User Tools

Site Tools


unraid:dockers:swag

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
unraid:dockers:swag [2023/03/27 19:10] – [stream] dirkunraid:dockers:swag [2023/11/25 11:32] (current) – [SWAG] dirk
Line 1: Line 1:
 ====== SWAG ======  ====== SWAG ======
-Secure Web Application Gateway is a rebirth of our letsencrypt docker image, a full fledged web server and reverse proxy that includes Nginx, Php7, Certbot (Let's Encrypt client) and Fail2ban. Before running this container, make sure that the url and subdomains are properly forwarded to this container's host. - Port 443 on the internet side of the router should be forwarded to this container's port 443. - If you need a dynamic dns provider, you can use the free provider duckdns.org where the url will be yoursubdomain.duckdns.org and the subdomains can be "www,ftp,cloud," or "wildcard" if using duckdns validation - The container detects changes to url and subdomains, revokes existing certs and generates new ones during start. - If you'd like to password protect your sites, you can use htpasswd. Run the following command on your host to generate the htpasswd file docker exec -it swag htpasswd -c /config/nginx/.htpasswd+Secure Web Application Gateway is a rebirth of the letsencrypt docker image, a full fledged web server and reverse proxy that includes Nginx, Php7, Certbot (Let's Encrypt client) and Fail2ban. Before running this container, make sure that the url and subdomains are properly forwarded to this container's host. - Port 443 on the internet side of the router should be forwarded to this container's port 443. - If you need a dynamic dns provider, you can use the free provider duckdns.org where the url will be yoursubdomain.duckdns.org and the subdomains can be "www,ftp,cloud," or "wildcard" if using duckdns validation - The container detects changes to url and subdomains, revokes existing certs and generates new ones during start. - If you'd like to password protect your sites, you can use htpasswd. Run the following command on your host to generate the htpasswd file docker exec -it swag htpasswd -c /config/nginx/.htpasswd
  
 ===== Version ===== ===== Version =====
Line 197: Line 197:
 } }
 </code> </code>
 +==== games.subdomain.conf ====
 +<code># Make sure that your dns has a cname set for games
 +
 +server {
 +    listen 443 ssl;
 +    listen [::]:443 ssl;
 +
 +    server_name games.*;
 +
 +    include /config/nginx/ssl.conf;
 +
 +    client_max_body_size 0;
 +
 +    #enable for ldap auth, fill in ldap details in ldap.conf
 +    #include /config/nginx/ldap.conf;
 +
 +    # enable for Authelia
 +    #include /config/nginx/authelia-server.conf;
 +
 +    location / {
 +        #enable the next two lines for http auth
 +        #auth_basic "Restricted";
 +        #auth_basic_user_file /config/nginx/.htpasswd;
 +
 +        #enable the next two lines for ldap auth
 +        #auth_request /auth;
 +        #error_page 401 =200 /ldaplogin;
 +
 +        # enable for Authelia
 +        #include /config/nginx/authelia-location.conf;
 +
 +        include /config/nginx/proxy.conf;
 +        resolver 127.0.0.11 valid=30s;
 +        set $upstream_app games;
 +        set $upstream_port 8080;
 +        set $upstream_proto http;
 +        proxy_pass $upstream_proto://$upstream_app:$upstream_port;
 +
 +    }
 +}</code>
 ==== home.subdomain.conf ==== ==== home.subdomain.conf ====
   * only works if hoobs is installed on a vm   * only works if hoobs is installed on a vm
Line 674: Line 714:
 } }
 </code> </code>
-==== www.subdomain.conf ====+==== www.subdomain.conf docker version ==== 
 +<code># Make sure that your dns has a cname set for www 
 + 
 +server { 
 +    listen 443 ssl; 
 +    listen [::]:443 ssl; 
 + 
 +    server_name www.*; 
 + 
 +    include /config/nginx/ssl.conf; 
 + 
 +    client_max_body_size 0; 
 + 
 +    #enable for ldap auth, fill in ldap details in ldap.conf 
 +    #include /config/nginx/ldap.conf; 
 + 
 +    # enable for Authelia 
 +    #include /config/nginx/authelia-server.conf; 
 + 
 +    location / { 
 +        #enable the next two lines for http auth 
 +        #auth_basic "Restricted"; 
 +        #auth_basic_user_file /config/nginx/.htpasswd; 
 + 
 +        #enable the next two lines for ldap auth 
 +        #auth_request /auth; 
 +        #error_page 401 =200 /ldaplogin; 
 + 
 +        # enable for Authelia 
 +        #include /config/nginx/authelia-location.conf; 
 + 
 +        include /config/nginx/proxy.conf; 
 +        resolver 127.0.0.11 valid=30s; 
 +        set $upstream_app website; 
 +        set $upstream_port 8080; 
 +        set $upstream_proto http; 
 +        proxy_pass $upstream_proto://$upstream_app:$upstream_port; 
 + 
 +    } 
 +
 +</code> 
 +==== www.subdomain.conf OLD version ====
 <code># make sure that your dns has a cname set for www <code># make sure that your dns has a cname set for www
  
unraid/dockers/swag.1679962243.txt.gz · Last modified: by dirk