nginx-reverse.md

default.conf

server {
    listen 443;
    server_name homelab.example.com;

    access_log /var/log/nginx/homelab.example.com.access.log;
    error_log /var/log/nginx/homelab.example.com.error.log;

    root /var/www/html;
    index index.html;

    include ssl.conf;

    location /couchpotato {
            proxy_pass http://internal.example.com:5050;
            include proxy.conf;
            proxy_redirect off;
    }
    location /sabnzbd {
            proxy_pass http://internal.example.com:8080;
            include proxy.conf;
    }
    location /sickrage {
            proxy_pass http://internal.example.com:8081;
            include proxy.conf;
    }
}

ssl.conf

ssl on;
ssl_certificate /etc/ssl/certs/homelab.example.com.crt;
ssl_certificate_key /etc/ssl/private/homelab.example.com.key;

proxy.conf

proxy_connect_timeout   59s;
proxy_send_timeout      600;
proxy_read_timeout      600;
proxy_buffer_size       64k;
proxy_buffers           16 32k;
proxy_pass_header       Set-Cookie;
proxy_hide_header       Vary;

proxy_busy_buffers_size         64k;
proxy_temp_file_write_size      64k;

proxy_set_header        Accept-Encoding         '';
proxy_ignore_headers    Cache-Control           Expires;
proxy_set_header        Referer                 $http_referer;
proxy_set_header        Host                    $host;
proxy_set_header        Cookie                  $http_cookie;
proxy_set_header        X-Real-IP               $remote_addr;
proxy_set_header        X-Forwarded-Host        $host;
proxy_set_header        X-Forwarded-Server      $host;
proxy_set_header        X-Forwarded-For         $proxy_add_x_forwarded_for;

proxy_set_header        X-Forwarded-Port        '443';
proxy_set_header        X-Forwarded-Ssl         on;
proxy_set_header        X-Forwarded-Proto       https;
proxy_set_header        Authorization           '';

proxy_redirect         http://homelab.example.com/ /;
proxy_redirect         https://homelab.example.com/ /;