Compare commits

..

No commits in common. "c39e18a3773abd1cbf6a9e52fe3dd14419d1a3a2" and "47fd11195d9f42eb5cc52a245af7285600737544" have entirely different histories.

View file

@ -1,55 +1,53 @@
server { server {
listen 657 ssl; listen 564 ssl;
server_name kvm.nazuna.ovh; server_name kvm.nazuna.ovh;
# SSL configuration
ssl_certificate /root/certs/pve-sto/cert.pem; ssl_certificate /root/certs/pve-sto/cert.pem;
ssl_certificate_key /root/certs/pve-sto/key.pem; ssl_certificate_key /root/certs/pve-sto/key.pem;
location /pbs/ { # Main Proxmox VE location (e.g., Proxmox VE 1)
rewrite ^/pbs(/.*)$ $1 break; location /main/ {
proxy_pass https://192.168.2.180:8007/; rewrite ^/main/(.*) /$1 break;
proxy_pass https://192.168.2.180:8006/;
proxy_set_header Host $host; proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme; proxy_set_header X-Forwarded-Proto $scheme;
proxy_ssl_verify off;
proxy_set_header Accept-Encoding ""; proxy_set_header Upgrade $http_upgrade;
sub_filter_once off; proxy_set_header Connection 'upgrade';
sub_filter 'href="/' 'href="/pbs/'; proxy_read_timeout 3600;
sub_filter 'src="/' 'src="/pbs/';
sub_filter 'action="/' 'action="/pbs/';
sub_filter 'url: "/"' 'url: "/pbs/"';
} }
location /main/ { # Proxmox Backup Server location (e.g., PBS)
rewrite ^/main(/.*)$ $1 break; location /pbs/ {
rewrite ^/pbs/(.*) /$1 break;
proxy_pass https://192.168.2.179:8007/;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_ssl_verify off;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection 'upgrade';
proxy_read_timeout 3600;
}
# Proxmox VE location (e.g., Proxmox VE 2)
location /sto/ {
rewrite ^/sto/(.*) /$1 break;
proxy_pass https://192.168.2.178:8006/; proxy_pass https://192.168.2.178:8006/;
proxy_set_header Host $host; proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme; proxy_set_header X-Forwarded-Proto $scheme;
proxy_ssl_verify off;
proxy_set_header Accept-Encoding ""; proxy_set_header Upgrade $http_upgrade;
sub_filter_once off; proxy_set_header Connection 'upgrade';
sub_filter 'href="/' 'href="/main/'; proxy_read_timeout 3600;
sub_filter 'src="/' 'src="/main/';
sub_filter 'action="/' 'action="/main/';
sub_filter 'url: "/"' 'url: "/main/"';
} }
location /sto/ { # Optional: Redirect HTTP to HTTPS
rewrite ^/sto(/.*)$ $1 break; error_page 497 https://$host$request_uri;
proxy_pass https://192.168.2.179:8006/;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header Accept-Encoding "";
sub_filter_once off;
sub_filter 'href="/' 'href="/sto/';
sub_filter 'src="/' 'src="/sto/';
sub_filter 'action="/' 'action="/sto/';
sub_filter 'url: "/"' 'url: "/sto/"';
}
} }