From 6167fb5afaf471177a66d3689d9be839f2ae32cb Mon Sep 17 00:00:00 2001
From: kinghat <kinghat@protonmail.com>
Date: Fri, 19 Apr 2024 19:14:51 +0000
Subject: [PATCH] feat: add proxy-conf samples for forgejo

---
 forgejo.subdomain.conf.sample | 61 +++++++++++++++++++++++++++++++++++
 forgejo.subfolder.conf.sample | 24 ++++++++++++++
 2 files changed, 85 insertions(+)
 create mode 100644 forgejo.subdomain.conf.sample
 create mode 100644 forgejo.subfolder.conf.sample

diff --git a/forgejo.subdomain.conf.sample b/forgejo.subdomain.conf.sample
new file mode 100644
index 000000000..a6836713f
--- /dev/null
+++ b/forgejo.subdomain.conf.sample
@@ -0,0 +1,61 @@
+## Version 2024/04/20
+# make sure that your forgejo container is named forgejo
+# make sure that your dns has a cname set for forgejo
+# edit the following parameters in /data/forgejo/conf/app.ini or set as ENV vars in your container
+# [server]
+# SSH_DOMAIN       = forgejo.example.com
+# ROOT_URL         = https://forgejo.example.com/
+# DOMAIN           = forgejo.example.com
+
+server {
+    listen 443 ssl http2;
+    listen [::]:443 ssl http2;
+
+    server_name forgejo.*;
+
+    include /config/nginx/ssl.conf;
+
+    client_max_body_size 0;
+
+    # enable for ldap auth (requires ldap-location.conf in the location block)
+    #include /config/nginx/ldap-server.conf;
+
+    # enable for Authelia (requires authelia-location.conf in the location block)
+    #include /config/nginx/authelia-server.conf;
+
+    # enable for Authentik (requires authentik-location.conf in the location block)
+    #include /config/nginx/authentik-server.conf;
+
+    location / {
+        # enable the next two lines for http auth
+        #auth_basic "Restricted";
+        #auth_basic_user_file /config/nginx/.htpasswd;
+
+        # enable for ldap auth (requires ldap-server.conf in the server block)
+        #include /config/nginx/ldap-location.conf;
+
+        # enable for Authelia (requires authelia-server.conf in the server block)
+        #include /config/nginx/authelia-location.conf;
+
+        # enable for Authentik (requires authentik-server.conf in the server block)
+        #include /config/nginx/authentik-location.conf;
+
+        include /config/nginx/proxy.conf;
+        include /config/nginx/resolver.conf;
+        set $upstream_app forgejo;
+        set $upstream_port 3000;
+        set $upstream_proto http;
+        proxy_pass $upstream_proto://$upstream_app:$upstream_port;
+
+    }
+
+    location ~ (/forgejo)?/info/lfs {
+        include /config/nginx/proxy.conf;
+        include /config/nginx/resolver.conf;
+        set $upstream_app forgejo;
+        set $upstream_port 3000;
+        set $upstream_proto http;
+        proxy_pass $upstream_proto://$upstream_app:$upstream_port;
+
+    }
+}
diff --git a/forgejo.subfolder.conf.sample b/forgejo.subfolder.conf.sample
new file mode 100644
index 000000000..d23b33770
--- /dev/null
+++ b/forgejo.subfolder.conf.sample
@@ -0,0 +1,24 @@
+## Version 2024/04/20
+# make sure that your forgejo container is named forgejo
+# make sure that forgejo is set to work with the base url /forgejo/
+# The following parameters in /data/forgejo/conf/app.ini should be edited to match your setup
+# or set as ENV vars in your container
+# [server]
+# SSH_DOMAIN       = example.com:2222
+# ROOT_URL         = https://example.com/forgejo/
+# DOMAIN           = example.com
+
+location /forgejo {
+    return 301 $scheme://$host/forgejo/;
+}
+
+location ^~ /forgejo/ {
+    include /config/nginx/proxy.conf;
+    include /config/nginx/resolver.conf;
+    set $upstream_app forgejo;
+    set $upstream_port 3000;
+    set $upstream_proto http;
+    proxy_pass $upstream_proto://$upstream_app:$upstream_port;
+
+    rewrite /forgejo(.*) $1 break;
+}