dataset/seed/nginx-reverse-proxy

Table of Contents

• nginx-reverse-proxy
• Synopsis
• Basic variables
• General
• NGINX
• Variables
• General
• NGINX
• Variables for expert
• General
• NGINX
• Requirements services
• Mandatories
• Optionals
• Example
• Dependances
• Useful for services

Return to the list of application services.

nginx-reverse-proxy

Synopsis

Nginx as reverse proxy.

The reverse proxy allows access to the internal services. These internal services are integrated automatically.

Basic variables

General

NGINX

Parameter	Comments
general.nginx.nginx_certificates_provider mandatory Type: choice	Type of certificate autority signing external certificates. The certificate can be self-signed (therefore invalid by default for the client) or obtained via the Let's Encrypt service (generally valid for the client). Choices: - self-signed ← default - letsencrypt

Variables

General

NGINX

Parameter	Comments
general.nginx.nginx_default mandatory Type: domainname	Default reverse proxy domaine name. If a client access to reverse proxy with an unknown domain name, the connexion is redirect to this domain name. By default this variable is the first associated service to this reverse proxy. Default: calculated

Variables for expert

General

NGINX

Parameter	Comments
general.nginx.nginx_hash_bucket_size mandatory Type: choice	The bucket size for the server names hash tables. Choices: - 128 ← default - 64 - 32
general.nginx.nginx_post_max_size mandatory Type: number	The maximum allowed size of the client request body. This value is in Mb. Default: 32

Requirements services

Mandatories

• LocalDNS: nsd-local

Optionals

• Journald: vector

bold: provider is mandatory

Example

Zone names are provided as examples. Think about adapting with the value of provider_zone in configuration file.

nginx-reverse-proxy:
  applicationservice: nginx-reverse-proxy
  provider_zone: reverseproxy
  zones_name:
    - localdns

Dependances

• nginx-common
• base-fedora-37
  • base-fedora
    • systemd
      • base-machine
        • base
        • dns-local
        • pki-tls
      • journald
      • resolved

Useful for services

• dovecot: Postfix and Dovecot as mail servers (IMAP and submission).
• forgejo: Forgejo, a community managed lightweight code hosting solution.
• gitea: Transitional package for Gitea to Forgejo.
• grafana: Grafana is an analytics and interactive visualization web application.
• lemonldap: LemonLDAP, a Web Single Sign On and Access Management.
• mailman: GNU Mailman, managing electronic mail discussion and e-newsletter lists.
• nextcloud: Nextcloud, Online collaboration platform.
• nginx-static: Nginx as static web site.
• odoo: Odoo, an ERP and CRM.
• peertube: Peertube, a federated (ActivityPub) video streaming platform.
• piwigo: Piwigo, a photo management software.
• roundcube: Roundcube, a webmail.
• speedtest-rs: Speedtest-rs, a very lightweight Speedtest.
• vaultwarden: Vaultwarden, a password manager.