Add shared public edge (nginx + certbot)

One nginx owns host ports 80/443 for every project (Gitea, Musify) and proxies by container name over infra-net and gitea_gitea; a certbot service renews the Let's Encrypt certificates.
2026-09-23 16:56:28 +02:00
parent deefb6d0cd
commit 24f801cf2f
10 changed files with 234 additions and 1 deletions
@@ -0,0 +1,24 @@
+server {
+    listen 80;
+    listen [::]:80;
+    server_name gitea.ikerdemo.cat;
+    include /etc/nginx/snippets/acme-redirect.conf;
+}
+
+server {
+    listen 443 ssl;
+    listen [::]:443 ssl;
+    http2 on;
+    server_name gitea.ikerdemo.cat;
+    client_max_body_size 512M;
+
+    ssl_certificate     /etc/letsencrypt/live/gitea.ikerdemo.cat/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/gitea.ikerdemo.cat/privkey.pem;
+    include /etc/nginx/snippets/tls.conf;
+
+    location / {
+        set $upstream http://gitea:3000;
+        proxy_pass $upstream;
+        include /etc/nginx/snippets/proxy.conf;
+    }
+}