Sys-svc-proxy Role¶

Description: No description available

Variables¶

author: Kevin Veen-Birkenbach
description: Nginx reverse proxy front-end for local Docker applications.
license: Infinito.Nexus NonCommercial License
license_url: https://s.infinito.nexus/license
company: Kevin Veen-Birkenbach

Consulting & Coaching Solutions https://www.veen.world

min_ansible_version: 2.9
platforms: [{‘name’: ‘Archlinux’, ‘versions’: [‘rolling’]}]
galaxy_tags: [‘nginx’, ‘docker’, ‘reverse_proxy’, ‘web’, ‘automation’, ‘archlinux’]
repository: https://s.infinito.nexus/code
issue_tracker_url: https://s.infinito.nexus/issues
documentation: https://docs.infinito.nexus/

README¶

Nginx Docker Reverse Proxy 🚀¶

Description¶

This Ansible role deploys Nginx as a high-performance reverse proxy in front of Docker-hosted services.

It provides automatic TLS integration, WebSocket support, and a flexible templating system for per-application configuration.

Overview¶

Optimised for Arch Linux, the role installs Nginx, prepares opinionated configuration snippets and exposes a simple interface for other roles to drop in new virtual-hosts.

It plays well with Let’s Encrypt, OAuth2 Proxy, and your existing Docker stack.

Purpose¶

The goal of this role is to deliver a hassle-free, production-ready reverse proxy for self-hosted containers, suitable for homelabs and small-scale production workloads.

Features¶

Automatic TLS & HSTS — integrates with the sys-svc-webserver-https role for certificate management.
Flexible vHost templates — basic and ws_generic flavours cover standard HTTP and WebSocket applications.
Security headers — sensible defaults plus optional X-Frame-Options / CSP based on application settings.
WebSocket & HTTP/2 aware — upgrades, keep-alive tuning, and gzip already configured.
OAuth2 gating — drop-in support when web-app-oauth2-proxy is present.
Modular includes — headers, locations, and global snippets are factored for easy extension.

Credits 📝¶

Developed and maintained by Kevin Veen-Birkenbach.

More at https://www.veen.world

Part of the Infinito.Nexus Project — licensed under the Infinito.Nexus NonCommercial License