desktop-ka0lmmj

.gitignore

@@ -0,0 +1 @@
+nginx-1.20.1

conf/includes/desktop-ka0lmmj.conf

@@ -1,6 +1,6 @@
 [req]
 default_bits       = 2048
-default_keyfile    = laundry.phares3757.redirectme.net.key
+default_keyfile    = desktop-ka0lmmj.key
 distinguished_name = req_distinguished_name
 req_extensions     = req_ext
 x509_extensions    = v3_ca
@@ -17,7 +17,7 @@ organizationName_default    = Phares
 organizationalUnitName      = organizationalunit
 organizationalUnitName_default = Development
 commonName                  = Common Name (e.g. server FQDN or YOUR name)
-commonName_default          = laundry.phares3757.redirectme.net
+commonName_default          = mike.desktop
 commonName_max              = 64
 
 [req_ext]
@@ -27,14 +27,11 @@ subjectAltName = @alt_names
 subjectAltName = @alt_names
 
 [alt_names]
-DNS.1   = laundry.phares3757.redirectme.net
-DNS.2   = dashkiosk.laundry.phares3757.redirectme.net
-DNS.3   = gogs.laundry.phares3757.redirectme.net
-DNS.4   = nextcloud.laundry.phares3757.redirectme.net
-DNS.5   = photoprism.laundry.phares3757.redirectme.net
-DNS.6   = pi-hole.laundry.phares3757.redirectme.net
-DNS.7   = syncthing.laundry.phares3757.redirectme.net
-DNS.8   = beelink.server
-DNS.9   = beelink
-DNS.10   = localhost
-DNS.11   = 127.0.0.1
+DNS.1   = chelsea.desktop
+DNS.1   = desktop-ka0lmmj
+DNS.2   = localhost
+DNS.3   = 127.0.0.1
+
+# https://webscoot.io/blog/create-self-signed-certificate-ubuntu-windows-nginx/
+# cd "C:\Program Files\Git\usr\bin"
+# openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout L:\Git\NGINX-Conf\conf\includes\desktop-ka0lmmj.key -out L:\Git\NGINX-Conf\conf\includes\desktop-ka0lmmj.crt -config L:\Git\NGINX-Conf\conf\includes\desktop-ka0lmmj.conf

conf/includes/desktop-ka0lmmj.crt

@@ -0,0 +1,23 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

conf/includes/desktop-ka0lmmj.key

@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----
+MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQClG3ncOfn5TWB8
+sRumOUbpiGUTZDdkZkw8inLDdi5HoEOIuCbniHefsBTSE+xDOJhFXkuiUeVDqRXF
+00DQIiJ6GY1URAaaStUNQ7T4Izu8ToOBPb61B0Q0msWTb4lFUsiDN2inRFYX6SJP
+7Eyfraa7KCxlgHZyagcGvWY+eHoNm2EXwfiCnf3tNPFPGmevlFk1wV0ovY4SSq4p
+/s6wYcovt8bKCrSTIInxi5g8LffSOyhwy2jcAQojOBNEfCmSbcWiNVxLV6C6Sw71
+iOffvKkMBigBFXv1PgzM8z5e9ZsWdVIxWEUuBPOhjfEfTXN6ooRUQjA2kfDvkG17
+1p7QaLTxAgMBAAECggEABvhPF4aMiJNVRYpJ/SVJmrH291+5jWfao8sh72GxsDUi
+KLdCcC+FAkUiCeDMrmVJG1OQ3JI5vBabHFHv2GF6hF5IBrTE9RY/4nqXXQrKuqcz
+Wr0/K9/5x4E5okDZAgfNvmlURgxm2IVPXSGf9fU0Fs5KOoI27dtPPt/3vR8joueZ
+EMur9yjnN91cxfH9jV73jbM5Q7sSCfKEr5MdxzyXtTz55dmZ77EcFWg4EZ/N6ZVB
+JWg3fU+bWk+L7eN1aR6Vd2ds5S+PTPs11CukuwZlPVv2vkNuHWSK84cNXZ6bx5Gs
+2S3GEowo7/Vaj7sEMVg68Yb2WgWyhbFohVV5RHAeyQKBgQDO5MP6iDL1KeFRWomF
+dSA9YrUeRF+XPjmjCaLan/adIzCN34eU28G5sixoQFm3tVwbAvojhZngJxF21Q5M
+mKRbqoDCVtVgkA5p/qWTRUHno0G0Gc5amB0I8oXlWuPZAz7lg6Td8XRxtmy+bi3H
+PbacgfqeWuCeHBJCUirLnphwSQKBgQDMS7MBf5g8UB4SLh6JwgWiD4PA3kxhoZjP
+P/odaotzktgDTG8Ki7PqvqTgoRoknkLcdwCZRcjfqqm6qhTU7gkpAvg5zfk8YQO4
+aysBWxJ7khZGnIIGvh9Cg4FJXLeJozUXKIB/zwU22lfNJG8VYNG9Hg9eOh3V9BT5
+pceTN5tvaQKBgQCiKD9Kj5GRAiAtiU6cIW8BbeoTLPfXLNgz5wuTWykJhFk7+WTk
+0VEHYJTZqQYorKbiLPUs/jvaqgRQJTEt6712cy60IybepkoF3aacxP2gth57MHbC
+HtMy/hLf7tsCbj7P2NxRcDwaHCcjImwS61XDWUS69PN0OQA+pvQP3+AOsQKBgFiN
+S2cP3nXuKEqrEPOXVQe8/9f+w07iU7EpwwkzIIUVFmq/m7YPfgn3XtI7InDS5JpZ
+ProxJHPGrtFJXcQ59WCAeAXeQPUp/AnY8gghaK6FUQCEYFv51uTmyYh6FtgjFSUX
+mjNMEa+IDtzNuRSkJeV6fSDTwhD2Po1DjXFDfi1ZAoGBAJUrphHp5z7IOe6yw0Ui
+PU8fsA33uaNFy5M97MCygNRt/7elizodVKLZfqyoXKJ1YvCkPax8P+T78OWq0sre
+Zv7dL1zKJlUnvw05Pu+/O0gTc/8yBNotuiU5dFIQd/yVEbFlOFGC9mcZBcMBdbkm
++kjLk2e0xy0iI6NZMLtix6B2
+-----END PRIVATE KEY-----

conf/nginx.conf

@@ -1,129 +1,22 @@
-server {
-    listen 80 default_server;
-    listen [::]:80 default_server;
-    root /var/www/html;
-    index index.html index.htm index.nginx-debian.html;
-    server_name _;
-    location / {
-        try_files $uri $uri/ =404;
-    }
+worker_processes 1;
+events {
+    worker_connections 1024;
 }
-server {
-    ssl_certificate 'laundry.phares3757.redirectme.net.crt';
-    ssl_certificate_key 'laundry.phares3757.redirectme.net.key';
-    listen 443 ssl http2;
-    ssl_protocols TLSv1.2 TLSv1.1 TLSv1;
-    listen [::]:443 ssl http2;
-    server_name laundry.phares3757.redirectme.net;
-    location / {
-        proxy_set_header        Host $host;
-        proxy_set_header        X-Real-IP $remote_addr;
-        proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
-        proxy_set_header        X-Forwarded-Proto $scheme;
-        proxy_pass              http://localhost:80/;
-        proxy_read_timeout      600s;
-        proxy_send_timeout      600s;
-    }
-}
-server {
-    ssl_certificate 'laundry.phares3757.redirectme.net.crt';
-    ssl_certificate_key 'laundry.phares3757.redirectme.net.key';
-    listen 443 ssl http2;
-    ssl_protocols TLSv1.2 TLSv1.1 TLSv1;
-    listen [::]:443 ssl http2;
-    server_name dashkiosk.laundry.phares3757.redirectme.net;
-    location / {
-        proxy_set_header        Host $host;
-        proxy_set_header        X-Real-IP $remote_addr;
-        proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
-        proxy_set_header        X-Forwarded-Proto $scheme;
-        proxy_pass              http://localhost:9400/;
-        proxy_read_timeout      600s;
-        proxy_send_timeout      600s;
-    }
-}
-server {
-    ssl_certificate 'laundry.phares3757.redirectme.net.crt';
-    ssl_certificate_key 'laundry.phares3757.redirectme.net.key';
-    listen 443 ssl http2;
-    ssl_protocols TLSv1.2 TLSv1.1 TLSv1;
-    listen [::]:443 ssl http2;
-    server_name gogs.laundry.phares3757.redirectme.net;
-    location / {
-        proxy_set_header        Host $host;
-        proxy_set_header        X-Real-IP $remote_addr;
-        proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
-        proxy_set_header        X-Forwarded-Proto $scheme;
-        proxy_pass              http://localhost:3000/;
-        proxy_read_timeout      600s;
-        proxy_send_timeout      600s;
-    }
-}
-server {
-    ssl_certificate 'laundry.phares3757.redirectme.net.crt';
-    ssl_certificate_key 'laundry.phares3757.redirectme.net.key';
-    listen 443 ssl http2;
-    ssl_protocols TLSv1.2 TLSv1.1 TLSv1;
-    listen [::]:443 ssl http2;
-    server_name nextcloud.laundry.phares3757.redirectme.net;
-    location / {
-        proxy_set_header        Host $host;
-        proxy_set_header        X-Real-IP $remote_addr;
-        proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
-        proxy_set_header        X-Forwarded-Proto $scheme;
-        proxy_pass              http://localhost:8081/;
-        proxy_read_timeout      600s;
-        proxy_send_timeout      600s;
-    }
-}
-server {
-    ssl_certificate 'laundry.phares3757.redirectme.net.crt';
-    ssl_certificate_key 'laundry.phares3757.redirectme.net.key';
-    listen 443 ssl http2;
-    ssl_protocols TLSv1.2 TLSv1.1 TLSv1;
-    listen [::]:443 ssl http2;
-    server_name photoprism.laundry.phares3757.redirectme.net;
-    location / {
-        proxy_set_header        Host $host;
-        proxy_set_header        X-Real-IP $remote_addr;
-        proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
-        proxy_set_header        X-Forwarded-Proto $scheme;
-        proxy_pass              http://localhost:2342/;
-        proxy_read_timeout      600s;
-        proxy_send_timeout      600s;
-    }
-}
-server {
-    ssl_certificate 'laundry.phares3757.redirectme.net.crt';
-    ssl_certificate_key 'laundry.phares3757.redirectme.net.key';
-    listen 443 ssl http2;
-    ssl_protocols TLSv1.2 TLSv1.1 TLSv1;
-    listen [::]:443 ssl http2;
-    server_name ~(pi-hole).laundry.phares3757.redirectme.net;
-    location / {
-        proxy_set_header        Host $host;
-        proxy_set_header        X-Real-IP $remote_addr;
-        proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
-        proxy_set_header        X-Forwarded-Proto $scheme;
-        proxy_pass              http://localhost:8005/;
-        proxy_read_timeout      600s;
-        proxy_send_timeout      600s;
-    }
-}
-server {
-    ssl_certificate 'laundry.phares3757.redirectme.net.crt';
-    ssl_certificate_key 'laundry.phares3757.redirectme.net.key';
-    listen 443 ssl http2;
-    ssl_protocols TLSv1.2 TLSv1.1 TLSv1;
-    listen [::]:443 ssl http2;
-    server_name syncthing.laundry.phares3757.redirectme.net;
-    location / {
-        proxy_set_header        Host $host;
-        proxy_set_header        X-Real-IP $remote_addr;
-        proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
-        proxy_set_header        X-Forwarded-Proto $scheme;
-        proxy_pass              http://localhost:8384/;
-        proxy_read_timeout      600s;
-        proxy_send_timeout      600s;
-    }
+http {
+  include "includes/mime.types";
+  default_type application/octet-stream;
+  sendfile on;
+  keepalive_timeout 65;
+  server {
+      listen 443 ssl http2;
+      listen [::]:443 ssl http2;
+      server_name localhost;
+      ssl_certificate "includes/desktop-ka0lmmj.crt";
+      ssl_certificate_key "includes/desktop-ka0lmmj.key";
+      ssl_protocols TLSv1.2 TLSv1.1 TLSv1;
+      # include "includes/html.conf";
+      location / { proxy_pass http://localhost:8384; }
+      error_page 500 502 503 504 /50x.html;
+      include "includes/html-error.conf";
+  }
 }