From 7053b1f5afe65a8675b7ca4d4ec3cb96462bb638 Mon Sep 17 00:00:00 2001 From: Joseph Harry Date: Mon, 25 Nov 2024 16:24:48 -0600 Subject: [PATCH 01/21] :sparkle: Added support for discountbandit Signed-off-by: Joseph Harry --- discountbandit.subdomain.conf.sample | 47 ++++++++++++++++++++++++++++ discountbandit.subfolder.conf.sample | 36 +++++++++++++++++++++ 2 files changed, 83 insertions(+) create mode 100644 discountbandit.subdomain.conf.sample create mode 100644 discountbandit.subfolder.conf.sample diff --git a/discountbandit.subdomain.conf.sample b/discountbandit.subdomain.conf.sample new file mode 100644 index 000000000..0dd2c9438 --- /dev/null +++ b/discountbandit.subdomain.conf.sample @@ -0,0 +1,47 @@ +## Version 2024/11/25 +# make sure that your container is named +# make sure that your dns has a cname set for + +server { + listen 443 ssl http2; + listen [::]:443 ssl http2; + + server_name discountbandit.*; + + include /config/nginx/ssl.conf; + + client_max_body_size 0; + + # enable for ldap auth (requires ldap-location.conf in the location block) + #include /config/nginx/ldap-server.conf; + + # enable for Authelia (requires authelia-location.conf in the location block) + #include /config/nginx/authelia-server.conf; + + # enable for Authentik (requires authentik-location.conf in the location block) + #include /config/nginx/authentik-server.conf; + + location / { + # enable the next two lines for http auth + #auth_basic "Restricted"; + #auth_basic_user_file /config/nginx/.htpasswd; + + # enable for ldap auth (requires ldap-server.conf in the server block) + #include /config/nginx/ldap-location.conf; + + # enable for Authelia (requires authelia-server.conf in the server block) + #include /config/nginx/authelia-location.conf; + + # enable for Authentik (requires authentik-server.conf in the server block) + #include /config/nginx/authentik-location.conf; + + include /config/nginx/proxy.conf; + include /config/nginx/resolver.conf; + set $upstream_app discountbandit; + set $upstream_port 80; + set $upstream_proto http; + proxy_pass $upstream_proto://$upstream_app:$upstream_port; + + # REMOVE THIS LINE BEFORE SUBMITTING: Additional proxy settings such as headers go below this line, leave the blank line above. + } +} diff --git a/discountbandit.subfolder.conf.sample b/discountbandit.subfolder.conf.sample new file mode 100644 index 000000000..b06cca318 --- /dev/null +++ b/discountbandit.subfolder.conf.sample @@ -0,0 +1,36 @@ +## Version 2024/11/25 +# make sure that your container is named +# make sure that is set to work with the base url // + + +location /discountbandit { + return 301 $scheme://$host/discountbandit/; +} + +location ^~ /discountbandit/ { + # enable the next two lines for http auth + #auth_basic "Restricted"; + #auth_basic_user_file /config/nginx/.htpasswd; + + # enable for ldap auth (requires ldap-server.conf in the server block) + #include /config/nginx/ldap-location.conf; + + # enable for Authelia (requires authelia-server.conf in the server block) + #include /config/nginx/authelia-location.conf; + + # enable for Authentik (requires authentik-server.conf in the server block) + #include /config/nginx/authentik-location.conf; + + include /config/nginx/proxy.conf; + include /config/nginx/resolver.conf; + include /config/nginx/proxy.conf; + include /config/nginx/resolver.conf; + set $upstream_app discountbandit; + set $upstream_port 80; + set $upstream_proto http; + proxy_pass $upstream_proto://$upstream_app:$upstream_port; + + # REMOVE THIS LINE BEFORE SUBMITTING: Additional proxy settings such as headers go below this line, leave the blank line above. +} + + From 5c09aae9cef54db57280d2c50b9cfe7440eef5e6 Mon Sep 17 00:00:00 2001 From: Joseph Harry Date: Wed, 18 Dec 2024 11:13:53 -0600 Subject: [PATCH 02/21] :bug: Fixed comments in pull request Signed-off-by: Joseph Harry --- discountbandit.subdomain.conf.sample | 5 ++--- discountbandit.subfolder.conf.sample | 6 +++--- 2 files changed, 5 insertions(+), 6 deletions(-) diff --git a/discountbandit.subdomain.conf.sample b/discountbandit.subdomain.conf.sample index 0dd2c9438..4733a1b37 100644 --- a/discountbandit.subdomain.conf.sample +++ b/discountbandit.subdomain.conf.sample @@ -1,6 +1,6 @@ ## Version 2024/11/25 -# make sure that your container is named -# make sure that your dns has a cname set for +# make sure that your discountbandit container is named discountbandit +# make sure that your dns has a cname set for discountbandit server { listen 443 ssl http2; @@ -42,6 +42,5 @@ server { set $upstream_proto http; proxy_pass $upstream_proto://$upstream_app:$upstream_port; - # REMOVE THIS LINE BEFORE SUBMITTING: Additional proxy settings such as headers go below this line, leave the blank line above. } } diff --git a/discountbandit.subfolder.conf.sample b/discountbandit.subfolder.conf.sample index b06cca318..6de0d7931 100644 --- a/discountbandit.subfolder.conf.sample +++ b/discountbandit.subfolder.conf.sample @@ -1,6 +1,6 @@ ## Version 2024/11/25 -# make sure that your container is named -# make sure that is set to work with the base url // +# make sure that your discountbandit container is named discountbandit +# make sure that discountbandit is set to work with the base url /discountbandit/ location /discountbandit { @@ -30,7 +30,7 @@ location ^~ /discountbandit/ { set $upstream_proto http; proxy_pass $upstream_proto://$upstream_app:$upstream_port; - # REMOVE THIS LINE BEFORE SUBMITTING: Additional proxy settings such as headers go below this line, leave the blank line above. + } From f37c24c3ffd49d6f82b2f94021b444f671470167 Mon Sep 17 00:00:00 2001 From: Joseph Harry Date: Mon, 23 Dec 2024 15:49:11 -0600 Subject: [PATCH 03/21] :bug: Fix(duplicate): Removed duplicate config entries Signed-off-by: Joseph Harry --- discountbandit.subdomain.conf.sample | 1 - discountbandit.subfolder.conf.sample | 2 -- 2 files changed, 3 deletions(-) diff --git a/discountbandit.subdomain.conf.sample b/discountbandit.subdomain.conf.sample index 4733a1b37..25bf0548c 100644 --- a/discountbandit.subdomain.conf.sample +++ b/discountbandit.subdomain.conf.sample @@ -41,6 +41,5 @@ server { set $upstream_port 80; set $upstream_proto http; proxy_pass $upstream_proto://$upstream_app:$upstream_port; - } } diff --git a/discountbandit.subfolder.conf.sample b/discountbandit.subfolder.conf.sample index 6de0d7931..ffc445e7a 100644 --- a/discountbandit.subfolder.conf.sample +++ b/discountbandit.subfolder.conf.sample @@ -21,8 +21,6 @@ location ^~ /discountbandit/ { # enable for Authentik (requires authentik-server.conf in the server block) #include /config/nginx/authentik-location.conf; - include /config/nginx/proxy.conf; - include /config/nginx/resolver.conf; include /config/nginx/proxy.conf; include /config/nginx/resolver.conf; set $upstream_app discountbandit; From e687ccc8f2296f607e57b531e4eeb497e5e62180 Mon Sep 17 00:00:00 2001 From: Joseph Harry Date: Wed, 1 Jan 2025 16:22:41 -0600 Subject: [PATCH 04/21] :art: Cleaned up some formatting Signed-off-by: Joseph Harry --- discountbandit.subfolder.conf.sample | 2 -- 1 file changed, 2 deletions(-) diff --git a/discountbandit.subfolder.conf.sample b/discountbandit.subfolder.conf.sample index ffc445e7a..8dd4fb86a 100644 --- a/discountbandit.subfolder.conf.sample +++ b/discountbandit.subfolder.conf.sample @@ -27,8 +27,6 @@ location ^~ /discountbandit/ { set $upstream_port 80; set $upstream_proto http; proxy_pass $upstream_proto://$upstream_app:$upstream_port; - - } From 78770b99167028a4e6249e9a640e36eae1484c81 Mon Sep 17 00:00:00 2001 From: Joseph Harry Date: Mon, 25 Nov 2024 16:24:48 -0600 Subject: [PATCH 05/21] :sparkle: Added support for discountbandit Signed-off-by: Joseph Harry --- discountbandit.subdomain.conf.sample | 47 ++++++++++++++++++++++++++++ discountbandit.subfolder.conf.sample | 36 +++++++++++++++++++++ 2 files changed, 83 insertions(+) create mode 100644 discountbandit.subdomain.conf.sample create mode 100644 discountbandit.subfolder.conf.sample diff --git a/discountbandit.subdomain.conf.sample b/discountbandit.subdomain.conf.sample new file mode 100644 index 000000000..0dd2c9438 --- /dev/null +++ b/discountbandit.subdomain.conf.sample @@ -0,0 +1,47 @@ +## Version 2024/11/25 +# make sure that your container is named +# make sure that your dns has a cname set for + +server { + listen 443 ssl http2; + listen [::]:443 ssl http2; + + server_name discountbandit.*; + + include /config/nginx/ssl.conf; + + client_max_body_size 0; + + # enable for ldap auth (requires ldap-location.conf in the location block) + #include /config/nginx/ldap-server.conf; + + # enable for Authelia (requires authelia-location.conf in the location block) + #include /config/nginx/authelia-server.conf; + + # enable for Authentik (requires authentik-location.conf in the location block) + #include /config/nginx/authentik-server.conf; + + location / { + # enable the next two lines for http auth + #auth_basic "Restricted"; + #auth_basic_user_file /config/nginx/.htpasswd; + + # enable for ldap auth (requires ldap-server.conf in the server block) + #include /config/nginx/ldap-location.conf; + + # enable for Authelia (requires authelia-server.conf in the server block) + #include /config/nginx/authelia-location.conf; + + # enable for Authentik (requires authentik-server.conf in the server block) + #include /config/nginx/authentik-location.conf; + + include /config/nginx/proxy.conf; + include /config/nginx/resolver.conf; + set $upstream_app discountbandit; + set $upstream_port 80; + set $upstream_proto http; + proxy_pass $upstream_proto://$upstream_app:$upstream_port; + + # REMOVE THIS LINE BEFORE SUBMITTING: Additional proxy settings such as headers go below this line, leave the blank line above. + } +} diff --git a/discountbandit.subfolder.conf.sample b/discountbandit.subfolder.conf.sample new file mode 100644 index 000000000..b06cca318 --- /dev/null +++ b/discountbandit.subfolder.conf.sample @@ -0,0 +1,36 @@ +## Version 2024/11/25 +# make sure that your container is named +# make sure that is set to work with the base url // + + +location /discountbandit { + return 301 $scheme://$host/discountbandit/; +} + +location ^~ /discountbandit/ { + # enable the next two lines for http auth + #auth_basic "Restricted"; + #auth_basic_user_file /config/nginx/.htpasswd; + + # enable for ldap auth (requires ldap-server.conf in the server block) + #include /config/nginx/ldap-location.conf; + + # enable for Authelia (requires authelia-server.conf in the server block) + #include /config/nginx/authelia-location.conf; + + # enable for Authentik (requires authentik-server.conf in the server block) + #include /config/nginx/authentik-location.conf; + + include /config/nginx/proxy.conf; + include /config/nginx/resolver.conf; + include /config/nginx/proxy.conf; + include /config/nginx/resolver.conf; + set $upstream_app discountbandit; + set $upstream_port 80; + set $upstream_proto http; + proxy_pass $upstream_proto://$upstream_app:$upstream_port; + + # REMOVE THIS LINE BEFORE SUBMITTING: Additional proxy settings such as headers go below this line, leave the blank line above. +} + + From 215e489251124984d1e46b2990f2584d88d7b7ea Mon Sep 17 00:00:00 2001 From: Joseph Harry Date: Wed, 18 Dec 2024 11:13:53 -0600 Subject: [PATCH 06/21] :bug: Fixed comments in pull request Signed-off-by: Joseph Harry --- discountbandit.subdomain.conf.sample | 5 ++--- discountbandit.subfolder.conf.sample | 6 +++--- 2 files changed, 5 insertions(+), 6 deletions(-) diff --git a/discountbandit.subdomain.conf.sample b/discountbandit.subdomain.conf.sample index 0dd2c9438..4733a1b37 100644 --- a/discountbandit.subdomain.conf.sample +++ b/discountbandit.subdomain.conf.sample @@ -1,6 +1,6 @@ ## Version 2024/11/25 -# make sure that your container is named -# make sure that your dns has a cname set for +# make sure that your discountbandit container is named discountbandit +# make sure that your dns has a cname set for discountbandit server { listen 443 ssl http2; @@ -42,6 +42,5 @@ server { set $upstream_proto http; proxy_pass $upstream_proto://$upstream_app:$upstream_port; - # REMOVE THIS LINE BEFORE SUBMITTING: Additional proxy settings such as headers go below this line, leave the blank line above. } } diff --git a/discountbandit.subfolder.conf.sample b/discountbandit.subfolder.conf.sample index b06cca318..6de0d7931 100644 --- a/discountbandit.subfolder.conf.sample +++ b/discountbandit.subfolder.conf.sample @@ -1,6 +1,6 @@ ## Version 2024/11/25 -# make sure that your container is named -# make sure that is set to work with the base url // +# make sure that your discountbandit container is named discountbandit +# make sure that discountbandit is set to work with the base url /discountbandit/ location /discountbandit { @@ -30,7 +30,7 @@ location ^~ /discountbandit/ { set $upstream_proto http; proxy_pass $upstream_proto://$upstream_app:$upstream_port; - # REMOVE THIS LINE BEFORE SUBMITTING: Additional proxy settings such as headers go below this line, leave the blank line above. + } From 411b8625b87b07fc5430fa6eef3c31fd701f4a09 Mon Sep 17 00:00:00 2001 From: driz <40674481+drizuid@users.noreply.github.com> Date: Wed, 4 Dec 2024 10:08:46 -0500 Subject: [PATCH 07/21] update port and name --- castopod.subdomain.conf.sample | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/castopod.subdomain.conf.sample b/castopod.subdomain.conf.sample index 7c2042e12..ba9caeb8e 100644 --- a/castopod.subdomain.conf.sample +++ b/castopod.subdomain.conf.sample @@ -1,5 +1,5 @@ ## Version 2024/07/16 -# make sure that your castopod container is named castopod +# make sure that your castopod container is named castopod-app # make sure that your dns has a cname set for castopod server { @@ -37,8 +37,8 @@ server { include /config/nginx/proxy.conf; include /config/nginx/resolver.conf; - set $upstream_app castopod; - set $upstream_port 80; + set $upstream_app castopod-app; + set $upstream_port 8000; set $upstream_proto http; proxy_pass $upstream_proto://$upstream_app:$upstream_port; From 6bc210fc49ab463ba5314700e732f9d2c3ba33db Mon Sep 17 00:00:00 2001 From: driz <40674481+drizuid@users.noreply.github.com> Date: Wed, 4 Dec 2024 10:10:03 -0500 Subject: [PATCH 08/21] Update castopod.subdomain.conf.sample --- castopod.subdomain.conf.sample | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/castopod.subdomain.conf.sample b/castopod.subdomain.conf.sample index ba9caeb8e..a825be54b 100644 --- a/castopod.subdomain.conf.sample +++ b/castopod.subdomain.conf.sample @@ -1,4 +1,4 @@ -## Version 2024/07/16 +## Version 2024/12/04 # make sure that your castopod container is named castopod-app # make sure that your dns has a cname set for castopod From 99c5dc5d97ca75a7fbfddd122adc2ed77e00da4d Mon Sep 17 00:00:00 2001 From: Joseph Harry Date: Mon, 23 Dec 2024 15:49:11 -0600 Subject: [PATCH 09/21] :bug: Fix(duplicate): Removed duplicate config entries Signed-off-by: Joseph Harry --- discountbandit.subdomain.conf.sample | 1 - discountbandit.subfolder.conf.sample | 2 -- 2 files changed, 3 deletions(-) diff --git a/discountbandit.subdomain.conf.sample b/discountbandit.subdomain.conf.sample index 4733a1b37..25bf0548c 100644 --- a/discountbandit.subdomain.conf.sample +++ b/discountbandit.subdomain.conf.sample @@ -41,6 +41,5 @@ server { set $upstream_port 80; set $upstream_proto http; proxy_pass $upstream_proto://$upstream_app:$upstream_port; - } } diff --git a/discountbandit.subfolder.conf.sample b/discountbandit.subfolder.conf.sample index 6de0d7931..ffc445e7a 100644 --- a/discountbandit.subfolder.conf.sample +++ b/discountbandit.subfolder.conf.sample @@ -21,8 +21,6 @@ location ^~ /discountbandit/ { # enable for Authentik (requires authentik-server.conf in the server block) #include /config/nginx/authentik-location.conf; - include /config/nginx/proxy.conf; - include /config/nginx/resolver.conf; include /config/nginx/proxy.conf; include /config/nginx/resolver.conf; set $upstream_app discountbandit; From e385ad3a5dfc72deee74dcb4d04961ad88514f4d Mon Sep 17 00:00:00 2001 From: Doug Edey Date: Fri, 6 Dec 2024 08:34:36 -0500 Subject: [PATCH 10/21] Add kobo specific location matching for Calibre-web confs --- calibre-web.subdomain.conf.sample | 14 +++++++++++++- calibre-web.subfolder.conf.sample | 13 +++++++++++++ 2 files changed, 26 insertions(+), 1 deletion(-) diff --git a/calibre-web.subdomain.conf.sample b/calibre-web.subdomain.conf.sample index 934f353f7..a1c5f5963 100644 --- a/calibre-web.subdomain.conf.sample +++ b/calibre-web.subdomain.conf.sample @@ -1,4 +1,4 @@ -## Version 2024/07/16 +## Version 2024/12/06 # make sure that your calibre-web container is named calibre-web # make sure that your dns has a cname set for calibre-web @@ -61,4 +61,16 @@ server { proxy_pass $upstream_proto://$upstream_app:$upstream_port; proxy_set_header X-Scheme $scheme; } + + # Feed for Kobo + location /kobo/ { + include /config/nginx/proxy.conf; + include /config/nginx/resolver.conf; + set $upstream_app calibre-web; + set $upstream_port 8083; + set $upstream_proto http; + proxy_pass $upstream_proto://$upstream_app:$upstream_port; + proxy_set_header X-Scheme $scheme; + proxy_buffer_size 32k; + } } diff --git a/calibre-web.subfolder.conf.sample b/calibre-web.subfolder.conf.sample index e28a272e7..751ad2aeb 100644 --- a/calibre-web.subfolder.conf.sample +++ b/calibre-web.subfolder.conf.sample @@ -48,3 +48,16 @@ location ^~ /calibre-web/opds/ { proxy_set_header X-Scheme $scheme; proxy_set_header X-Script-Name /calibre-web; } + +# Feed for Kobo +location ^~ /calibre-web/kobo/ { + include /config/nginx/proxy.conf; + include /config/nginx/resolver.conf; + set $upstream_app calibre-web; + set $upstream_port 8083; + set $upstream_proto http; + proxy_pass $upstream_proto://$upstream_app:$upstream_port; + proxy_set_header X-Scheme $scheme; + proxy_set_header X-Script-Name /calibre-web; + proxy_buffer_size 32k; +} From efc21eabc1e751df7fe344975d28fa4b291d9a23 Mon Sep 17 00:00:00 2001 From: aptalca <541623+aptalca@users.noreply.github.com> Date: Thu, 19 Dec 2024 10:15:43 -0500 Subject: [PATCH 11/21] dnsdist: remove http2 --- dnsdist.subdomain.conf.sample | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/dnsdist.subdomain.conf.sample b/dnsdist.subdomain.conf.sample index b2befca71..b90bf0717 100644 --- a/dnsdist.subdomain.conf.sample +++ b/dnsdist.subdomain.conf.sample @@ -1,10 +1,10 @@ -## Version 2024/11/26 +## Version 2024/12/19 # make sure that your container is named dnsdist # make sure that your dns has a cname set for dnsdist server { - listen 443 ssl http2; - listen [::]:443 ssl http2; + listen 443 ssl; + listen [::]:443 ssl; server_name dnsdist.*; From 0a2c15a08eb74cb0130c8035516623ba8d595067 Mon Sep 17 00:00:00 2001 From: Joseph Harry Date: Wed, 1 Jan 2025 16:23:50 -0600 Subject: [PATCH 12/21] support kobo Signed-off-by: Joseph Harry --- calibre-web.subdomain.conf.sample | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/calibre-web.subdomain.conf.sample b/calibre-web.subdomain.conf.sample index a1c5f5963..cb7dac0cb 100644 --- a/calibre-web.subdomain.conf.sample +++ b/calibre-web.subdomain.conf.sample @@ -62,8 +62,14 @@ server { proxy_set_header X-Scheme $scheme; } +<<<<<<< HEAD # Feed for Kobo location /kobo/ { +======= + # For kobo e-reader sync support + # you will need to bypass ^/kobo.* in authentik or authelia if they are used. + location /kobo { +>>>>>>> 92248c0 (support kobo) include /config/nginx/proxy.conf; include /config/nginx/resolver.conf; set $upstream_app calibre-web; @@ -71,6 +77,12 @@ server { set $upstream_proto http; proxy_pass $upstream_proto://$upstream_app:$upstream_port; proxy_set_header X-Scheme $scheme; +<<<<<<< HEAD proxy_buffer_size 32k; +======= + proxy_buffers 4 256k; + proxy_busy_buffers_size 256k; + proxy_buffer_size 128k; +>>>>>>> 92248c0 (support kobo) } } From 43e4723b574a1e10274241d5851b80b1530e4679 Mon Sep 17 00:00:00 2001 From: driz <40674481+drizuid@users.noreply.github.com> Date: Sat, 21 Dec 2024 17:37:37 -0500 Subject: [PATCH 13/21] date --- calibre-web.subdomain.conf.sample | 88 ------------------------------- 1 file changed, 88 deletions(-) delete mode 100644 calibre-web.subdomain.conf.sample diff --git a/calibre-web.subdomain.conf.sample b/calibre-web.subdomain.conf.sample deleted file mode 100644 index cb7dac0cb..000000000 --- a/calibre-web.subdomain.conf.sample +++ /dev/null @@ -1,88 +0,0 @@ -## Version 2024/12/06 -# make sure that your calibre-web container is named calibre-web -# make sure that your dns has a cname set for calibre-web - -server { - listen 443 ssl; - listen [::]:443 ssl; - - server_name calibre-web.*; - - include /config/nginx/ssl.conf; - - client_max_body_size 0; - - # enable for ldap auth (requires ldap-location.conf in the location block) - #include /config/nginx/ldap-server.conf; - - # enable for Authelia (requires authelia-location.conf in the location block) - #include /config/nginx/authelia-server.conf; - - # enable for Authentik (requires authentik-location.conf in the location block) - #include /config/nginx/authentik-server.conf; - - location / { - # enable the next two lines for http auth - #auth_basic "Restricted"; - #auth_basic_user_file /config/nginx/.htpasswd; - - # enable for ldap auth (requires ldap-server.conf in the server block) - #include /config/nginx/ldap-location.conf; - - # enable for Authelia (requires authelia-server.conf in the server block) - #include /config/nginx/authelia-location.conf; - - # enable for Authentik (requires authentik-server.conf in the server block) - #include /config/nginx/authentik-location.conf; - # To use Authelia to log in to Calibre-Web, make sure "Reverse Proxy Login" is - # enabled, "Reverse Proxy Header Name" is set to Remote-User, and each Authelia - # user also has a corresponding user manually created in Calibre-Web. - - include /config/nginx/proxy.conf; - include /config/nginx/resolver.conf; - set $upstream_app calibre-web; - set $upstream_port 8083; - set $upstream_proto http; - proxy_pass $upstream_proto://$upstream_app:$upstream_port; - - proxy_set_header X-Scheme $scheme; - } - - # OPDS feed for eBook reader apps - # Even if you use Authelia, the OPDS feed requires a password to be set for - # the user directly in Calibre-Web, as eBook reader apps don't support - # form-based logins, only HTTP Basic auth. - location /opds/ { - include /config/nginx/proxy.conf; - include /config/nginx/resolver.conf; - set $upstream_app calibre-web; - set $upstream_port 8083; - set $upstream_proto http; - proxy_pass $upstream_proto://$upstream_app:$upstream_port; - proxy_set_header X-Scheme $scheme; - } - -<<<<<<< HEAD - # Feed for Kobo - location /kobo/ { -======= - # For kobo e-reader sync support - # you will need to bypass ^/kobo.* in authentik or authelia if they are used. - location /kobo { ->>>>>>> 92248c0 (support kobo) - include /config/nginx/proxy.conf; - include /config/nginx/resolver.conf; - set $upstream_app calibre-web; - set $upstream_port 8083; - set $upstream_proto http; - proxy_pass $upstream_proto://$upstream_app:$upstream_port; - proxy_set_header X-Scheme $scheme; -<<<<<<< HEAD - proxy_buffer_size 32k; -======= - proxy_buffers 4 256k; - proxy_busy_buffers_size 256k; - proxy_buffer_size 128k; ->>>>>>> 92248c0 (support kobo) - } -} From aa723dcc82dcc990da84b7990a1d13a2339e9cd4 Mon Sep 17 00:00:00 2001 From: driz <40674481+drizuid@users.noreply.github.com> Date: Sat, 21 Dec 2024 17:41:50 -0500 Subject: [PATCH 14/21] undo driz-mistake merge --- calibre-web.subdomain.conf.sample | 65 +++++++++++++++++++++++++++++++ 1 file changed, 65 insertions(+) create mode 100644 calibre-web.subdomain.conf.sample diff --git a/calibre-web.subdomain.conf.sample b/calibre-web.subdomain.conf.sample new file mode 100644 index 000000000..53904e83b --- /dev/null +++ b/calibre-web.subdomain.conf.sample @@ -0,0 +1,65 @@ +## Version 2024/12/21 +# make sure that your calibre-web container is named calibre-web +# make sure that your dns has a cname set for calibre-web + +server { + listen 443 ssl; + listen [::]:443 ssl; + + server_name calibre-web.*; + + include /config/nginx/ssl.conf; + + client_max_body_size 0; + + # enable for ldap auth (requires ldap-location.conf in the location block) + #include /config/nginx/ldap-server.conf; + + # enable for Authelia (requires authelia-location.conf in the location block) + #include /config/nginx/authelia-server.conf; + + # enable for Authentik (requires authentik-location.conf in the location block) + #include /config/nginx/authentik-server.conf; + + location / { + # enable the next two lines for http auth + #auth_basic "Restricted"; + #auth_basic_user_file /config/nginx/.htpasswd; + + # enable for ldap auth (requires ldap-server.conf in the server block) + #include /config/nginx/ldap-location.conf; + + # enable for Authelia (requires authelia-server.conf in the server block) + #include /config/nginx/authelia-location.conf; + + # enable for Authentik (requires authentik-server.conf in the server block) + #include /config/nginx/authentik-location.conf; + # To use Authelia to log in to Calibre-Web, make sure "Reverse Proxy Login" is + # enabled, "Reverse Proxy Header Name" is set to Remote-User, and each Authelia + # user also has a corresponding user manually created in Calibre-Web. + + include /config/nginx/proxy.conf; + include /config/nginx/resolver.conf; + set $upstream_app calibre-web; + set $upstream_port 8083; + set $upstream_proto http; + proxy_pass $upstream_proto://$upstream_app:$upstream_port; + + proxy_set_header X-Scheme $scheme; + } + + # OPDS feed for eBook reader apps + # Even if you use Authelia, the OPDS feed requires a password to be set for + # the user directly in Calibre-Web, as eBook reader apps don't support + # form-based logins, only HTTP Basic auth. + location /opds/ { + include /config/nginx/proxy.conf; + include /config/nginx/resolver.conf; + set $upstream_app calibre-web; + set $upstream_port 8083; + set $upstream_proto http; + proxy_pass $upstream_proto://$upstream_app:$upstream_port; + proxy_set_header X-Scheme $scheme; + } + +} From 9d359f7dfe6fe015c38c7b3179c584212701330e Mon Sep 17 00:00:00 2001 From: driz <40674481+drizuid@users.noreply.github.com> Date: Sat, 21 Dec 2024 17:50:20 -0500 Subject: [PATCH 15/21] undo driz mistake merge --- calibre-web.subdomain.conf.sample | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/calibre-web.subdomain.conf.sample b/calibre-web.subdomain.conf.sample index 53904e83b..c985652f9 100644 --- a/calibre-web.subdomain.conf.sample +++ b/calibre-web.subdomain.conf.sample @@ -1,4 +1,4 @@ -## Version 2024/12/21 +## Version 2024/07/16 # make sure that your calibre-web container is named calibre-web # make sure that your dns has a cname set for calibre-web From 1ae1fbd3097a004b155b16ec9a8269efbc823e3f Mon Sep 17 00:00:00 2001 From: Joel Gillman Date: Fri, 15 Nov 2024 17:42:03 -0600 Subject: [PATCH 16/21] Allow access to Baby Buddy API without auth --- babybuddy.subdomain.conf.sample | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/babybuddy.subdomain.conf.sample b/babybuddy.subdomain.conf.sample index d0aa27d22..4f7ee11d8 100644 --- a/babybuddy.subdomain.conf.sample +++ b/babybuddy.subdomain.conf.sample @@ -43,4 +43,14 @@ server { proxy_pass $upstream_proto://$upstream_app:$upstream_port; } + + location ~ ^/api/ { + include /config/nginx/proxy.conf; + include /config/nginx/resolver.conf; + set $upstream_app babybuddy; + set $upstream_port 8000; + set $upstream_proto http; + proxy_pass $upstream_proto://$upstream_app:$upstream_port; + + } } From c41f4e49ad7f607a39439a6de9adaeb87c7c757d Mon Sep 17 00:00:00 2001 From: Joel Gillman Date: Sun, 29 Dec 2024 12:00:35 -0600 Subject: [PATCH 17/21] Update date on babybuddy subdomain config --- babybuddy.subdomain.conf.sample | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/babybuddy.subdomain.conf.sample b/babybuddy.subdomain.conf.sample index 4f7ee11d8..af83363c7 100644 --- a/babybuddy.subdomain.conf.sample +++ b/babybuddy.subdomain.conf.sample @@ -1,4 +1,4 @@ -## Version 2024/07/16 +## Version 2024/12/29 # make sure that your babybuddy container is named babybuddy # make sure that your dns has a cname set for babybuddy From 2b6d327321dcfebfb1c6d6ed4ea31577025e68ed Mon Sep 17 00:00:00 2001 From: Bert Van den Abbeele Date: Sat, 26 Oct 2024 18:36:18 +0200 Subject: [PATCH 18/21] Create romm.subdomain.conf.sample create conf file --- romm.subdomain.conf.sample | 55 ++++++++++++++++++++++++++++++++++++++ 1 file changed, 55 insertions(+) create mode 100644 romm.subdomain.conf.sample diff --git a/romm.subdomain.conf.sample b/romm.subdomain.conf.sample new file mode 100644 index 000000000..06317e3a8 --- /dev/null +++ b/romm.subdomain.conf.sample @@ -0,0 +1,55 @@ +## Version 2024/10/26 +# make sure that your romM container is named romm +# make sure that your dns has a cname set for romm + +server { + listen 443 ssl; + listen [::]:443 ssl; + + server_name romm.*; + + include /config/nginx/ssl.conf; + + client_max_body_size 0; + + # enable for ldap auth (requires ldap-location.conf in the location block) + #include /config/nginx/ldap-server.conf; + + # enable for Authelia (requires authelia-location.conf in the location block) + #include /config/nginx/authelia-server.conf; + + # enable for Authentik (requires authentik-location.conf in the location block) + #include /config/nginx/authentik-server.conf; + + location / { + # enable the next two lines for http auth + #auth_basic "Restricted"; + #auth_basic_user_file /config/nginx/.htpasswd; + + # enable for ldap auth (requires ldap-server.conf in the server block) + #include /config/nginx/ldap-location.conf; + + # enable for Authelia (requires authelia-server.conf in the server block) + #include /config/nginx/authelia-location.conf; + + # enable for Authentik (requires authentik-server.conf in the server block) + #include /config/nginx/authentik-location.conf; + + include /config/nginx/proxy.conf; + include /config/nginx/resolver.conf; + set $upstream_app romm; + set $upstream_port 8080; + set $upstream_proto http; + proxy_pass $upstream_proto://$upstream_app:$upstream_port; + + # Hide version + server_tokens off; + + # Security headers + add_header X-Frame-Options "SAMEORIGIN" always; + add_header X-Content-Type-Options "nosniff" always; + add_header X-XSS-Protection "1; mode=block" always; + add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always; + add_header Referrer-Policy "no-referrer-when-downgrade" always; + } +} \ No newline at end of file From dc18f965664a1321a46b60d83c36b42cd08a2beb Mon Sep 17 00:00:00 2001 From: Bert Van den Abbeele Date: Wed, 27 Nov 2024 12:21:00 +0100 Subject: [PATCH 19/21] remove optional headers --- romm.subdomain.conf.sample | 9 --------- 1 file changed, 9 deletions(-) diff --git a/romm.subdomain.conf.sample b/romm.subdomain.conf.sample index 06317e3a8..07c34d48f 100644 --- a/romm.subdomain.conf.sample +++ b/romm.subdomain.conf.sample @@ -42,14 +42,5 @@ server { set $upstream_proto http; proxy_pass $upstream_proto://$upstream_app:$upstream_port; - # Hide version - server_tokens off; - - # Security headers - add_header X-Frame-Options "SAMEORIGIN" always; - add_header X-Content-Type-Options "nosniff" always; - add_header X-XSS-Protection "1; mode=block" always; - add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always; - add_header Referrer-Policy "no-referrer-when-downgrade" always; } } \ No newline at end of file From 12460ba8e5a8391bfe32bf638245bdf88fd85239 Mon Sep 17 00:00:00 2001 From: Joseph Harry Date: Wed, 1 Jan 2025 16:22:41 -0600 Subject: [PATCH 20/21] :art: Cleaned up some formatting Signed-off-by: Joseph Harry --- discountbandit.subfolder.conf.sample | 2 -- 1 file changed, 2 deletions(-) diff --git a/discountbandit.subfolder.conf.sample b/discountbandit.subfolder.conf.sample index ffc445e7a..8dd4fb86a 100644 --- a/discountbandit.subfolder.conf.sample +++ b/discountbandit.subfolder.conf.sample @@ -27,8 +27,6 @@ location ^~ /discountbandit/ { set $upstream_port 80; set $upstream_proto http; proxy_pass $upstream_proto://$upstream_app:$upstream_port; - - } From e2b2c6c31407572e610aabc51a6021a17a26cc1f Mon Sep 17 00:00:00 2001 From: Joseph Harry Date: Wed, 1 Jan 2025 16:31:18 -0600 Subject: [PATCH 21/21] :bug: fix(http2): Removed HTTP2 directives as requested Signed-off-by: Joseph Harry --- discountbandit.subdomain.conf.sample | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/discountbandit.subdomain.conf.sample b/discountbandit.subdomain.conf.sample index 25bf0548c..b2df7a668 100644 --- a/discountbandit.subdomain.conf.sample +++ b/discountbandit.subdomain.conf.sample @@ -3,8 +3,8 @@ # make sure that your dns has a cname set for discountbandit server { - listen 443 ssl http2; - listen [::]:443 ssl http2; + listen 443 ssl; + listen [::]:443 ssl; server_name discountbandit.*;