Nginx Reverse Proxy from WAN>LAN Wireguard Site2Site.md

Create NGINX Reverse Proxy from WAN>LAN over Wireguard Site2Site

• Create Ubuntu 22.04 Cloud Server (WAN) where Wireguard Site2Site is running
  • For setting up Site2Site, see this: https://gist.github.com/albertcard/ca65de5e7c6d8cb7beb2cabab97f909b
• I use Cloudflare for my Domain Nameserver Records
• Replace the following where necessary
• <publicdomain.example.com>
• <LAN-hosted-website>:<port>

---

1. Install NGINX and enable

root@wan:~# apt install nginx nginx-common nginx-core
root@wan:~# systemctl start nginx
root@wan:~# systemctl enable nginx

2. Create config with reverse proxy to LAN-hosted-website

root@wan:~# vi /etc/nginx/sites-enabled/mywebsite
map $http_upgrade $connection_upgrade {
    default upgrade;
    ''      close;
}

server {
    server_name <publicdomain.example.com>;
    access_log /var/log/nginx/$host;

    location / {
	    proxy_pass http://<LAN-hosted-website>:<port>;
	    proxy_set_header X-Real-IP $remote_addr;
	    proxy_set_header Host $host;
	    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_set_header X-Forwarded-Proto https;
	    #proxy_redirect off;
            proxy_redirect http:// https://;
            proxy_http_version 1.1;
            proxy_set_header Upgrade $http_upgrade;
            proxy_set_header Connection $connection_upgrade;
    }

    error_page 502 /50x.html;
    location = /50x.html {
	    root /usr/share/nginx/html;
    }
}

3. Restart nginx

root@wan:~# systemctl restart nginx

4. As long as you've configured the A Record for '<publicdomain.example.com>', wherever your Domain Registrar/Nameserver is, you should be able to open your browser to https://<publicdomain.example.com>