remove unused things

nginx/etc/nginx/conf.d/global.conf

@@ -0,0 +1,54 @@
+server {
+    listen 80;
+
+    location / { # lighttpd
+        proxy_pass http://host:80;
+        include /etc/nginx/conf/proxy.conf;
+    }
+    location /filebrowser {
+        proxy_pass http://host:8001;
+        include /etc/nginx/conf/proxy.conf;
+    }
+    location /seafile {
+        proxy_pass http://host:8000;
+        include /etc/nginx/conf/proxy.conf;
+    }
+    location /seafhttp {
+        rewrite ^/seafhttp(.*)$ $1 break;
+        proxy_pass http://host:8082;
+        client_max_body_size 0;
+    }
+    location /seafmedia {
+        rewrite ^/seafmedia(.*)$ $1 break;
+        root /host/var/www/seafile;
+    }
+}
+
+
+server { # homeassistant
+  listen 80;
+	server_name ha.herderin.veenboer.xyz;
+	location / {
+		proxy_pass http://host:8123;
+		include /etc/nginx/conf/proxy.conf;
+	}
+}
+
+server { # esphome
+	# listen 443 ssl;
+    listen 80;
+	server_name esp.herderin.veenboer.xyz;
+	location / {
+		proxy_pass http://host:6052;
+		include /etc/nginx/conf/proxy.conf;
+	}
+}
+
+server { # grafana
+  listen 80;
+	server_name grafana.herderin.veenboer.xyz;
+	location / {
+		proxy_pass http://host:3333;
+		include /etc/nginx/conf/proxy.conf;
+	}
+}

nginx/etc/nginx/conf/proxy.conf

@@ -0,0 +1,10 @@
+# Proxy
+proxy_redirect off;
+proxy_set_header Host $host;
+proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+proxy_set_header X-Forwarded-Ssl on;
+
+# Websocket
+proxy_http_version 1.1;
+proxy_set_header Upgrade $http_upgrade;
+proxy_set_header Connection $http_connection;

nginx/etc/nginx/conf/ssl.conf

@@ -0,0 +1,21 @@
+# Enable SSL
+ssl_certificate /host/etc/certs/certificate+intermediate.pem;
+ssl_certificate_key /host/etc/certs/key.pem;
+ssl_dhparam /host/etc/certs/dh.pem;
+
+# Increased security, from https://cipherli.st/
+ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
+ssl_prefer_server_ciphers on;
+ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH";
+ssl_ecdh_curve secp384r1;
+ssl_session_cache shared:SSL:10m;
+ssl_session_tickets off;
+ssl_stapling on;
+ssl_stapling_verify on;
+resolver_timeout 5s;
+# add_header Strict-Transport-Security "max-age=63072000; includeSubdomains; preload";
+add_header X-Frame-Options DENY;
+add_header X-Content-Type-Options nosniff;
+
+# Redirect HTTP trafic
+error_page 497 https://$host:$server_port$request_uri;