organizr / config-collections-for-nginx Goto Github PK

# Bazarr Reverse Proxy
# Be sure to set your Base-URL in Bazarr
location /bazarr {
        proxy_pass              http://127.0.0.1:6767/bazarr;
        proxy_set_header        X-Real-IP               $remote_addr;
        proxy_set_header        Host                    $http_host;
        proxy_set_header        X-Forwarded-For         $proxy_add_x_forwarded_for;
        proxy_set_header        X-Forwarded-Proto       $scheme;
        proxy_http_version      1.1;
        proxy_set_header        Upgrade                 $http_upgrade;
        proxy_set_header        Connection              "Upgrade";
        proxy_redirect off;
        # Allow the Bazarr API through if you enable Auth on the block above
        location /bazarr/api { auth_request off;
                proxy_pass http://127.0.0.1:7878/radarr/api;
        }
}

location ^~ /qbt/api {
    auth_request off;
    #resolver 127.0.0.11 valid=30s;
    set $upstream_qbt 192.168.1.4;
    rewrite /qbt(.*) $1 break;
    proxy_pass http://$upstream_qbt:38086;
}
location ^~ /qbt/command {
    auth_request off;
    #resolver 127.0.0.11 valid=30s;
    set $upstream_qbt 127.0.0.1;
    rewrite /qbt(.*) $1 break;
    proxy_pass http://$upstream_qbt:8080;
}
location ^~ /qbt/query {
    auth_request off;
    #resolver 127.0.0.11 valid=30s;
    set $upstream_qbt 127.0.0.1;
    rewrite /qbt(.*) $1 break;
    proxy_pass http://$upstream_qbt:8080;
}
location ^~ /qbt/login {
    auth_request off;
    #resolver 127.0.0.11 valid=30s;
    set $upstream_qbt 127.0.0.1;
    rewrite /qbt(.*) $1 break;
    proxy_pass http://$upstream_qbt:8080;
}
location ^~ /qbt/sync {
    auth_request off;
    #resolver 127.0.0.11 valid=30s;
    set $upstream_qbt 127.0.0.1;
    rewrite /qbt(.*) $1 break;
    proxy_pass http://$upstream_qbt:8080;
}

server {
        listen 443 ssl;
        server_name sonarr.DOMAIN.TLD;

        ssl_certificate /etc/letsencrypt/live/DOMAIN.TLD/fullchain.pem;
        ssl_certificate_key /etc/letsencrypt/live/DOMAIN.TLD/privkey.pem;

        ssl_session_cache builtin:1000 shared:SSL:10m;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        ssl_prefer_server_ciphers on;

        access_log /var/log/nginx/sonarr.access.log;

        location / {
                proxy_pass http://127.0.0.1:8989;
                proxy_set_header X-Forwarded-Host $server_name;
                proxy_set_header X-Real-IP $remote_addr;
                proxy_set_header X-Forwarded-Proto $scheme;
        }
}