ralsina/personal-servers
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Compare commits

base: ralsina:6f318a4dfc26dc302a785e15f1d63fc77304bb5c
Branches Tags
ralsina:main
..
compare: ralsina:main
Branches Tags
ralsina:main

14 Commits
6f318a4dfc ... main

Author SHA1 Message Date
Roberto Alsina
66833871f8 tocry site 2025-06-20 22:04:34 -03:00
Roberto Alsina
41c8fd4559 updated tailscale 2025-06-06 09:42:01 -03:00
Roberto Alsina
f0c9ad04f8 grafito demo 2025-05-29 15:24:36 -03:00
Roberto Alsina
8f185cceef grafito site 2025-05-27 21:44:43 -03:00
Roberto Alsina
d1c442f7b3 Cambio a rocky 2024-09-03 12:15:42 -03:00
Roberto Alsina
11d6781bd9 Arreglado faaso-prod para nombres.ralsina.me 2024-08-21 10:37:18 -03:00
Roberto Alsina
7bdbff02f1 Apuntar proxy a version nueva de nombres 2024-08-21 09:39:12 -03:00
Roberto Alsina
e32c91191a Backup of DNS zone 2024-08-20 11:47:45 -03:00
Roberto Alsina
7761f341d0 vhost for crycco 2024-07-27 20:56:54 -03:00
Roberto Alsina
4b5756e360 Use newer tailscale domain names everywhere 2024-07-20 21:21:12 -03:00
Roberto Alsina
3de9039037 Faaso-prod and nicolino static site 2024-07-20 21:10:05 -03:00
Roberto Alsina
f9e8faa88a Updated tailscale 2024-07-20 21:09:25 -03:00
Roberto Alsina
c965372f24 Merge branch 'main' of https://git.ralsina.me/ralsina/personal-servers 2024-07-20 08:48:05 -03:00
Roberto Alsina
4ec0b1c689 simpler 2024-07-16 21:21:39 -03:00
3 changed files with 265 additions and 202 deletions
Expand all files Collapse all files

59
ralsina.me.txt Normal file
View File

@ -0,0 +1,59 @@
;;
;; Domain: ralsina.me.
;; Exported: 2024-08-20 14:42:21
;;
;; This file is intended for use for informational and archival
;; purposes ONLY and MUST be edited before use on a production
;; DNS server. In particular, you must:
;; -- update the SOA record with the correct authoritative name server
;; -- update the SOA record with the contact e-mail address information
;; -- update the NS record(s) with the authoritative name servers for this domain.
;;
;; For further information, please consult the BIND documentation
;; located on the following website:
;;
;; http://www.isc.org/
;;
;; And RFC 1035:
;;
;; http://www.ietf.org/rfc/rfc1035.txt
;;
;; Please note that we do NOT offer technical support for any use
;; of this zone data, the BIND name server, or any other third-party
;; DNS software.
;;
;; Use at your own risk.
;; SOA Record
ralsina.me 3600 IN SOA princess.ns.cloudflare.com. dns.cloudflare.com. 2047583154 10000 2400 604800 3600
;; NS Records
ralsina.me. 86400 IN NS princess.ns.cloudflare.com.
ralsina.me. 86400 IN NS tim.ns.cloudflare.com.
;; A Records
direct.ralsina.me. 1 IN A 192.241.197.159 ; Points to DigitalOcean VPS for nikola and others
;; CAA Records
ralsina.me. 1 IN CAA 0 issuewild "pki.goog; cansignhttpexchanges=yes"
ralsina.me. 1 IN CAA 0 issuewild "letsencrypt.org"
ralsina.me. 1 IN CAA 0 issuewild "digicert.com; cansignhttpexchanges=yes"
ralsina.me. 1 IN CAA 0 issuewild "comodoca.com"
ralsina.me. 1 IN CAA 0 issue "pki.goog; cansignhttpexchanges=yes"
ralsina.me. 1 IN CAA 0 issue "letsencrypt.org"
ralsina.me. 1 IN CAA 0 issue "digicert.com; cansignhttpexchanges=yes"
ralsina.me. 1 IN CAA 0 issue "comodoca.com"
;; CNAME Records
_acme-challenge.ralsina.me. 1 IN CNAME ralsina.me.ydzmj.flydns.net.
*.ralsina.me. 1 IN CNAME white-wave-7409.fly.dev.
ralsina.me. 1 IN CNAME white-wave-7409.fly.dev.
;; MX Records
ralsina.me. 1 IN MX 75 route2.mx.cloudflare.net.
ralsina.me. 1 IN MX 27 route3.mx.cloudflare.net.
ralsina.me. 1 IN MX 1 route1.mx.cloudflare.net.
;; TXT Records
_dmarc.ralsina.me. 1 IN TXT "v=DMARC1; p=none; rua=mailto:ralsina@netmanagers.com.ar,mailto:roberto.alsina@gmail.com,mailto:roberto@ralsina.me"
ralsina.me. 1 IN TXT "v=spf1 include:_spf.mx.cloudflare.net ~all"
ralsina.me. 1 IN TXT "google-site-verification=GLjctZfTmZSRp8wt7vx4ko-KaGlqT5hxfUTliYpX9V8"

6
reverse_proxy/Dockerfile
View File

@ -1,13 +1,13 @@
FROM alpine:latest as builder
FROM alpine:latest AS builder
WORKDIR /app
COPY . ./
# This is where one could build the application code as well.
FROM alpine:latest as tailscale
FROM alpine:latest AS tailscale
WORKDIR /app
COPY . ./
ENV TSFILE=tailscale_1.56.1_amd64.tgz
ENV TSFILE=tailscale_1.84.0_amd64.tgz
RUN wget https://pkgs.tailscale.com/stable/${TSFILE} && tar xzf ${TSFILE} --strip-components=1
COPY . ./

402
reverse_proxy/nginx.conf
View File

@ -1,205 +1,209 @@
server {
listen 8080;
listen [::]:8080;
server_name code.ralsina.me;
location / {
proxy_pass http://mindy.ralsina.github.beta.tailscale.net:8088;
proxy_set_header X-Forwarded-Host $http_host;
proxy_set_header Host $host;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection upgrade;
proxy_set_header Accept-Encoding gzip;
}
error_page 500 502 503 504 /custom_50x.html;
location = /custom_50x.html {
root /usr/share/nginx/html;
internal;
}
}
server {
listen 8080;
listen [::]:8080;
server_name home.ralsina.me;
server_name ralsina.me;
location / {
proxy_pass http://pinky.ralsina.github.beta.tailscale.net:8080;
proxy_set_header X-Forwarded-Host $http_host;
proxy_set_header Host $host;
}
error_page 500 502 503 504 /custom_50x.html;
location = /custom_50x.html {
root /usr/share/nginx/html;
internal;
}
}
server {
listen 8080;
listen [::]:8080;
server_name faaso.ralsina.me;
location / {
proxy_pass http://pinky.ralsina.github.beta.tailscale.net:8080;
proxy_set_header X-Forwarded-Host $http_host;
proxy_set_header Host $host;
}
error_page 500 502 503 504 /custom_50x.html;
location = /custom_50x.html {
root /usr/share/nginx/html;
internal;
}
}
server {
listen 8080;
listen [::]:8080;
server_name links.ralsina.me;
location / {
proxy_pass http://pinky.ralsina.github.beta.tailscale.net:8086;
proxy_set_header X-Forwarded-Host $http_host;
proxy_set_header Host $host;
}
error_page 500 502 503 504 /custom_50x.html;
location = /custom_50x.html {
root /usr/share/nginx/html;
internal;
}
}
server {
listen 8080;
listen [::]:8080;
server_name git.ralsina.me;
location / {
proxy_pass http://pinky.ralsina.github.beta.tailscale.net:3000;
proxy_set_header X-Forwarded-Host $http_host;
proxy_set_header Host $host;
}
error_page 403 404 500 502 503 504 /custom_50x.html;
location = /custom_50x.html {
root /usr/share/nginx/html;
internal;
}
}
server {
listen 8080;
listen [::]:8080;
server_name gotify.ralsina.me;
add_header 'Access-Control-Allow-Origin' '*';
add_header 'Access-Control-Allow-Headers' '*';
add_header 'Access-Control-Allow-Credentials' 'true';
add_header 'Allow' 'POST, GET, OPTIONS';
if ($request_method = 'OPTIONS' ) {
return 200;
}
location / {
proxy_pass http://pinky.ralsina.github.beta.tailscale.net:7777;
proxy_set_header X-Forwarded-Host $http_host;
proxy_set_header Host $host;
}
location /stream {
proxy_pass http://pinky.ralsina.github.beta.tailscale.net:7777;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "Upgrade";
}
error_page 403 404 500 502 503 504 /custom_50x.html;
location = /custom_50x.html {
root /usr/share/nginx/html;
internal;
}
}
server {
listen 8080;
listen [::]:8080;
server_name faas.ralsina.me;
add_header 'Access-Control-Allow-Origin' '*';
add_header 'Access-Control-Allow-Headers' '*';
add_header 'Access-Control-Allow-Credentials' 'true';
add_header 'Allow' 'POST, GET, OPTIONS';
if ($request_method = 'OPTIONS' ) {
return 200;
}
location / {
proxy_pass http://pinky.ralsina.github.beta.tailscale.net:8082;
proxy_set_header X-Forwarded-Host $http_host;
}
error_page 403 404 500 502 503 504 /custom_50x.html;
location = /custom_50x.html {
root /usr/share/nginx/html;
internal;
}
}
server {
listen 8080;
listen [::]:8080;
server_name hass.ralsina.me;
location / {
proxy_pass http://pinky.ralsina.github.beta.tailscale.net:8123;
proxy_set_header X-Forwarded-Host $http_host;
# WebSocket support
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
}
}
server {
listen 8080;
listen [::]:8080;
server_name snips.ralsina.me;
location / {
proxy_pass http://pinky.ralsina.github.beta.tailscale.net:8091 ;
proxy_set_header X-Forwarded-Host $http_host;
# WebSocket support
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
}
}
server {
listen 8080;
listen [::]:8080;
server_name covers.ralsina.me;
return 301 https://ralsina.me/stories/covers/;
map $upstream_http_access_control_allow_origin $allow_origin {
'' "*";
}
server {
listen 8080;
listen [::]:8080;
listen 8080;
listen [::]:8080;
server_name nombres.ralsina.me;
return 301 https://ralsina.me/stories/nombres/;
server_name faaso-prod.ralsina.me;
add_header 'Access-Control-Allow-Origin' $allow_origin;
add_header 'Access-Control-Allow-Headers' '*';
add_header 'Access-Control-Allow-Credentials' 'true';
add_header 'Allow' 'POST, GET, OPTIONS';
if ($request_method = 'OPTIONS' ) {
return 200;
}
location / {
proxy_pass http://rocky.tail20c16.ts.net:8888;
proxy_set_header X-Forwarded-Host $http_host;
}
}
server {
listen 8080;
listen [::]:8080;
server_name grafito-demo.ralsina.me;
add_header 'Access-Control-Allow-Origin' $allow_origin;
add_header 'Access-Control-Allow-Headers' '*';
add_header 'Access-Control-Allow-Credentials' 'true';
add_header 'Allow' 'POST, GET, OPTIONS';
if ($request_method = 'OPTIONS' ) {
return 200;
}
location / {
proxy_pass http://rocky.tail20c16.ts.net:1112;
proxy_set_header X-Forwarded-Host $http_host;
}
}
server {
listen 8080;
listen [::]:8080;
server_name code.ralsina.me;
location / {
proxy_pass http://mindy.tail20c16.ts.net:8088;
proxy_set_header X-Forwarded-Host $http_host;
proxy_set_header Host $host;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection upgrade;
proxy_set_header Accept-Encoding gzip;
}
error_page 500 502 503 504 /custom_50x.html;
location = /custom_50x.html {
root /usr/share/nginx/html;
internal;
}
}
server {
listen 8080;
listen [::]:8080;
server_name home.ralsina.me;
server_name ralsina.me;
server_name faaso.ralsina.me;
server_name nicolino.ralsina.me;
server_name crycco.ralsina.me;
server_name nombres.ralsina.me;
server_name grafito.ralsina.me;
server_name tocry.ralsina.me;
location / {
proxy_pass http://rocky.tail20c16.ts.net:8080;
proxy_set_header X-Forwarded-Host $http_host;
proxy_set_header Host $host;
}
error_page 500 502 503 504 /custom_50x.html;
location = /custom_50x.html {
root /usr/share/nginx/html;
internal;
}
}
server {
listen 8080;
listen [::]:8080;
server_name links.ralsina.me;
location / {
proxy_pass http://rocky.tail20c16.ts.net:8086;
proxy_set_header X-Forwarded-Host $http_host;
proxy_set_header Host $host;
}
error_page 500 502 503 504 /custom_50x.html;
location = /custom_50x.html {
root /usr/share/nginx/html;
internal;
}
}
server {
listen 8080;
listen [::]:8080;
server_name git.ralsina.me;
location / {
proxy_pass http://rocky.tail20c16.ts.net:3000;
proxy_set_header X-Forwarded-Host $http_host;
proxy_set_header Host $host;
}
error_page 403 404 500 502 503 504 /custom_50x.html;
location = /custom_50x.html {
root /usr/share/nginx/html;
internal;
}
}
server {
listen 8080;
listen [::]:8080;
server_name gotify.ralsina.me;
add_header 'Access-Control-Allow-Origin' '*';
add_header 'Access-Control-Allow-Headers' '*';
add_header 'Access-Control-Allow-Credentials' 'true';
add_header 'Allow' 'POST, GET, OPTIONS';
if ($request_method = 'OPTIONS' ) {
return 200;
}
location / {
proxy_pass http://rocky.tail20c16.ts.net:7777;
proxy_set_header X-Forwarded-Host $http_host;
proxy_set_header Host $host;
}
location /stream {
proxy_pass http://rocky.tail20c16.ts.net:7777;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "Upgrade";
}
error_page 403 404 500 502 503 504 /custom_50x.html;
location = /custom_50x.html {
root /usr/share/nginx/html;
internal;
}
}
server {
listen 8080;
listen [::]:8080;
server_name faas.ralsina.me;
add_header 'Access-Control-Allow-Origin' '*';
add_header 'Access-Control-Allow-Headers' '*';
add_header 'Access-Control-Allow-Credentials' 'true';
add_header 'Allow' 'POST, GET, OPTIONS';
if ($request_method = 'OPTIONS' ) {
return 200;
}
location / {
proxy_pass http://rocky.tail20c16.ts.net:8082;
proxy_set_header X-Forwarded-Host $http_host;
}
}
server {
listen 8080;
listen [::]:8080;
server_name snips.ralsina.me;
location / {
proxy_pass http://rocky.tail20c16.ts.net:8091 ;
proxy_set_header X-Forwarded-Host $http_host;
# WebSocket support
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
}
}
server {
listen 8080;
listen [::]:8080;
server_name covers.ralsina.me;
return 301 https://ralsina.me/stories/covers/;
}