--- gitea: none include_toc: true --- [Return to the list of application services.](../README.md) # nginx-reverse-proxy ## Synopsis [Nginx as reverse proxy.](https://nginx.org/) ## Basic variables ### General #### NGINX Paramétrage global de NGINX. | Parameter | Comments | |---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| | **[general.nginx.nginx_certificates_provider](dictionaries/25_nginx.xml)**
mandatory
**Type:** [`choice`](https://forge.cloud.silique.fr/risotto/rougail/src/branch/main/doc/variable/README.md#le-type-de-la-variable) | Autorité de certification signant le certificat des domaines extérieurs.
The certificate can be self-signed (therefore invalid by default for the client) or obtained via the Let's Encrypt service (generally valid for the client).
**Choices:**
- `self-signed` ← default
- `letsencrypt` | ## Variables ### General #### NGINX Paramétrage global de NGINX. | Parameter | Comments | |-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| | **[general.nginx.nginx_default](dictionaries/25_nginx.xml)**
mandatory
**Type:** [`domainname`](https://forge.cloud.silique.fr/risotto/rougail/src/branch/main/doc/variable/README.md#le-type-de-la-variable) | Nom de domaine du serveur mandataire inverse par défaut.
Si un client accède au serveur avec un nom de domaine non déclaré, le flux est redirigé vers ce domaine.
**Default:** *calculated* | ## Variables for expert ### General #### NGINX Paramétrage global de NGINX. | Parameter | Comments | |----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|-------------------------------------------------------------------------------------------------------| | **[general.nginx.nginx_hash_bucket_size](dictionaries/21_nginx.xml)**
mandatory
**Type:** [`choice`](https://forge.cloud.silique.fr/risotto/rougail/src/branch/main/doc/variable/README.md#le-type-de-la-variable) | Longueur maximum pour un nom de domaine.
**Choices:**
- `128` ← default
- `64`
- `32` | | **[general.nginx.nginx_post_max_size](dictionaries/21_nginx.xml)**
mandatory
**Type:** [`number`](https://forge.cloud.silique.fr/risotto/rougail/src/branch/main/doc/variable/README.md#le-type-de-la-variable) | Taille maximale des données reçues par la méthode POST (en Mo).
**Default:** 32 | ## Requirements services ### Mandatories - LocalDNS: [nsd-local](../nsd-local/README.md) ### Optionals - Journald: [vector](../vector/README.md) **bold**: provider is mandatory ## Example Zone names are provided as examples. Think about adapting with the value of provider_zone in configuration file. ``` nginx-reverse-proxy: applicationservice: nginx-reverse-proxy provider_zone: reverseproxy zones_name: - localdns ``` ## Dependances - [nginx-common](../nginx-common/README.md) - [base-fedora-37](../base-fedora-37/README.md) - [base-fedora](../base-fedora/README.md) - [systemd](../systemd/README.md) - [base-machine](../base-machine/README.md) - [base](../base/README.md) - [dns-local](../dns-local/README.md) - [pki-tls](../pki-tls/README.md) - [journald](../journald/README.md) - [resolved](../resolved/README.md) ## Useful for services - [dovecot](../dovecot/README.md): Postfix and Dovecot as mail servers (IMAP and submission). - [forgejo](../forgejo/README.md): Forgejo, a community managed lightweight code hosting solution. - [gitea](../gitea/README.md): Transitional package for Gitea to Forgejo. - [grafana](../grafana/README.md): Grafana is an analytics and interactive visualization web application. - [lemonldap](../lemonldap/README.md): LemonLDAP, a Web Single Sign On and Access Management. - [mailman](../mailman/README.md): GNU Mailman, managing electronic mail discussion and e-newsletter lists. - [nextcloud](../nextcloud/README.md): Nextcloud, Online collaboration platform. - [nginx-static](../nginx-static/README.md): Nginx as static web site. - [odoo](../odoo/README.md): Odoo, an ERP and CRM. - [peertube](../peertube/README.md): Peertube, a federated (ActivityPub) video streaming platform. - [piwigo](../piwigo/README.md): Piwigo, a photo management software. - [roundcube](../roundcube/README.md): Roundcube, a webmail. - [speedtest-rs](../speedtest-rs/README.md): Speedtest-rs, a very lightweight Speedtest. - [vaultwarden](../vaultwarden/README.md): Vaultwarden, a password manager.