diff --git a/backintime/config/config b/backintime/config/config deleted file mode 100755 index 1c10279..0000000 --- a/backintime/config/config +++ /dev/null @@ -1,114 +0,0 @@ -gnome.last_path=/ -gnome.main_window.height=588 -gnome.main_window.hpaned1=336 -gnome.main_window.hpaned2=227 -gnome.main_window.width=1025 -gnome.main_window.x=169 -gnome.main_window.y=97 -gnome.show_hidden_files=false -profile1.name=OS -profile1.snapshots.automatic_backup_day=1 -profile1.snapshots.automatic_backup_mode=30 -profile1.snapshots.automatic_backup_time=1400 -profile1.snapshots.automatic_backup_weekday=7 -profile1.snapshots.backup_on_restore.enabled=true -profile1.snapshots.check_for_changes=true -profile1.snapshots.continue_on_errors=true -profile1.snapshots.copy_links=false -profile1.snapshots.copy_unsafe_links=false -profile1.snapshots.cron.ionice=true -profile1.snapshots.cron.nice=true -profile1.snapshots.dont_remove_named_snapshots=true -profile1.snapshots.exclude.1.value=.gvfs -profile1.snapshots.exclude.10.value=/proc -profile1.snapshots.exclude.11.value=/sys -profile1.snapshots.exclude.12.value=/dev -profile1.snapshots.exclude.13.value=/media -profile1.snapshots.exclude.14.value=/tmp -profile1.snapshots.exclude.15.value=/run -profile1.snapshots.exclude.16.value=/mnt -profile1.snapshots.exclude.2.value=.cache* -profile1.snapshots.exclude.3.value=[Cc]ache* -profile1.snapshots.exclude.4.value=.thumbnails* -profile1.snapshots.exclude.5.value=[Tt]rash* -profile1.snapshots.exclude.6.value=*.backup* -profile1.snapshots.exclude.7.value=*~ -profile1.snapshots.exclude.8.value=/home/user/Ubuntu One -profile1.snapshots.exclude.9.value=.dropbox* -profile1.snapshots.exclude.size=16 -profile1.snapshots.include.1.type=0 -profile1.snapshots.include.1.value=/host/etc -profile1.snapshots.include.2.type=0 -profile1.snapshots.include.2.value=/host/opt -profile1.snapshots.include.3.type=0 -profile1.snapshots.include.3.value=/host/root -profile1.snapshots.include.4.type=0 -profile1.snapshots.include.4.value=/host/home -profile1.snapshots.include.size=4 -profile1.snapshots.log_level=3 -profile1.snapshots.min_free_space.enabled=true -profile1.snapshots.min_free_space.unit=20 -profile1.snapshots.min_free_space.value=20 -profile1.snapshots.no_on_battery=false -profile1.snapshots.notify.enabled=true -profile1.snapshots.path=/host/backup -profile1.snapshots.path.auto=false -profile1.snapshots.path.host=. -profile1.snapshots.path.profile=os -profile1.snapshots.path.user=. -profile1.snapshots.preserve_acl=false -profile1.snapshots.preserve_xattr=false -profile1.snapshots.remove_old_snapshots.enabled=true -profile1.snapshots.remove_old_snapshots.unit=80 -profile1.snapshots.remove_old_snapshots.value=2 -profile1.snapshots.smart_remove=false -profile1.snapshots.smart_remove.keep_all=2 -profile1.snapshots.smart_remove.keep_one_per_day=7 -profile1.snapshots.smart_remove.keep_one_per_month=24 -profile1.snapshots.smart_remove.keep_one_per_week=4 -profile1.snapshots.use_checksum=false -profile1.snapshots.user_backup.ionice=false -profile2.name=Docker -profile2.snapshots.automatic_backup_day=1 -profile2.snapshots.automatic_backup_mode=20 -profile2.snapshots.automatic_backup_time=1200 -profile2.snapshots.automatic_backup_weekday=7 -profile2.snapshots.backup_on_restore.enabled=true -profile2.snapshots.check_for_changes=true -profile2.snapshots.continue_on_errors=true -profile2.snapshots.copy_links=false -profile2.snapshots.copy_unsafe_links=false -profile2.snapshots.cron.ionice=true -profile2.snapshots.cron.nice=true -profile2.snapshots.dont_remove_named_snapshots=true -profile2.snapshots.include.1.type=0 -profile2.snapshots.include.1.value=/host/docker -profile2.snapshots.include.size=1 -profile2.snapshots.include.1.type=0 -profile2.snapshots.exclude.1.value=.snapshot -profile2.snapshots.exclude.size=1 -profile2.snapshots.log_level=3 -profile2.snapshots.min_free_space.enabled=true -profile2.snapshots.min_free_space.unit=20 -profile2.snapshots.min_free_space.value=100 -profile2.snapshots.no_on_battery=false -profile2.snapshots.notify.enabled=true -profile2.snapshots.path=/host/backup -profile2.snapshots.path.auto=false -profile2.snapshots.path.host=. -profile2.snapshots.path.profile=docker -profile2.snapshots.path.user=. -profile2.snapshots.preserve_acl=false -profile2.snapshots.preserve_xattr=false -profile2.snapshots.remove_old_snapshots.enabled=true -profile2.snapshots.remove_old_snapshots.unit=80 -profile2.snapshots.remove_old_snapshots.value=3 -profile2.snapshots.smart_remove=true -profile2.snapshots.smart_remove.keep_all=2 -profile2.snapshots.smart_remove.keep_one_per_day=7 -profile2.snapshots.smart_remove.keep_one_per_month=24 -profile2.snapshots.smart_remove.keep_one_per_week=4 -profile2.snapshots.use_checksum=false -profile2.snapshots.user_backup.ionice=false -profiles=1:2 -profiles.version=1 diff --git a/nginx/etc/nginx/conf.d/global.conf b/nginx/etc/nginx/conf.d/global.conf new file mode 100644 index 0000000..07d3bbc --- /dev/null +++ b/nginx/etc/nginx/conf.d/global.conf @@ -0,0 +1,54 @@ +server { + listen 80; + + location / { # lighttpd + proxy_pass http://host:80; + include /etc/nginx/conf/proxy.conf; + } + location /filebrowser { + proxy_pass http://host:8001; + include /etc/nginx/conf/proxy.conf; + } + location /seafile { + proxy_pass http://host:8000; + include /etc/nginx/conf/proxy.conf; + } + location /seafhttp { + rewrite ^/seafhttp(.*)$ $1 break; + proxy_pass http://host:8082; + client_max_body_size 0; + } + location /seafmedia { + rewrite ^/seafmedia(.*)$ $1 break; + root /host/var/www/seafile; + } +} + + +server { # homeassistant + listen 80; + server_name ha.herderin.veenboer.xyz; + location / { + proxy_pass http://host:8123; + include /etc/nginx/conf/proxy.conf; + } +} + +server { # esphome + # listen 443 ssl; + listen 80; + server_name esp.herderin.veenboer.xyz; + location / { + proxy_pass http://host:6052; + include /etc/nginx/conf/proxy.conf; + } +} + +server { # grafana + listen 80; + server_name grafana.herderin.veenboer.xyz; + location / { + proxy_pass http://host:3333; + include /etc/nginx/conf/proxy.conf; + } +} diff --git a/nginx/etc/nginx/conf/proxy.conf b/nginx/etc/nginx/conf/proxy.conf new file mode 100644 index 0000000..78a948d --- /dev/null +++ b/nginx/etc/nginx/conf/proxy.conf @@ -0,0 +1,10 @@ +# Proxy +proxy_redirect off; +proxy_set_header Host $host; +proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; +proxy_set_header X-Forwarded-Ssl on; + +# Websocket +proxy_http_version 1.1; +proxy_set_header Upgrade $http_upgrade; +proxy_set_header Connection $http_connection; diff --git a/nginx/etc/nginx/conf/ssl.conf b/nginx/etc/nginx/conf/ssl.conf new file mode 100644 index 0000000..c927b70 --- /dev/null +++ b/nginx/etc/nginx/conf/ssl.conf @@ -0,0 +1,21 @@ +# Enable SSL +ssl_certificate /host/etc/certs/certificate+intermediate.pem; +ssl_certificate_key /host/etc/certs/key.pem; +ssl_dhparam /host/etc/certs/dh.pem; + +# Increased security, from https://cipherli.st/ +ssl_protocols TLSv1 TLSv1.1 TLSv1.2; +ssl_prefer_server_ciphers on; +ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH"; +ssl_ecdh_curve secp384r1; +ssl_session_cache shared:SSL:10m; +ssl_session_tickets off; +ssl_stapling on; +ssl_stapling_verify on; +resolver_timeout 5s; +# add_header Strict-Transport-Security "max-age=63072000; includeSubdomains; preload"; +add_header X-Frame-Options DENY; +add_header X-Content-Type-Options nosniff; + +# Redirect HTTP trafic +error_page 497 https://$host:$server_port$request_uri; \ No newline at end of file