KNEL/PFVCluster
6
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(oam): nginx vhost SoR — OAM docker UIs behind fleet TLS [#697]

Browse Source 
4 subdomain vhosts proxying to local docker ports; SAN cert from fleet
CA; workstation chain-verified (ssl_verify=0 all four).

Detail: https://projects.knownelement.com/issues/697
This commit is contained in:
mrcharles
2026-09-03 14:42:33 -05:00
parent 8a4ee6f64f
commit abb725be85
1 changed files with 60 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
oam/oam-ui-nginx.vhost
+60
View File
@@ -0,0 +1,60 @@
# tsys-librenms nginx vhost for the OAM docker UIs — deployed 2026-09-03 [#697]
# cert: oam-ui.knel.net (SANs: smokeping/netdisco/oxidized/unpoller.knel.net) from fleet CA
# IaC codification tracked via #454 (AWX lane); this file is the config SoR copy.
server {
listen 443 ssl;
server_name smokeping.knel.net;
ssl_certificate /etc/nginx/ssl/oam-ui.knel.net.fullchain;
ssl_certificate_key /etc/nginx/ssl/oam-ui.knel.net.key;
location / {
proxy_pass http://127.0.0.1:8081;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto https;
proxy_http_version 1.1;
}
}
server {
listen 443 ssl;
server_name netdisco.knel.net;
ssl_certificate /etc/nginx/ssl/oam-ui.knel.net.fullchain;
ssl_certificate_key /etc/nginx/ssl/oam-ui.knel.net.key;
location / {
proxy_pass http://127.0.0.1:8082;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto https;
proxy_http_version 1.1;
}
}
server {
listen 443 ssl;
server_name oxidized.knel.net;
ssl_certificate /etc/nginx/ssl/oam-ui.knel.net.fullchain;
ssl_certificate_key /etc/nginx/ssl/oam-ui.knel.net.key;
location / {
proxy_pass http://127.0.0.1:8083;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto https;
proxy_http_version 1.1;
}
}
server {
listen 443 ssl;
server_name unpoller.knel.net;
ssl_certificate /etc/nginx/ssl/oam-ui.knel.net.fullchain;
ssl_certificate_key /etc/nginx/ssl/oam-ui.knel.net.key;
location / {
proxy_pass http://127.0.0.1:8084;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto https;
proxy_http_version 1.1;
}
}