This commit is contained in:
Gabriel Peron 2025-03-03 21:30:08 +01:00
parent 47fd11195d
commit 9da73c4fee

View file

@ -1,53 +1,52 @@
server { server {
listen 564 ssl; listen 657 ssl;
server_name kvm.nazuna.ovh; server_name your-domain.com;
# SSL configuration ssl_certificate /etc/letsencrypt/live/your-domain.com/fullchain.pem;
ssl_certificate /root/certs/pve-sto/cert.pem; ssl_certificate_key /etc/letsencrypt/live/your-domain.com/privkey.pem;
ssl_certificate_key /root/certs/pve-sto/key.pem;
# Main Proxmox VE location (e.g., Proxmox VE 1)
location /main/ {
rewrite ^/main/(.*) /$1 break;
proxy_pass https://192.168.2.180:8006/;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_ssl_verify off;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection 'upgrade';
proxy_read_timeout 3600;
}
# Proxmox Backup Server location (e.g., PBS)
location /pbs/ { location /pbs/ {
rewrite ^/pbs/(.*) /$1 break; rewrite ^/pbs(/.*)$ $1 break;
proxy_pass https://192.168.2.179:8007/; proxy_pass https://192.168.2.180:8007/;
proxy_set_header Host $host; proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme; proxy_set_header X-Forwarded-Proto $scheme;
proxy_ssl_verify off; proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade; proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection 'upgrade'; proxy_set_header Connection "Upgrade";
proxy_read_timeout 3600; sub_filter_once off;
sub_filter 'href="/' 'href="/pbs/';
sub_filter 'src="/' 'src="/pbs/';
} }
# Proxmox VE location (e.g., Proxmox VE 2) location /main/ {
location /sto/ { rewrite ^/main(/.*)$ $1 break;
rewrite ^/sto/(.*) /$1 break;
proxy_pass https://192.168.2.178:8006/; proxy_pass https://192.168.2.178:8006/;
proxy_set_header Host $host; proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme; proxy_set_header X-Forwarded-Proto $scheme;
proxy_ssl_verify off; proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade; proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection 'upgrade'; proxy_set_header Connection "Upgrade";
proxy_read_timeout 3600; sub_filter_once off;
sub_filter 'href="/' 'href="/main/';
sub_filter 'src="/' 'src="/main/';
} }
# Optional: Redirect HTTP to HTTPS location /sto/ {
error_page 497 https://$host$request_uri; rewrite ^/sto(/.*)$ $1 break;
proxy_pass https://192.168.2.179:8006/;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "Upgrade";
sub_filter_once off;
sub_filter 'href="/' 'href="/sto/';
sub_filter 'src="/' 'src="/sto/';
}
} }