studio/tuwunel
2
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

Declare tuwunel upstream in single block

Browse Source 
This is essentially a variable so it is more clear to use an `upstream`
declaration in case the IP or port changes.
This commit is contained in:
André Lametti
2026-03-04 08:57:14 -05:00
parent 59791db213
commit dfcf157b59
1 changed files with 8 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
docs/deploying/reverse-proxy-nginx.md
View File

@@ -24,6 +24,10 @@ sudo pacman -S nginx
Create a new configuration file at `/etc/nginx/sites-available/tuwunel` (or `/etc/nginx/conf.d/tuwunel.conf` on some distributions): Create a new configuration file at `/etc/nginx/sites-available/tuwunel` (or `/etc/nginx/conf.d/tuwunel.conf` on some distributions):
```nginx ```nginx
upstream tuwunel {
127.0.0.1:8008; # IP and port where tuwunel is listening
}
# Client-Server API over HTTPS (port 443) # Client-Server API over HTTPS (port 443)
server { server {
listen 443 ssl http2; listen 443 ssl http2;
@@ -34,9 +38,9 @@ server {
# Increase this to match the max_request_size in your tuwunel.toml # Increase this to match the max_request_size in your tuwunel.toml
client_max_body_size 100M; client_max_body_size 100M;
# Forward requests to Tuwunel (listening on 127.0.0.1:8008) # Forward requests to Tuwunel
location / { location / {
proxy_pass http://127.0.0.1:8008; proxy_pass http://tuwunel;
# Preserve host and scheme - critical for proper Matrix operation # Preserve host and scheme - critical for proper Matrix operation
proxy_set_header Host $host; proxy_set_header Host $host;
@@ -62,7 +66,7 @@ server {
# Forward to the same local port as client-server API # Forward to the same local port as client-server API
location / { location / {
proxy_pass http://127.0.0.1:8008; proxy_pass http://tuwunel;
proxy_set_header Host $host; proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $remote_addr; proxy_set_header X-Forwarded-For $remote_addr;
proxy_set_header X-Forwarded-Proto https; proxy_set_header X-Forwarded-Proto https;
@@ -103,7 +107,7 @@ However, if you experience federation retries or dropped long-poll connections,
```nginx ```nginx
location / { location / {
proxy_pass http://127.0.0.1:8008; proxy_pass http://tuwunel;
proxy_set_header Host $host; proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $remote_addr; proxy_set_header X-Forwarded-For $remote_addr;
proxy_set_header X-Forwarded-Proto https; proxy_set_header X-Forwarded-Proto https;