dataset/seed/nginx-reverse-proxy/README.md

Table of Contents

• nginx-reverse-proxy
• Synopsis
• Example
• Basic variables
• General
• NGINX
• Variables for expert
• General
• NGINX
• Requirements services
• Mandatories
• Optionals
• Dependances
• Useful for services

Return to the list of application services.

nginx-reverse-proxy

Synopsis

Nginx as reverse proxy.

The reverse proxy provides access to internal services. These internal services are integrated automatically.

Example

Zone names are provided as examples. Think about adapting with the value of provider_zone in configuration file.

nginx-reverse-proxy:
  applicationservice: nginx-reverse-proxy
  provider_zone: reverseproxy
  zones_name:
    - localdns

Basic variables

General

NGINX

Parameter	Comments
general.nginx.nginx_default mandatory Type: domainname	Default reverse proxy domaine name. If a client access to reverse proxy with an unknown domain name, the connexion is redirect to this domain name. By default this variable is the first associated service to this reverse proxy. Default: calculated
general.nginx.nginx_certificates_provider mandatory Type: choice	Type of certificate autority signing external certificates. The certificate can be self-signed (therefore invalid by default for the client) or obtained via the Let's Encrypt service (generally valid for the client). Choices: - self-signed ← default - letsencrypt

Variables for expert

General

NGINX

Parameter	Comments
general.nginx.nginx_hash_bucket_size mandatory Type: choice	The bucket size for the server names hash tables. Choices: - 128 ← default - 64 - 32
general.nginx.nginx_post_max_size mandatory Type: number	The maximum allowed size of the client request body. This value is in Mb. Default: 32

Requirements services

Mandatories

• LocalDNS: DNS forwarder for local domain name.

Optionals

• Journald: Concentrate journal messages on one host.

Dependances

• nginx-common: Nginx common configuration.
• base-fedora-37: Base information of a Fedora 37.
  • base-fedora: Base information of a Fedora.
    • systemd: Systemd, a system and service manager.
      • base-machine: Base information for a machine.
        • base: Base of all application services.
        • dns-local: DNS client with access to local zones.
        • pki-tls: Autosign PKI or Let's encrypt support for TLS certificates.
      • journald: Journald.
      • resolved: Resolved.

Useful for services

• dovecot: Postfix and Dovecot as mail servers (IMAP and submission).
• forgejo: Forgejo, a community managed lightweight code hosting solution.
• gitea: Transitional package for Gitea to Forgejo.
• grafana: Grafana is an analytics and interactive visualization web application.
• lemonldap: LemonLDAP, a Web Single Sign On and Access Management.
• mailman: GNU Mailman, managing electronic mail discussion and e-newsletter lists.
• nextcloud: Nextcloud, Online collaboration platform.
• nginx-static: Nginx as static web site.
• odoo: Odoo, an ERP and CRM.
• peertube: Peertube, a federated (ActivityPub) video streaming platform.
• piwigo: Piwigo, a photo management software.
• roundcube: Roundcube, a webmail.
• speedtest-rs: Speedtest-rs, a very lightweight Speedtest.
• vaultwarden: Vaultwarden, a password manager.