it via https://dockflare.mydomain.com. No tunnel will be configured, this is just for local-only access.

I'm using NGINX in the SWAG container to handle reverse proxy stuff. All Dockflare tunnels point to (or will point to) the SWAG container for routing. For the stuff I've been able to set up so far, this is working fine.

I've gotten to the point where I'm trying to get Dockflare set up behind NGINX, and it's not working. I'll share a copy of my conf file below (based on the subdomain template provided in the proxy-conf collection in SWAG), but when I navigate to the URL I've specified I simply get the "Welcome to your SWAG instance" default page.

## Version 2025/07/18
## Created 2025-11-26

server {
    listen 443 ssl;
    server_name dockflare.mydomain.com;

    include /config/nginx/ssl.conf;

    client_max_body_size 0;

    location / {
        # Restrict access to local network only
        allow 10.0.0.0/8;
        allow 172.16.0.0/12;
        allow 192.168.0.0/16;
        allow 127.0.0.1;
        deny all;

        include /config/nginx/proxy.conf;
        include /config/nginx/resolver.conf;
        set $upstream_app dockflare;
        set $upstream_port 5000;
        set $upstream_proto http;
        proxy_pass $upstream_proto://$upstream_app:$upstream_port;
    }
}

1. Yes, I've confirmed that the dockflare container can see the swag container on a shared docker bridge network
2. Yes, I've confirmed that the swag container can see the dockflare container on a shared docker bridge network

[moofur]

ID10T error. I keep my active proxy-conf files in an active subdirectory and I'd forgotten to update the paths in the site-conf file. It works like a charm now.