From 86363f29a8af102aa53e43b8bdab1167e8bb24a2 Mon Sep 17 00:00:00 2001 From: Arthur Lu Date: Thu, 9 Oct 2025 00:09:00 +0000 Subject: [PATCH 1/5] fix issue with some http content not being redirected --- proxy-params.conf | 1 + 1 file changed, 1 insertion(+) diff --git a/proxy-params.conf b/proxy-params.conf index 593f184..5e37ce5 100644 --- a/proxy-params.conf +++ b/proxy-params.conf @@ -22,3 +22,4 @@ proxy_hide_header Strict-Transport-Security; add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload;"; proxy_hide_header Access-Control-Allow-Origin; add_header Access-Control-Allow-Origin https://tronnet.net; +add_header Content-Security-Policy "upgrade-insecure-requests"; From 441ae6c1268f61a60d08dd1f973ae18c04d94725 Mon Sep 17 00:00:00 2001 From: Arthur Lu Date: Tue, 14 Oct 2025 16:58:31 -0700 Subject: [PATCH 2/5] add proxy_request_buffering off --- proxy-params.conf | 1 + 1 file changed, 1 insertion(+) diff --git a/proxy-params.conf b/proxy-params.conf index 5e37ce5..d2710f3 100644 --- a/proxy-params.conf +++ b/proxy-params.conf @@ -2,6 +2,7 @@ proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; proxy_buffering off; +proxy_request_buffering off; client_max_body_size 0; proxy_connect_timeout 3600s; proxy_read_timeout 3600s; From 4ef5b0459e74e885381ac47ced02661136c2d9e5 Mon Sep 17 00:00:00 2001 From: = <=> Date: Tue, 21 Oct 2025 23:54:38 +0000 Subject: [PATCH 3/5] add ts --- stream/teamspeak.conf | 11 +++++++++++ 1 file changed, 11 insertions(+) create mode 100644 stream/teamspeak.conf diff --git a/stream/teamspeak.conf b/stream/teamspeak.conf new file mode 100644 index 0000000..f291f1b --- /dev/null +++ b/stream/teamspeak.conf @@ -0,0 +1,11 @@ +server { + listen 9987 reuseport; + proxy_timeout 30s; + proxy_pass teamspeak.dmz; +} + +server { + listen 30033 reuseport; + proxy_timeout 30s; + proxy_pass teamspeak.dmz; +} \ No newline at end of file From c40cbf12025225af009772c689a1d10e0dbc5641 Mon Sep 17 00:00:00 2001 From: Arthur Lu Date: Thu, 15 Jan 2026 01:42:36 +0000 Subject: [PATCH 4/5] add ts --- conf.d/stream.conf | 14 ++++++++++++++ fastcgi.conf | 26 ++++++++++++++++++++++++++ fastcgi_params | 25 +++++++++++++++++++++++++ http/teamspeak.conf | 10 ++++++++++ scgi_params | 17 +++++++++++++++++ stream/teamspeak.conf | 14 ++++++++++---- uwsgi_params | 17 +++++++++++++++++ 7 files changed, 119 insertions(+), 4 deletions(-) create mode 100644 conf.d/stream.conf create mode 100644 fastcgi.conf create mode 100644 fastcgi_params create mode 100644 http/teamspeak.conf create mode 100644 scgi_params create mode 100644 uwsgi_params diff --git a/conf.d/stream.conf b/conf.d/stream.conf new file mode 100644 index 0000000..4b7177d --- /dev/null +++ b/conf.d/stream.conf @@ -0,0 +1,14 @@ +# /etc/nginx/conf.d/stream.conf + +stream { + # Specifies the main log format. + log_format main '$remote_addr [$time_local] ' + '$protocol $status $bytes_sent $bytes_received ' + '$session_time "$upstream_addr" ' + '"$upstream_bytes_sent" "$upstream_bytes_received" "$upstream_connect_time"'; + + access_log /var/log/nginx/stream.log main; + + # Includes servers configs. + include stream.d/*.conf; +} diff --git a/fastcgi.conf b/fastcgi.conf new file mode 100644 index 0000000..091738c --- /dev/null +++ b/fastcgi.conf @@ -0,0 +1,26 @@ + +fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; +fastcgi_param QUERY_STRING $query_string; +fastcgi_param REQUEST_METHOD $request_method; +fastcgi_param CONTENT_TYPE $content_type; +fastcgi_param CONTENT_LENGTH $content_length; + +fastcgi_param SCRIPT_NAME $fastcgi_script_name; +fastcgi_param REQUEST_URI $request_uri; +fastcgi_param DOCUMENT_URI $document_uri; +fastcgi_param DOCUMENT_ROOT $document_root; +fastcgi_param SERVER_PROTOCOL $server_protocol; +fastcgi_param REQUEST_SCHEME $scheme; +fastcgi_param HTTPS $https if_not_empty; + +fastcgi_param GATEWAY_INTERFACE CGI/1.1; +fastcgi_param SERVER_SOFTWARE nginx/$nginx_version; + +fastcgi_param REMOTE_ADDR $remote_addr; +fastcgi_param REMOTE_PORT $remote_port; +fastcgi_param SERVER_ADDR $server_addr; +fastcgi_param SERVER_PORT $server_port; +fastcgi_param SERVER_NAME $server_name; + +# PHP only, required if PHP was built with --enable-force-cgi-redirect +fastcgi_param REDIRECT_STATUS 200; diff --git a/fastcgi_params b/fastcgi_params new file mode 100644 index 0000000..28decb9 --- /dev/null +++ b/fastcgi_params @@ -0,0 +1,25 @@ + +fastcgi_param QUERY_STRING $query_string; +fastcgi_param REQUEST_METHOD $request_method; +fastcgi_param CONTENT_TYPE $content_type; +fastcgi_param CONTENT_LENGTH $content_length; + +fastcgi_param SCRIPT_NAME $fastcgi_script_name; +fastcgi_param REQUEST_URI $request_uri; +fastcgi_param DOCUMENT_URI $document_uri; +fastcgi_param DOCUMENT_ROOT $document_root; +fastcgi_param SERVER_PROTOCOL $server_protocol; +fastcgi_param REQUEST_SCHEME $scheme; +fastcgi_param HTTPS $https if_not_empty; + +fastcgi_param GATEWAY_INTERFACE CGI/1.1; +fastcgi_param SERVER_SOFTWARE nginx/$nginx_version; + +fastcgi_param REMOTE_ADDR $remote_addr; +fastcgi_param REMOTE_PORT $remote_port; +fastcgi_param SERVER_ADDR $server_addr; +fastcgi_param SERVER_PORT $server_port; +fastcgi_param SERVER_NAME $server_name; + +# PHP only, required if PHP was built with --enable-force-cgi-redirect +fastcgi_param REDIRECT_STATUS 200; diff --git a/http/teamspeak.conf b/http/teamspeak.conf new file mode 100644 index 0000000..4fe54a9 --- /dev/null +++ b/http/teamspeak.conf @@ -0,0 +1,10 @@ +server { + listen 443 quic; + listen 443 ssl; + server_name ts.tronnet.net; + include snippets/ssl-acme.conf; + location / { + proxy_pass https://teamspeak.dmz; + proxy_redirect default; + } +} diff --git a/scgi_params b/scgi_params new file mode 100644 index 0000000..6d4ce4f --- /dev/null +++ b/scgi_params @@ -0,0 +1,17 @@ + +scgi_param REQUEST_METHOD $request_method; +scgi_param REQUEST_URI $request_uri; +scgi_param QUERY_STRING $query_string; +scgi_param CONTENT_TYPE $content_type; + +scgi_param DOCUMENT_URI $document_uri; +scgi_param DOCUMENT_ROOT $document_root; +scgi_param SCGI 1; +scgi_param SERVER_PROTOCOL $server_protocol; +scgi_param REQUEST_SCHEME $scheme; +scgi_param HTTPS $https if_not_empty; + +scgi_param REMOTE_ADDR $remote_addr; +scgi_param REMOTE_PORT $remote_port; +scgi_param SERVER_PORT $server_port; +scgi_param SERVER_NAME $server_name; diff --git a/stream/teamspeak.conf b/stream/teamspeak.conf index f291f1b..d7de365 100644 --- a/stream/teamspeak.conf +++ b/stream/teamspeak.conf @@ -1,11 +1,17 @@ server { - listen 9987 reuseport; + listen 9987 udp reuseport; proxy_timeout 30s; - proxy_pass teamspeak.dmz; + proxy_pass teamspeak.dmz:9987; +} + +server { + listen 10011 reuseport; + proxy_timeout 30s; + proxy_pass teamspeak.dmz:30033; } server { listen 30033 reuseport; proxy_timeout 30s; - proxy_pass teamspeak.dmz; -} \ No newline at end of file + proxy_pass teamspeak.dmz:30033; +} diff --git a/uwsgi_params b/uwsgi_params new file mode 100644 index 0000000..09c732c --- /dev/null +++ b/uwsgi_params @@ -0,0 +1,17 @@ + +uwsgi_param QUERY_STRING $query_string; +uwsgi_param REQUEST_METHOD $request_method; +uwsgi_param CONTENT_TYPE $content_type; +uwsgi_param CONTENT_LENGTH $content_length; + +uwsgi_param REQUEST_URI $request_uri; +uwsgi_param PATH_INFO $document_uri; +uwsgi_param DOCUMENT_ROOT $document_root; +uwsgi_param SERVER_PROTOCOL $server_protocol; +uwsgi_param REQUEST_SCHEME $scheme; +uwsgi_param HTTPS $https if_not_empty; + +uwsgi_param REMOTE_ADDR $remote_addr; +uwsgi_param REMOTE_PORT $remote_port; +uwsgi_param SERVER_PORT $server_port; +uwsgi_param SERVER_NAME $server_name; From 8551d78f56ec9d458bdfeca26ac254c560f7f106 Mon Sep 17 00:00:00 2001 From: Arthur Lu Date: Thu, 7 May 2026 21:15:38 +0000 Subject: [PATCH 5/5] remove ts --- http/teamspeak.conf | 10 ---------- proxy-params.conf | 2 +- 2 files changed, 1 insertion(+), 11 deletions(-) delete mode 100644 http/teamspeak.conf diff --git a/http/teamspeak.conf b/http/teamspeak.conf deleted file mode 100644 index 4fe54a9..0000000 --- a/http/teamspeak.conf +++ /dev/null @@ -1,10 +0,0 @@ -server { - listen 443 quic; - listen 443 ssl; - server_name ts.tronnet.net; - include snippets/ssl-acme.conf; - location / { - proxy_pass https://teamspeak.dmz; - proxy_redirect default; - } -} diff --git a/proxy-params.conf b/proxy-params.conf index d2710f3..bffd99a 100644 --- a/proxy-params.conf +++ b/proxy-params.conf @@ -20,7 +20,7 @@ add_header X-Content-Type-Options nosniff; proxy_hide_header Referrer-Policy; add_header Referrer-Policy strict-origin-when-cross-origin; proxy_hide_header Strict-Transport-Security; -add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload;"; +#add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload;"; proxy_hide_header Access-Control-Allow-Origin; add_header Access-Control-Allow-Origin https://tronnet.net; add_header Content-Security-Policy "upgrade-insecure-requests";