Setup question for many domains

[Tealk]

Hello everyone,

I've been looking at this project for a while and I really like it. But I'm not really sure about the setup. I have about 50 domains and it would make sense to put a large part of them behind anubis, but do I understand correctly that I then have to manage 50 configurations in anubis in addition to the nginx proxy and have one service per domain that has to run?

[Xe]

It depends on how your setup is done. Can you make a diagram of what it looks like?

[Tealk]

So this is how my infrastructure looks like, each VServer is a separate application and has its own domain which should be "protected", everything runs via an nginx proxy.

https://rollenspiel.monster/hardware_software/

[lewark]

Would this Nginx proxy configuration work for your case? This sandwiches Anubis in the middle of your setup. An initial reverse proxy stage handles SSL termination, then this HTTP traffic passes through Anubis, then the final reverse proxy stage routes filtered requests to individual applications.

https://anubis.techaro.lol/docs/admin/environments/nginx

This topic was also discussed here: #436

[Tealk]

Does anubis then pass this back to the nginx?

[lewark]

Yes, in the example the Nginx instance also listens on a socket file. It's through this separate socket that Anubis sends the filtered traffic back to Nginx.

Alternatively, a different option in the docs uses Nginx's auth_request feature to only redirect to Anubis when needed rather than proxying all traffic through it. However I'm less familiar with how this works and what the implications are when running other authenticated services. https://anubis.techaro.lol/docs/admin/configuration/subrequest-auth