diff options
Diffstat (limited to 'template/nginx')
| -rw-r--r-- | template/nginx/root.conf.template | 46 | ||||
| -rw-r--r-- | template/nginx/server.json | 5 |
2 files changed, 46 insertions, 5 deletions
diff --git a/template/nginx/root.conf.template b/template/nginx/root.conf.template index 8f65b40..17b558f 100644 --- a/template/nginx/root.conf.template +++ b/template/nginx/root.conf.template @@ -49,3 +49,49 @@ server { root /srv/acme; } } + +# For mail temporarily +# TODO: Make subpath supported in aio. +server { + listen 443 ssl http2; + listen [::]:443 ssl http2; + server_name mail.${CRUPEST_DOMAIN}; + + location /rcube { + proxy_http_version 1.1; + proxy_set_header Upgrade $http_upgrade; + proxy_set_header Connection $connection_upgrade; + proxy_set_header Host $host; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + proxy_set_header X-Real-IP $remote_addr; + proxy_pass http://roundcubemail:80; + } + + location /rspam { + proxy_http_version 1.1; + proxy_set_header Upgrade $http_upgrade; + proxy_set_header Connection $connection_upgrade; + proxy_set_header Host $host; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + proxy_set_header X-Real-IP $remote_addr; + proxy_pass http://mailserver:11334; + } + + client_max_body_size 5G; +} + +server { + listen 80; + listen [::]:80; + server_name ${CRUPEST_NGINX_SUBDOMAIN}.${CRUPEST_DOMAIN}; + + location / { + return 301 https://$host$request_uri; + } + + location /.well-known/acme-challenge { + root /srv/acme; + } +} diff --git a/template/nginx/server.json b/template/nginx/server.json index 5edf168..342adae 100644 --- a/template/nginx/server.json +++ b/template/nginx/server.json @@ -18,11 +18,6 @@ }, { "type": "reverse-proxy", - "subdomain": "mail", - "upstream": "roundcubemail:80" - }, - { - "type": "reverse-proxy", "subdomain": "2fa", "upstream": "2fauth:8000" }, |