mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2025-10-31 18:29:21 +00:00
Kevin Veen-Birkenbach
97af4990aa
- Rename sys-svc-webserver -> sys-svc-webserver-core - Rename sys-stk-front-pure -> sys-svc-webserver-https - Update includes, run_once flags, and docs across: * sys-ctl-mtn-cert-renew * sys-front-inj-* * sys-stk-front-proxy * sys-svc-certs * sys-svc-cln-domains * web-opt-rdr-* * web-svc-* - Remove redundant webserver include in web-opt-rdr-www - Fix documentation links Ref: ChatGPT conversation https://chatgpt.com/share/68d6cea2-3570-800f-acb3-c3277317f17b
32 lines
1.6 KiB
Markdown
32 lines
1.6 KiB
Markdown
# Nginx Docker Reverse Proxy 🚀
|
||
|
||
## Description
|
||
|
||
This Ansible role deploys **Nginx** as a high-performance [reverse proxy](https://en.wikipedia.org/wiki/Reverse_proxy) in front of Docker-hosted services.
|
||
It provides automatic TLS integration, WebSocket support, and a flexible templating system for per-application configuration.
|
||
|
||
## Overview
|
||
|
||
Optimised for Arch Linux, the role installs Nginx, prepares opinionated configuration snippets and exposes a simple interface for other roles to drop in new virtual-hosts.
|
||
It plays well with **Let’s Encrypt**, **OAuth2 Proxy**, and your existing Docker stack.
|
||
|
||
## Purpose
|
||
|
||
The goal of this role is to deliver a **hassle-free, production-ready reverse proxy** for self-hosted containers, suitable for homelabs and small-scale production workloads.
|
||
|
||
## Features
|
||
|
||
- **Automatic TLS & HSTS** — integrates with the *sys-svc-webserver-https* role for certificate management.
|
||
- **Flexible vHost templates** — *basic* and *ws_generic* flavours cover standard HTTP and WebSocket applications.
|
||
- **Security headers** — sensible defaults plus optional X-Frame-Options / CSP based on application settings.
|
||
- **WebSocket & HTTP/2 aware** — upgrades, keep-alive tuning, and gzip already configured.
|
||
- **OAuth2 gating** — drop-in support when *web-app-oauth2-proxy* is present.
|
||
- **Modular includes** — headers, locations, and global snippets are factored for easy extension.
|
||
|
||
## Credits 📝
|
||
|
||
Developed and maintained by **Kevin Veen-Birkenbach**.
|
||
More at <https://www.veen.world>
|
||
|
||
Part of the **Infinito.Nexus Project** — licensed under the [Infinito.Nexus NonCommercial License](https://s.infinito.nexus/license)
|