feat: initial Nginx templates

conf.d/default.conf.template

@@ -0,0 +1,20 @@
+server {
+    listen 80 default_server;
+    server_name _;
+
+    return 404;
+}
+
+server {
+    listen 443 ssl default_server;
+    include snippets/https.conf;
+
+    server_name _;
+
+    return 404;
+}
+
+map $http_upgrade $connection_upgrade {
+    default upgrade;
+    ''      close;
+}

conf.d/gitea.conf.template

@@ -0,0 +1,13 @@
+server {
+    listen 443 ssl;
+    include snippets/https.conf;
+
+    server_name gitea.${BASE_DOMAIN};
+
+    include snippets/proxy.conf;
+
+    location / {
+        proxy_pass http://gitea:3000;
+        client_max_body_size 512M;
+    }
+}

conf.d/immich.conf.template

@@ -0,0 +1,32 @@
+server {
+    listen 443 ssl;
+    include snippets/https.conf;
+
+    server_name immich.${BASE_DOMAIN};
+
+    include snippets/proxy.conf;
+
+    # allow large file uploads
+    client_max_body_size 50000M;
+
+    # disable buffering uploads to prevent OOM on reverse proxy server and make uploads twice as fast (no pause)
+    proxy_request_buffering off;
+
+    # increase body buffer to avoid limiting upload speed
+    client_body_buffer_size 1024k;
+
+    # set timeout
+    proxy_read_timeout 600s;
+    proxy_send_timeout 600s;
+    send_timeout       600s;
+
+    location / {
+        proxy_pass http://immich-server:2283;
+        proxy_redirect off;
+    }
+
+    # useful when using Let's Encrypt http-01 challenge
+    # location = /.well-known/immich {
+    #     proxy_pass http://<backend_url>:2283;
+    # }
+}

conf.d/openlist.conf.template

@@ -0,0 +1,13 @@
+server {
+    listen 443 ssl;
+    include snippets/https.conf;
+
+    server_name openlist.${BASE_DOMAIN};
+
+    include snippets/proxy.conf;
+
+    location / {
+        proxy_pass http://openlist:5244;
+        proxy_redirect off;
+    }
+}