Huge role refactoring/cleanup. Other commits will propably follow. Because some bugs will exist. Still important for longrun and also for auto docs/help/slideshow generation

roles/webserver-proxy-core/templates/location/proxy_basic.conf.j2

@@ -0,0 +1,33 @@
+location {{location | default("/")}}
+{
+  {% if oauth2_proxy_enabled | default(false) | bool %}
+    {% include 'roles/web-app-oauth2-proxy/templates/following_directives.conf.j2'%}
+  {% endif %}
+
+  proxy_pass http://127.0.0.1:{{http_port}}{{location | default("/")}};
+
+  # headers
+  proxy_set_header Host $host;
+  proxy_set_header X-Real-IP $remote_addr;
+  proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+  proxy_set_header X-Forwarded-Proto $scheme;
+  proxy_set_header X-Forwarded-Port 443;
+  proxy_set_header Accept-Encoding "";
+
+  {% include 'roles/webserver-proxy-core/templates/headers/content_security_policy.conf.j2' %}
+
+  # WebSocket specific header
+  proxy_http_version 1.1;
+  proxy_set_header Upgrade $http_upgrade;
+  proxy_set_header Connection "upgrade";
+
+  # deactivate buffering
+  proxy_buffering off;
+  proxy_request_buffering off;
+
+  # timeouts
+  proxy_connect_timeout       1s;
+  proxy_send_timeout          900s;
+  proxy_read_timeout          900s;
+  send_timeout                900s;
+}

roles/webserver-proxy-core/templates/location/proxy_cache.conf.j2

@@ -0,0 +1,12 @@
+location ~* \.(jpg|jpeg|png|gif|webp|ico|svg)$ {
+    # Cache in browser
+    expires 30d;
+    add_header Cache-Control "public, max-age=2592000, immutable";
+
+    # Cache on reverse proxy side
+    proxy_pass http://127.0.0.1:{{http_port}};
+    proxy_cache imgcache;
+    proxy_cache_valid 200 302 60m;
+    proxy_cache_valid 404 1m;
+    add_header X-Proxy-Cache $upstream_cache_status;
+}