Skip to content

Add tinyauth support for subdomain confs & QUIC listeners #772

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 5 commits into from
Jul 18, 2025
Merged

Add tinyauth support for subdomain confs & QUIC listeners #772

Show file tree
Hide file tree
Changes from 3 commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
c6a0144
Add tinyauth support for subdomain confs
thespad Jun 8, 2025
541d9ba
Merge branch 'master' into support-tinyauth
thespad Jun 16, 2025
95c9e12
Add quic support
thespad Jul 18, 2025
4f39ad2
Merge branch 'master' into support-tinyauth
thespad Jul 18, 2025
b5acd79
Add missing confs
thespad Jul 18, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 9 additions & 1 deletion _template.subdomain.conf.sample
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
## Version 2024/07/16
## Version 2025/07/18
# REMOVE THIS LINE BEFORE SUBMITTING: The structure of the file (all of the existing lines) should be kept as close as possible to this template.
# REMOVE THIS LINE BEFORE SUBMITTING: Look through this file for <tags> and replace them. Review other sample files to see how things are done.
# REMOVE THIS LINE BEFORE SUBMITTING: The comment lines at the top of the file (below this line) should explain any prerequisites for using the proxy such as DNS or app settings.
Expand All @@ -7,7 +7,9 @@

server {
listen 443 ssl;
# listen 443 quic;
listen [::]:443 ssl;
# listen [::]:443 quic;

server_name <container_name>.*;

Expand All @@ -24,6 +26,9 @@ server {
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;

# enable for Tinyauth (requires tinyauth-location.conf in the location block)
#include /config/nginx/tinyauth-server.conf;

location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
Expand All @@ -38,6 +43,9 @@ server {
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;

# enable for Tinyauth (requires tinyauth-server.conf in the server block)
#include /config/nginx/tinyauth-location.conf;

include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app <container_name>;
Expand Down
10 changes: 9 additions & 1 deletion actual-server.subdomain.conf.sample
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,10 +1,12 @@
## Version 2024/07/16
## Version 2025/07/18
# make sure that your actual-server container is named actual-server
# make sure that your dns has a cname set for actual-server

server {
listen 443 ssl;
# listen 443 quic;
listen [::]:443 ssl;
# listen [::]:443 quic;

server_name actual-server.*;

Expand All @@ -21,6 +23,9 @@ server {
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;

# enable for Tinyauth (requires tinyauth-location.conf in the location block)
#include /config/nginx/tinyauth-server.conf;

location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
Expand All @@ -35,6 +40,9 @@ server {
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;

# enable for Tinyauth (requires tinyauth-server.conf in the server block)
#include /config/nginx/tinyauth-location.conf;

include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app actual-server;
Expand Down
10 changes: 9 additions & 1 deletion adguard.subdomain.conf.sample
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,10 +1,12 @@
## Version 2024/07/16
## Version 2025/07/18
# make sure that your adguard container is named adguard
# make sure that your dns has a cname set for adguard

server {
listen 443 ssl;
# listen 443 quic;
listen [::]:443 ssl;
# listen [::]:443 quic;

server_name adguard.*;

Expand All @@ -21,6 +23,9 @@ server {
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;

# enable for Tinyauth (requires tinyauth-location.conf in the location block)
#include /config/nginx/tinyauth-server.conf;

location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
Expand All @@ -35,6 +40,9 @@ server {
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;

# enable for Tinyauth (requires tinyauth-server.conf in the server block)
#include /config/nginx/tinyauth-location.conf;

include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app adguard;
Expand Down
10 changes: 9 additions & 1 deletion adminer.subdomain.conf.sample
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,10 +1,12 @@
## Version 2024/07/16
## Version 2025/07/18
# make sure that your adminer container is named adminer
# make sure that your dns has a cname set for adminer

server {
listen 443 ssl;
# listen 443 quic;
listen [::]:443 ssl;
# listen [::]:443 quic;

server_name adminer.*;

Expand All @@ -21,6 +23,9 @@ server {
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;

# enable for Tinyauth (requires tinyauth-location.conf in the location block)
#include /config/nginx/tinyauth-server.conf;

location / {

# enable the next two lines for http auth
Expand All @@ -36,6 +41,9 @@ server {
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;

# enable for Tinyauth (requires tinyauth-server.conf in the server block)
#include /config/nginx/tinyauth-location.conf;

include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app adminer;
Expand Down
10 changes: 9 additions & 1 deletion adminmongo.subdomain.conf.sample
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,10 +1,12 @@
## Version 2024/07/16
## Version 2025/07/18
# make sure that your adminmongo container is named adminmongo
# make sure that your dns has a cname set for adminmongo

server {
listen 443 ssl;
# listen 443 quic;
listen [::]:443 ssl;
# listen [::]:443 quic;

server_name adminmongo.*;

Expand All @@ -21,6 +23,9 @@ server {
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;

# enable for Tinyauth (requires tinyauth-location.conf in the location block)
#include /config/nginx/tinyauth-server.conf;

location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
Expand All @@ -35,6 +40,9 @@ server {
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;

# enable for Tinyauth (requires tinyauth-server.conf in the server block)
#include /config/nginx/tinyauth-location.conf;

include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app adminmongo;
Expand Down
10 changes: 9 additions & 1 deletion airsonic.subdomain.conf.sample
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,11 +1,13 @@
## Version 2024/07/16
## Version 2025/07/18
# make sure that your airsonic container is named airsonic
# make sure that your dns has a cname set for airsonic
# add `server.use-forward-headers=true` to `/config/application.properties` to ensure logs contain real source IP

server {
listen 443 ssl;
# listen 443 quic;
listen [::]:443 ssl;
# listen [::]:443 quic;

server_name airsonic.*;

Expand All @@ -22,6 +24,9 @@ server {
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;

# enable for Tinyauth (requires tinyauth-location.conf in the location block)
#include /config/nginx/tinyauth-server.conf;

location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
Expand All @@ -36,6 +41,9 @@ server {
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;

# enable for Tinyauth (requires tinyauth-server.conf in the server block)
#include /config/nginx/tinyauth-location.conf;

include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app airsonic;
Expand Down
10 changes: 9 additions & 1 deletion apprise-api.subdomain.conf.sample
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,10 +1,12 @@
## Version 2024/07/16
## Version 2025/07/18
# make sure that your apprise-api container is named apprise-api
# make sure that your dns has a cname set for apprise-api

server {
listen 443 ssl;
# listen 443 quic;
listen [::]:443 ssl;
# listen [::]:443 quic;

server_name apprise-api.*;

Expand All @@ -21,6 +23,9 @@ server {
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;

# enable for Tinyauth (requires tinyauth-location.conf in the location block)
#include /config/nginx/tinyauth-server.conf;

location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
Expand All @@ -35,6 +40,9 @@ server {
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;

# enable for Tinyauth (requires tinyauth-server.conf in the server block)
#include /config/nginx/tinyauth-location.conf;

include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app apprise-api;
Expand Down
10 changes: 9 additions & 1 deletion archisteamfarm.subdomain.conf.sample
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,10 +1,12 @@
## Version 2024/07/16
## Version 2025/07/18
# make sure that your archisteamfarm container is named archisteamfarm
# make sure that your dns has a cname set for archisteamfarm

server {
listen 443 ssl;
# listen 443 quic;
listen [::]:443 ssl;
# listen [::]:443 quic;

server_name archisteamfarm.*;

Expand All @@ -21,6 +23,9 @@ server {
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;

# enable for Tinyauth (requires tinyauth-location.conf in the location block)
#include /config/nginx/tinyauth-server.conf;

location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
Expand All @@ -35,6 +40,9 @@ server {
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;

# enable for Tinyauth (requires tinyauth-server.conf in the server block)
#include /config/nginx/tinyauth-location.conf;

include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app archisteamfarm;
Expand Down
10 changes: 9 additions & 1 deletion aria2-with-webui.subdomain.conf.sample
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
## Version 2024/07/16
## Version 2025/07/18
# make sure that your aria2 container is named aria2-with-webui
# make sure that your dns has a cname set for aria2
#
Expand All @@ -8,7 +8,9 @@

server {
listen 443 ssl;
# listen 443 quic;
listen [::]:443 ssl;
# listen [::]:443 quic;

server_name aria2.*;

Expand All @@ -25,6 +27,9 @@ server {
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;

# enable for Tinyauth (requires tinyauth-location.conf in the location block)
#include /config/nginx/tinyauth-server.conf;

location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
Expand All @@ -39,6 +44,9 @@ server {
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;

# enable for Tinyauth (requires tinyauth-server.conf in the server block)
#include /config/nginx/tinyauth-location.conf;

include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app aria2-with-webui;
Expand Down
13 changes: 12 additions & 1 deletion asciinema.subdomain.conf.sample
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,10 +1,12 @@
## Version 2025/02/21
## Version 2025/07/18
# make sure that your asciinema container is named asciinema
# make sure that your dns has a cname set for asciinema

server {
listen 443 ssl;
# listen 443 quic;
listen [::]:443 ssl;
# listen [::]:443 quic;

server_name asciinema.*;

Expand All @@ -21,6 +23,9 @@ server {
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;

# enable for Tinyauth (requires tinyauth-location.conf in the location block)
#include /config/nginx/tinyauth-server.conf;

location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
Expand All @@ -35,6 +40,9 @@ server {
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;

# enable for Tinyauth (requires tinyauth-server.conf in the server block)
#include /config/nginx/tinyauth-location.conf;

include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app asciinema;
Expand All @@ -57,6 +65,9 @@ server {
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;

# enable for Tinyauth (requires tinyauth-server.conf in the server block)
#include /config/nginx/tinyauth-location.conf;

include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app asciinema;
Expand Down
10 changes: 9 additions & 1 deletion atuin.subdomain.conf.sample
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,10 +1,12 @@
## Version 2024/07/16
## Version 2025/07/18
# make sure that your atuin container is named atuin
# make sure that your dns has a cname set for atuin

server {
listen 443 ssl;
# listen 443 quic;
listen [::]:443 ssl;
# listen [::]:443 quic;

server_name atuin.*;

Expand All @@ -21,6 +23,9 @@ server {
# enable for Authentik (requires authentik-location.conf in the location block)
#include /config/nginx/authentik-server.conf;

# enable for Tinyauth (requires tinyauth-location.conf in the location block)
#include /config/nginx/tinyauth-server.conf;

location / {
# enable the next two lines for http auth
#auth_basic "Restricted";
Expand All @@ -35,6 +40,9 @@ server {
# enable for Authentik (requires authentik-server.conf in the server block)
#include /config/nginx/authentik-location.conf;

# enable for Tinyauth (requires tinyauth-server.conf in the server block)
#include /config/nginx/tinyauth-location.conf;

include /config/nginx/proxy.conf;
include /config/nginx/resolver.conf;
set $upstream_app atuin;
Expand Down
Loading