Home Assistant Community Add-on: Nginx Proxy Manager

Hi @mitch,

Could you try:

location /sickchill/ {
        proxy_pass http://192.168.86.100:8081/sickchill/;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_http_version 1.1;
        proxy_set_header Connection "";
        proxy_buffering off;
        client_max_body_size 0;
        proxy_read_timeout 36000s;
        proxy_redirect off;
  }

It doesn’t matter they’re not on the same machine.

I’m gonna leave these here for others that might need them (but keep in mind that 1. most of the services don’t use their own authentication thus, if not setting and relying on external authentication such as NPM Access List - these two lines below - then they are accessible by anyone on the internet (WITHOUT ANY RESTRICTION), which is generally considered bad form :slight_smile:

auth_basic            "Authorization required";
auth_basic_user_file  /data/access/1;

and 2. some of them (where the address is http://ip:port/service_name) require a base path override; this is done in the gui settings or, some other times, in a file that needs to be modified on the server)

NGINX Reverse proxy examples
location /ombi {
      proxy_pass http://192.168.0.45:3579;
      proxy_set_header Host $host;
      proxy_set_header X-Forwarded-Host $server_name;
      proxy_set_header X-Real-IP $remote_addr;
      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
      proxy_set_header X-Forwarded-Ssl on;
      proxy_set_header X-Forwarded-Proto $scheme;
      auth_basic            "Authorization required";
      auth_basic_user_file  /data/access/1;
  }

location /logarr/ {
      proxy_pass http://192.168.0.45:8003/;
      proxy_set_header Host $host;
      proxy_set_header X-Real-IP $remote_addr;
      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
      auth_basic            "Authorization required";
      auth_basic_user_file  /data/access/1;
  }

location /nagioslogserver {
      proxy_pass http://192.168.0.222:80;
      proxy_set_header Host $host;
      proxy_set_header X-Real-IP $remote_addr;
      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
      auth_basic            "Authorization required";
      auth_basic_user_file  /data/access/1;
  }

location ~* ^(/apps/portainer)(/api/websocket/.*)$  {
      proxy_set_header Upgrade $http_upgrade;
      proxy_set_header Connection "upgrade";
      proxy_http_version 1.1;
      set $upstream http://192.168.0.45:9000$2;
      proxy_pass $upstream ;
  }
location ~* ^(/apps/portainer)(/.*)$ {
      proxy_http_version 1.1;
      proxy_set_header Connection "";
      set $upstream http://192.168.0.45:9000$2;
      proxy_pass $upstream;
  }

location /privatebin/ {
	proxy_pass https://192.168.0.233/;
        proxy_set_header X-Forwarded-Proto https;
	proxy_set_header X-Forwarded-Host $host;
	proxy_set_header X-Forwarded-Server $host;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  }
location /webmin/ {
	proxy_pass http://192.168.0.45:10000/webmin/;
	proxy_set_header X-Forwarded-Host $host;
	proxy_set_header X-Forwarded-Server $host;
	proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        auth_basic  "Authorization required";
        auth_basic_user_file  /data/access/1;
  }

location /unmanic {
        proxy_pass http://192.168.0.45:8889/;
        proxy_set_header Host $host;
        auth_basic  "Authorization required";
        auth_basic_user_file  /data/access/1;
  }

location /plexpy {
        proxy_pass http://192.168.0.45:8182;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        auth_basic            "Authorization required";
        auth_basic_user_file  /data/access/1;
  }

location /syncthing/ {
        proxy_pass http://192.168.0.45:8384/;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_read_timeout      600s;
        proxy_send_timeout      600s;
        auth_basic            "Authorization required";
        auth_basic_user_file  /data/access/1;
  }

location /lidarr {
        proxy_pass http://192.168.0.45:8686;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_redirect  http://  $scheme://;
        proxy_http_version 1.1;
        proxy_set_header Connection "";
        proxy_cache_bypass $cookie_session;
        proxy_no_cache $cookie_session;
        proxy_buffers 32 4k;
        auth_basic            "Authorization required";
        auth_basic_user_file  /data/access/1;
  }

location /gui/ {
        proxy_pass http://192.168.0.45:8888/gui/;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        auth_basic            "Authorization required";
        auth_basic_user_file  /data/access/1;
  }
location ~ ^/mylar($|./*) {
        proxy_pass http://192.168.0.45:8090;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        auth_basic            "Authorization required";
        auth_basic_user_file  /data/access/1;
  }

location = /makemkv {return 301 $scheme://$http_host/makemkv/;
        auth_basic            "Authorization required";
        auth_basic_user_file  /data/access/1;
  }

location /makemkv/ {
        proxy_pass http://192.168.0.45:5802/;
        auth_basic            "Authorization required";
        auth_basic_user_file  /data/access/1;
        location /makemkv/websockify {
        proxy_pass http://192.168.0.45:5802/websockify/;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        proxy_read_timeout 86400;
        auth_basic            "Authorization required";
        auth_basic_user_file  /data/access/1;
   }
  }

location /librarian {
        proxy_pass http://192.168.0.45:5299/librarian/;
	proxy_set_header Host $host;
	proxy_set_header X-Real-IP $remote_addr;
	proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        auth_basic            "Authorization required";
        auth_basic_user_file  /data/access/1;
  }

location ~ ^/headphones($|./*) {
        proxy_pass http://192.168.0.45:8181;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        auth_basic            "Authorization required";
        auth_basic_user_file  /data/access/1;
  }

location = /handbrake {return 301 $scheme://$http_host/handbrake/;
        auth_basic            "Authorization required";
        auth_basic_user_file  /data/access/1;
  }

location /handbrake/ {
        proxy_pass http://192.168.0.45:5801/;
        auth_basic            "Authorization required";
        auth_basic_user_file  /data/access/1;
        location /handbrake/websockify {
        proxy_pass http://192.168.0.45:5801/websockify/;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        proxy_read_timeout 86400;
        auth_basic            "Authorization required";
        auth_basic_user_file  /data/access/1;
   }
  }

location /ubooquity/ {
        proxy_pass http://192.168.0.45:2202/ubooquity/;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        auth_basic "Authorization required";
        auth_basic_user_file  /data/access/1 ;
  }
location /varken/ {
        proxy_pass http://192.168.0.45:3000/d/iTbnha5mkasdf/varken-official-v1-6-x/; 
        auth_basic "Authorization required";
        auth_basic_user_file  /data/access/1 ;
  }
location /bookstack/ {
        proxy_pass http://192.168.0.45:6875/;
        proxy_set_header Host $host;
        auth_basic            "Authorization required";
        auth_basic_user_file  /data/access/1;
  }

location /duplicati {
        return 301 $scheme://$host/duplicati/;        
        auth_basic            "Authorization required";
        auth_basic_user_file  /data/access/1;
  }

location ^~ /duplicati/ {
        rewrite /duplicati(.*) $1 break;
        proxy_pass http://192.168.0.45:8200;
        auth_basic            "Authorization required";
        auth_basic_user_file  /data/access/1;
  }

location /codeserver/ {
        proxy_pass http://192.168.0.45:8443/;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection upgrade;
        proxy_set_header Accept-Encoding gzip;
        auth_basic            "Authorization required";
        auth_basic_user_file  /data/access/1;
  }

location = /filebot {return 301 $scheme://$http_host/filebot/;
        auth_basic            "Authorization required";
        auth_basic_user_file  /data/access/1;
  }

location /filebot/ {
	proxy_pass http://192.168.0.45:5800/;
        auth_basic            "Authorization required";
        auth_basic_user_file  /data/access/1;
	location /filebot/websockify {
	proxy_pass http://192.168.0.45:5800/websockify/;
	proxy_http_version 1.1;
	proxy_set_header Upgrade $http_upgrade;
	proxy_set_header Connection "upgrade";
	proxy_read_timeout 86400;
        auth_basic            "Authorization required";
        auth_basic_user_file  /data/access/1;
	}
	}
location /transmission/ {
       proxy_read_timeout 300;
       proxy_pass_header  X-Transmission-Session-Id;
       proxy_set_header   X-Forwarded-Host   $host;
       proxy_set_header   X-Forwarded-Server $host;
       proxy_set_header   X-Forwarded-For    $proxy_add_x_forwarded_for;       
       proxy_pass         http://192.168.0.45:9091/transmission/;
       auth_basic            "Authorization required";
       auth_basic_user_file  /data/access/1;
  }

location /jackett {
        proxy_pass http://192.168.0.45:9117/jackett;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_redirect  http://  $scheme://;
        proxy_http_version 1.1;
        proxy_set_header Connection "";
        proxy_cache_bypass $cookie_session;
        proxy_no_cache $cookie_session;
        proxy_buffers 32 4k;
        auth_basic            "Authorization required";
        auth_basic_user_file  /data/access/1;
  }

location /htpc/ {
        proxy_pass http://192.168.0.45:8085/htpc/;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        auth_basic            "Authorization required";
        auth_basic_user_file  /data/access/1;
  }

location /calibre {
        proxy_pass http://192.168.0.45:8083;
        proxy_set_header Host $http_host;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Scheme $scheme;
        proxy_set_header X-Script-Name /calibre;
        auth_basic            "Authorization required";
        auth_basic_user_file  /data/access/1;
   }

location /radarr {
        proxy_pass http://192.168.0.45:7878;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_redirect  http://  $scheme://;
        proxy_http_version 1.1;
        proxy_set_header Connection "";
        proxy_cache_bypass $cookie_session;
        proxy_no_cache $cookie_session;
        proxy_buffers 32 4k;
        auth_basic            "Authorization required";
        auth_basic_user_file  /data/access/1;
   }

location /sonarr {
        proxy_pass http://192.168.0.45:8989;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_redirect  http://  $scheme://;
        proxy_http_version 1.1;
        proxy_set_header Connection "";
        proxy_cache_bypass $cookie_session;
        proxy_no_cache $cookie_session;
        proxy_buffers 32 4k;
        auth_basic            "Authorization required";
        auth_basic_user_file  /data/access/1;
        }

location /bazarr {
        proxy_pass http://192.168.0.45:6767;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_redirect  http://  $scheme://;
        proxy_http_version 1.1;
        proxy_set_header Connection "";
        proxy_cache_bypass $cookie_session;
        proxy_no_cache $cookie_session;
        proxy_buffers 32 4k;
        auth_basic            "Authorization required";
        auth_basic_user_file  /data/access/1;
   }

location /booksonic {
        proxy_pass http://192.168.0.45:4041/booksonic;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_redirect  http://  $scheme://;
        proxy_http_version 1.1;
        proxy_set_header Connection "";
        proxy_cache_bypass $cookie_session;
        proxy_no_cache $cookie_session;
        proxy_buffers 32 4k;
        auth_basic            "Authorization required";
        auth_basic_user_file  /data/access/1;        
   }

location /cc/ {
        proxy_pass http://192.168.0.45:8000/cc/;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        auth_basic            "Authorization required";
        auth_basic_user_file  /data/access/1;
   }
1 Like