mrcharles
1fae951f5d
Split per O&M lane work order. Full history: KNEL/PFVCluster. shellcheck debt fixed in librenms-agent (quoting, arithmetic, backticks); fixes upstream ntp-server.sh bug: input_wakeups reported PACKETSENDFAILURES instead of INPUTWAKEUPS. mysql.sh (PHP-in-.sh) exempt per house rule. https://projects.knownelement.com/issues/769#note-4152
61 lines
2.0 KiB
Nginx Configuration File
61 lines
2.0 KiB
Nginx Configuration File
# tsys-librenms nginx vhost for the OAM docker UIs — deployed 2026-09-03 [#697]
|
|
# cert: oam-ui.knel.net (SANs: smokeping/netdisco/oxidized/unpoller.knel.net) from fleet CA
|
|
# IaC codification tracked via #454 (AWX lane); this file is the config SoR copy.
|
|
|
|
server {
|
|
listen 443 ssl;
|
|
server_name smokeping.knel.net;
|
|
ssl_certificate /etc/nginx/ssl/oam-ui.knel.net.fullchain;
|
|
ssl_certificate_key /etc/nginx/ssl/oam-ui.knel.net.key;
|
|
|
|
location / {
|
|
proxy_pass http://127.0.0.1:8081;
|
|
proxy_set_header Host $host;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
proxy_set_header X-Forwarded-Proto https;
|
|
proxy_http_version 1.1;
|
|
}
|
|
}
|
|
server {
|
|
listen 443 ssl;
|
|
server_name netdisco.knel.net;
|
|
ssl_certificate /etc/nginx/ssl/oam-ui.knel.net.fullchain;
|
|
ssl_certificate_key /etc/nginx/ssl/oam-ui.knel.net.key;
|
|
|
|
location / {
|
|
proxy_pass http://127.0.0.1:8082;
|
|
proxy_set_header Host $host;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
proxy_set_header X-Forwarded-Proto https;
|
|
proxy_http_version 1.1;
|
|
}
|
|
}
|
|
server {
|
|
listen 443 ssl;
|
|
server_name oxidized.knel.net;
|
|
ssl_certificate /etc/nginx/ssl/oam-ui.knel.net.fullchain;
|
|
ssl_certificate_key /etc/nginx/ssl/oam-ui.knel.net.key;
|
|
|
|
location / {
|
|
proxy_pass http://127.0.0.1:8083;
|
|
proxy_set_header Host $host;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
proxy_set_header X-Forwarded-Proto https;
|
|
proxy_http_version 1.1;
|
|
}
|
|
}
|
|
server {
|
|
listen 443 ssl;
|
|
server_name unpoller.knel.net;
|
|
ssl_certificate /etc/nginx/ssl/oam-ui.knel.net.fullchain;
|
|
ssl_certificate_key /etc/nginx/ssl/oam-ui.knel.net.key;
|
|
|
|
location / {
|
|
proxy_pass http://127.0.0.1:8084;
|
|
proxy_set_header Host $host;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
proxy_set_header X-Forwarded-Proto https;
|
|
proxy_http_version 1.1;
|
|
}
|
|
}
|