cmc/dotfiles

Using GNU Stow to manage my dotfiles.

clone: git clone https://gitbay.org/cmc/dotfiles.git

99425e089fc3aa0c07b50f2a8d476641149f08aa

verified · cmc

author: Christian Cleberg <hello@cleberg.net> · 2026-02-16T17:39:44Z

back out docker changes

 linux/nginx/etc/nginx/conf.d/ao.conf     | 39 +++++++++++++++++++++
 linux/nginx/etc/nginx/conf.d/art.conf    | 39 +++++++++++++++++++++
 linux/nginx/etc/nginx/conf.d/auth.conf   | 42 +++++++++++++++++++++++
 linux/nginx/etc/nginx/conf.d/br.conf     | 39 +++++++++++++++++++++
 linux/nginx/etc/nginx/conf.d/bt.conf     | 46 +++++++++++++++++++++++++
 linux/nginx/etc/nginx/conf.d/bw.conf     | 39 +++++++++++++++++++++
 linux/nginx/etc/nginx/conf.d/cc.conf     | 39 +++++++++++++++++++++
 linux/nginx/etc/nginx/conf.d/ddns.conf   | 44 ++++++++++++++++++++++++
 linux/nginx/etc/nginx/conf.d/docker.conf | 44 ++++++++++++++++++++++++
 linux/nginx/etc/nginx/conf.d/gh.conf     | 39 +++++++++++++++++++++
 linux/nginx/etc/nginx/conf.d/ha.conf     | 46 +++++++++++++++++++++++++
 linux/nginx/etc/nginx/conf.d/hat.conf    | 39 +++++++++++++++++++++
 linux/nginx/etc/nginx/conf.d/irc.conf    | 44 ++++++++++++++++++++++++
 linux/nginx/etc/nginx/conf.d/ld.conf     | 39 +++++++++++++++++++++
 linux/nginx/etc/nginx/conf.d/lemmy.conf  | 39 +++++++++++++++++++++
 linux/nginx/etc/nginx/conf.d/lt.conf     | 39 +++++++++++++++++++++
 linux/nginx/etc/nginx/conf.d/mz.conf     | 39 +++++++++++++++++++++
 linux/nginx/etc/nginx/conf.d/paste.conf  | 39 +++++++++++++++++++++
 linux/nginx/etc/nginx/conf.d/pb.conf     | 39 +++++++++++++++++++++
 linux/nginx/etc/nginx/conf.d/photos.conf | 54 +++++++++++++++++++++++++++++
 linux/nginx/etc/nginx/conf.d/pin.conf    | 39 +++++++++++++++++++++
 linux/nginx/etc/nginx/conf.d/piped.conf  | 40 ++++++++++++++++++++++
 linux/nginx/etc/nginx/conf.d/rd.conf     | 39 +++++++++++++++++++++
 linux/nginx/etc/nginx/conf.d/rimgo.conf  | 39 +++++++++++++++++++++
 linux/nginx/etc/nginx/conf.d/rl.conf     | 44 ++++++++++++++++++++++++
 linux/nginx/etc/nginx/conf.d/rss.conf    | 58 ++++++++++++++++++++++++++++++++
 linux/nginx/etc/nginx/conf.d/search.conf | 44 ++++++++++++++++++++++++
 linux/nginx/etc/nginx/conf.d/send.conf   | 39 +++++++++++++++++++++
 linux/nginx/etc/nginx/conf.d/slash.conf  | 39 +++++++++++++++++++++
 linux/nginx/etc/nginx/conf.d/small.conf  | 39 +++++++++++++++++++++
 linux/nginx/etc/nginx/conf.d/ssh.conf    | 44 ++++++++++++++++++++++++
 linux/nginx/etc/nginx/conf.d/teddit.conf | 44 ++++++++++++++++++++++++
 linux/nginx/etc/nginx/conf.d/wyl.conf    | 44 ++++++++++++++++++++++++
 33 files changed, 1379 insertions(+)

diff --git a/linux/nginx/etc/nginx/conf.d/ao.conf b/linux/nginx/etc/nginx/conf.d/ao.conf
new file mode 100644
index 0000000..96d232f
--- /dev/null
+++ b/linux/nginx/etc/nginx/conf.d/ao.conf
@@ -0,0 +1,39 @@
+# ----------------------------------------------------------------------
+# | Config file for host                                   |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:443 ssl;
+	listen 443 ssl;
+	http2 on;
+
+	server_name ao.cleberg.net;
+
+	include custom.d/tls/ssl_engine.conf;
+	include custom.d/tls/certificate_files.conf;
+	include custom.d/tls/policy_balanced.conf;
+	include custom.d/basic.conf;
+
+	# ----------------------------------------------------------------------
+	# | Custom rules & config for specific website                     |
+	# ----------------------------------------------------------------------
+	location / {
+                set $upstream http://127.0.0.1:9380;
+                proxy_pass $upstream;
+
+		include custom.d/reverse_proxy/basic.conf;
+	}
+
+	include custom.d/security/robots_index_only.conf;
+	# ----------------------------------------------------------------------
+}
+
+# ----------------------------------------------------------------------
+# | Config file for non-secure host                                |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:80;
+	listen 80;
+	server_name ao.cleberg.net;
+
+	return 301 https://$host$request_uri;
+}
diff --git a/linux/nginx/etc/nginx/conf.d/art.conf b/linux/nginx/etc/nginx/conf.d/art.conf
new file mode 100644
index 0000000..6ce012a
--- /dev/null
+++ b/linux/nginx/etc/nginx/conf.d/art.conf
@@ -0,0 +1,39 @@
+# ----------------------------------------------------------------------
+# | Config file for host                                   |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:443 ssl;
+	listen 443 ssl;
+	http2 on;
+
+	server_name art.cleberg.net;
+
+	include custom.d/tls/ssl_engine.conf;
+	include custom.d/tls/certificate_files.conf;
+	include custom.d/tls/policy_balanced.conf;
+	include custom.d/basic.conf;
+
+	# ----------------------------------------------------------------------
+	# | Custom rules & config for specific website                     |
+	# ----------------------------------------------------------------------
+	location / {
+                set $upstream http://127.0.0.1:3003;
+                proxy_pass $upstream;
+
+		include custom.d/reverse_proxy/basic.conf;
+	}
+
+        include custom.d/security/robots_index_only.conf;
+	# ----------------------------------------------------------------------
+}
+
+# ----------------------------------------------------------------------
+# | Config file for non-secure host                                |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:80;
+	listen 80;
+	server_name art.cleberg.net;
+
+	return 301 https://$host$request_uri;
+}
diff --git a/linux/nginx/etc/nginx/conf.d/auth.conf b/linux/nginx/etc/nginx/conf.d/auth.conf
new file mode 100644
index 0000000..31c0a86
--- /dev/null
+++ b/linux/nginx/etc/nginx/conf.d/auth.conf
@@ -0,0 +1,42 @@
+# ----------------------------------------------------------------------
+# | Config file for host                                   |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:443 ssl;
+	listen 443 ssl;
+	http2 on;
+
+	server_name auth.cleberg.net;
+
+	include custom.d/tls/ssl_engine.conf;
+	include custom.d/tls/certificate_files.conf;
+	include custom.d/tls/policy_balanced.conf;
+	include custom.d/basic.conf;
+
+	# ----------------------------------------------------------------------
+	# | Custom rules & config for specific website                     |
+	# ----------------------------------------------------------------------
+        set $upstream http://127.0.0.1:9092;
+
+	location / {
+                proxy_pass $upstream;
+
+		include custom.d/reverse_proxy/basic.conf;
+	}
+
+	location /api/verify {
+                proxy_pass $upstream;
+	}
+	# ----------------------------------------------------------------------
+}
+
+# ----------------------------------------------------------------------
+# | Config file for non-secure host                                |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:80;
+	listen 80;
+	server_name auth.cleberg.net;
+
+	return 301 https://$host$request_uri;
+}
diff --git a/linux/nginx/etc/nginx/conf.d/br.conf b/linux/nginx/etc/nginx/conf.d/br.conf
new file mode 100644
index 0000000..414b703
--- /dev/null
+++ b/linux/nginx/etc/nginx/conf.d/br.conf
@@ -0,0 +1,39 @@
+# ----------------------------------------------------------------------
+# | Config file for host                                   |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:443 ssl;
+	listen 443 ssl;
+	http2 on;
+
+	server_name br.cleberg.net;
+
+	include custom.d/tls/ssl_engine.conf;
+	include custom.d/tls/certificate_files.conf;
+	include custom.d/tls/policy_balanced.conf;
+	include custom.d/basic.conf;
+
+	# ----------------------------------------------------------------------
+	# | Custom rules & config for specific website                     |
+	# ----------------------------------------------------------------------
+	location / {
+                set $upstream http://127.0.0.1:3030;
+                proxy_pass $upstream;
+
+		include custom.d/reverse_proxy/basic.conf;
+	}
+
+        include custom.d/security/robots_index_only.conf;
+	# ----------------------------------------------------------------------
+}
+
+# ----------------------------------------------------------------------
+# | Config file for non-secure host                                |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:80;
+	listen 80;
+	server_name br.cleberg.net;
+
+	return 301 https://$host$request_uri;
+}
diff --git a/linux/nginx/etc/nginx/conf.d/bt.conf b/linux/nginx/etc/nginx/conf.d/bt.conf
new file mode 100644
index 0000000..1fa0bfa
--- /dev/null
+++ b/linux/nginx/etc/nginx/conf.d/bt.conf
@@ -0,0 +1,46 @@
+# ----------------------------------------------------------------------
+# | Config file for host                                   |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:443 ssl;
+	listen 443 ssl;
+	http2 on;
+
+	server_name bt.cleberg.net;
+
+	include custom.d/tls/ssl_engine.conf;
+	include custom.d/tls/certificate_files.conf;
+	include custom.d/tls/policy_balanced.conf;
+	include custom.d/basic.conf;
+
+	# ----------------------------------------------------------------------
+	# | Custom rules & config for specific website                     |
+	# ----------------------------------------------------------------------
+        set $upstream http://127.0.0.1:9091;
+
+	location /authelia {
+		include custom.d/reverse_proxy/authelia.conf;
+	}
+
+	location / {
+                proxy_pass $upstream;
+
+		include custom.d/reverse_proxy/authelia_request.conf;
+		# include custom.d/reverse_proxy/basic.conf;
+		proxy_pass_header X-bt-Session-Id;
+	}
+
+        include custom.d/security/robots_index_only.conf;
+	# ----------------------------------------------------------------------
+}
+
+# ----------------------------------------------------------------------
+# | Config file for non-secure host                                |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:80;
+	listen 80;
+	server_name bt.cleberg.net;
+
+	return 301 https://$host$request_uri;
+}
diff --git a/linux/nginx/etc/nginx/conf.d/bw.conf b/linux/nginx/etc/nginx/conf.d/bw.conf
new file mode 100644
index 0000000..af63166
--- /dev/null
+++ b/linux/nginx/etc/nginx/conf.d/bw.conf
@@ -0,0 +1,39 @@
+# ----------------------------------------------------------------------
+# | Config file for host                                   |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:443 ssl;
+	listen 443 ssl;
+	http2 on;
+
+	server_name bw.cleberg.net;
+
+	include custom.d/tls/ssl_engine.conf;
+	include custom.d/tls/certificate_files.conf;
+	include custom.d/tls/policy_balanced.conf;
+	include custom.d/basic.conf;
+
+	# ----------------------------------------------------------------------
+	# | Custom rules & config for specific website                     |
+	# ----------------------------------------------------------------------
+	location / {
+                set $upstream http://127.0.0.1:10416;
+                proxy_pass $upstream;
+
+		include custom.d/reverse_proxy/basic.conf;
+	}
+
+        include custom.d/security/robots_index_only.conf;
+	# ----------------------------------------------------------------------
+}
+
+# ----------------------------------------------------------------------
+# | Config file for non-secure host                                |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:80;
+	listen 80;
+	server_name bw.cleberg.net;
+
+	return 301 https://$host$request_uri;
+}
diff --git a/linux/nginx/etc/nginx/conf.d/cc.conf b/linux/nginx/etc/nginx/conf.d/cc.conf
new file mode 100644
index 0000000..a3978b1
--- /dev/null
+++ b/linux/nginx/etc/nginx/conf.d/cc.conf
@@ -0,0 +1,39 @@
+# ----------------------------------------------------------------------
+# | Config file for host                                   |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:443 ssl;
+	listen 443 ssl;
+	http2 on;
+
+	server_name cc.cleberg.net;
+
+	include custom.d/tls/ssl_engine.conf;
+	include custom.d/tls/certificate_files.conf;
+	include custom.d/tls/policy_balanced.conf;
+	include custom.d/basic.conf;
+
+	# ----------------------------------------------------------------------
+	# | Custom rules & config for specific website                     |
+	# ----------------------------------------------------------------------
+	location / {
+                set $upstream http://127.0.0.1:8111;
+                proxy_pass $upstream;
+
+		include custom.d/reverse_proxy/basic.conf;
+	}
+
+        include custom.d/security/robots_index_only.conf;
+	# ----------------------------------------------------------------------
+}
+
+# ----------------------------------------------------------------------
+# | Config file for non-secure host                                |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:80;
+	listen 80;
+	server_name cc.cleberg.net;
+
+	return 301 https://$host$request_uri;
+}
diff --git a/linux/nginx/etc/nginx/conf.d/ddns.conf b/linux/nginx/etc/nginx/conf.d/ddns.conf
new file mode 100644
index 0000000..9915c1c
--- /dev/null
+++ b/linux/nginx/etc/nginx/conf.d/ddns.conf
@@ -0,0 +1,44 @@
+# ----------------------------------------------------------------------
+# | Config file for host                                   |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:443 ssl;
+	listen 443 ssl;
+	http2 on;
+
+	server_name ddns.cleberg.net;
+
+	include custom.d/tls/ssl_engine.conf;
+	include custom.d/tls/certificate_files.conf;
+	include custom.d/tls/policy_balanced.conf;
+	include custom.d/basic.conf;
+
+	# ----------------------------------------------------------------------
+	# | Custom rules & config for specific website                     |
+	# ----------------------------------------------------------------------
+	location /authelia {
+		include custom.d/reverse_proxy/authelia.conf;
+	}
+
+	location / {
+                set $upstream http://127.0.0.1:8097;
+                proxy_pass $upstream;
+
+		include custom.d/reverse_proxy/authelia_request.conf;
+		include custom.d/reverse_proxy/basic.conf;
+	}
+
+        include custom.d/security/robots_index_only.conf;
+	# ----------------------------------------------------------------------
+}
+
+# ----------------------------------------------------------------------
+# | Config file for non-secure host                                |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:80;
+	listen 80;
+	server_name ddns.cleberg.net;
+
+	return 301 https://$host$request_uri;
+}
diff --git a/linux/nginx/etc/nginx/conf.d/docker.conf b/linux/nginx/etc/nginx/conf.d/docker.conf
new file mode 100644
index 0000000..4fab091
--- /dev/null
+++ b/linux/nginx/etc/nginx/conf.d/docker.conf
@@ -0,0 +1,44 @@
+# ----------------------------------------------------------------------
+# | Config file for host                                   |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:443 ssl;
+	listen 443 ssl;
+	http2 on;
+
+	server_name docker.cleberg.net;
+
+	include custom.d/tls/ssl_engine.conf;
+	include custom.d/tls/certificate_files.conf;
+	include custom.d/tls/policy_balanced.conf;
+	include custom.d/basic.conf;
+
+	# ----------------------------------------------------------------------
+	# | Custom rules & config for specific website                     |
+	# ----------------------------------------------------------------------
+	location /authelia {
+		include custom.d/reverse_proxy/authelia.conf;
+	}
+
+	location / {
+                set $upstream http://127.0.0.1:3777;
+                proxy_pass $upstream;
+
+		include custom.d/reverse_proxy/authelia_request.conf;
+		include custom.d/reverse_proxy/basic.conf;
+	}
+
+        include custom.d/security/robots_index_only.conf;
+	# ----------------------------------------------------------------------
+}
+
+# ----------------------------------------------------------------------
+# | Config file for non-secure host                                |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:80;
+	listen 80;
+	server_name docker.cleberg.net;
+
+	return 301 https://$host$request_uri;
+}
diff --git a/linux/nginx/etc/nginx/conf.d/gh.conf b/linux/nginx/etc/nginx/conf.d/gh.conf
new file mode 100644
index 0000000..9b05a7f
--- /dev/null
+++ b/linux/nginx/etc/nginx/conf.d/gh.conf
@@ -0,0 +1,39 @@
+# ----------------------------------------------------------------------
+# | Config file for host                                   |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:443 ssl;
+	listen 443 ssl;
+	http2 on;
+
+	server_name gh.cleberg.net;
+
+	include custom.d/tls/ssl_engine.conf;
+	include custom.d/tls/certificate_files.conf;
+	include custom.d/tls/policy_balanced.conf;
+	include custom.d/basic.conf;
+
+	# ----------------------------------------------------------------------
+	# | Custom rules & config for specific website                     |
+	# ----------------------------------------------------------------------
+	location / {
+                set $upstream http://192.168.0.251:3039;
+                proxy_pass $upstream;
+
+		include custom.d/reverse_proxy/basic.conf;
+	}
+
+	include custom.d/security/robots_index_only.conf;
+	# ----------------------------------------------------------------------
+}
+
+# ----------------------------------------------------------------------
+# | Config file for non-secure host                                |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:80;
+	listen 80;
+	server_name gh.cleberg.net;
+
+	return 301 https://$host$request_uri;
+}
diff --git a/linux/nginx/etc/nginx/conf.d/ha.conf b/linux/nginx/etc/nginx/conf.d/ha.conf
new file mode 100644
index 0000000..63ed76c
--- /dev/null
+++ b/linux/nginx/etc/nginx/conf.d/ha.conf
@@ -0,0 +1,46 @@
+# ----------------------------------------------------------------------
+# | Config file for host                                   |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:443 ssl;
+	listen 443 ssl;
+	http2 on;
+
+	server_name ha.cleberg.net;
+
+	include custom.d/tls/ssl_engine.conf;
+	include custom.d/tls/certificate_files.conf;
+	include custom.d/tls/policy_balanced.conf;
+	include custom.d/basic.conf;
+
+	# ----------------------------------------------------------------------
+	# | Custom rules & config for specific website                     |
+	# ----------------------------------------------------------------------
+        set $upstream http://192.168.0.214:8123;
+
+	location / {
+                proxy_pass $upstream;
+		proxy_set_header X-Forwarded-For $remote_addr;
+	}
+
+	location /api/websocket {
+		proxy_pass $upstream;
+		proxy_http_version 1.1;
+		proxy_set_header Upgrade $http_upgrade;
+		proxy_set_header Connection "upgrade";
+	}
+
+        include custom.d/security/robots_index_only.conf;
+	# ----------------------------------------------------------------------
+}
+
+# ----------------------------------------------------------------------
+# | Config file for non-secure host                                |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:80;
+	listen 80;
+	server_name ha.cleberg.net;
+
+	return 301 https://$host$request_uri;
+}
diff --git a/linux/nginx/etc/nginx/conf.d/hat.conf b/linux/nginx/etc/nginx/conf.d/hat.conf
new file mode 100644
index 0000000..4d9da2c
--- /dev/null
+++ b/linux/nginx/etc/nginx/conf.d/hat.conf
@@ -0,0 +1,39 @@
+# ----------------------------------------------------------------------
+# | Config file for host                                   |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:443 ssl;
+	listen 443 ssl;
+	http2 on;
+
+	server_name hat.cleberg.net;
+
+	include custom.d/tls/ssl_engine.conf;
+	include custom.d/tls/certificate_files.conf;
+	include custom.d/tls/policy_balanced.conf;
+	include custom.d/basic.conf;
+
+	# ----------------------------------------------------------------------
+	# | Custom rules & config for specific website                     |
+	# ----------------------------------------------------------------------
+	location / {
+                set $upstream http://192.168.0.251:3991;
+                proxy_pass $upstream;
+
+		include custom.d/reverse_proxy/basic.conf;
+	}
+
+        include custom.d/security/robots_index_only.conf;
+	# ----------------------------------------------------------------------
+}
+
+# ----------------------------------------------------------------------
+# | Config file for non-secure host                                |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:80;
+	listen 80;
+	server_name hat.cleberg.net;
+
+	return 301 https://$host$request_uri;
+}
diff --git a/linux/nginx/etc/nginx/conf.d/irc.conf b/linux/nginx/etc/nginx/conf.d/irc.conf
new file mode 100644
index 0000000..0d8af19
--- /dev/null
+++ b/linux/nginx/etc/nginx/conf.d/irc.conf
@@ -0,0 +1,44 @@
+# ----------------------------------------------------------------------
+# | Config file for host                                   |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:443 ssl;
+	listen 443 ssl;
+	http2 on;
+
+	server_name irc.cleberg.net;
+
+	include custom.d/tls/ssl_engine.conf;
+	include custom.d/tls/certificate_files.conf;
+	include custom.d/tls/policy_balanced.conf;
+	include custom.d/basic.conf;
+
+	# ----------------------------------------------------------------------
+	# | Custom rules & config for specific website                     |
+	# ----------------------------------------------------------------------
+	location /authelia {
+		include custom.d/reverse_proxy/authelia.conf;
+	}
+
+	location / {
+                set $upstream http://192.168.0.251:9900;
+                proxy_pass $upstream;
+
+		include custom.d/reverse_proxy/authelia_request.conf;
+		include custom.d/reverse_proxy/basic.conf;
+	}
+
+        include custom.d/security/robots_index_only.conf;
+	# ----------------------------------------------------------------------
+}
+
+# ----------------------------------------------------------------------
+# | Config file for non-secure host                                |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:80;
+	listen 80;
+	server_name irc.cleberg.net;
+
+	return 301 https://$host$request_uri;
+}
diff --git a/linux/nginx/etc/nginx/conf.d/ld.conf b/linux/nginx/etc/nginx/conf.d/ld.conf
new file mode 100644
index 0000000..5c03fca
--- /dev/null
+++ b/linux/nginx/etc/nginx/conf.d/ld.conf
@@ -0,0 +1,39 @@
+# ----------------------------------------------------------------------
+# | Config file for host                                   |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:443 ssl;
+	listen 443 ssl;
+	http2 on;
+
+	server_name ld.cleberg.net;
+
+	include custom.d/tls/ssl_engine.conf;
+	include custom.d/tls/certificate_files.conf;
+	include custom.d/tls/policy_balanced.conf;
+	include custom.d/basic.conf;
+
+	# ----------------------------------------------------------------------
+	# | Custom rules & config for specific website                     |
+	# ----------------------------------------------------------------------
+	location / {
+                set $upstream http://127.0.0.1:3004;
+                proxy_pass $upstream;
+
+		include custom.d/reverse_proxy/basic.conf;
+	}
+
+        include custom.d/security/robots_index_only.conf;
+	# ----------------------------------------------------------------------
+}
+
+# ----------------------------------------------------------------------
+# | Config file for non-secure host                                |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:80;
+	listen 80;
+	server_name ld.cleberg.net;
+
+	return 301 https://$host$request_uri;
+}
diff --git a/linux/nginx/etc/nginx/conf.d/lemmy.conf b/linux/nginx/etc/nginx/conf.d/lemmy.conf
new file mode 100644
index 0000000..1e3fffa
--- /dev/null
+++ b/linux/nginx/etc/nginx/conf.d/lemmy.conf
@@ -0,0 +1,39 @@
+# ----------------------------------------------------------------------
+# | Config file for host                                   |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:443 ssl;
+	listen 443 ssl;
+	http2 on;
+
+	server_name lemmy.cleberg.net;
+
+	include custom.d/tls/ssl_engine.conf;
+	include custom.d/tls/certificate_files.conf;
+	include custom.d/tls/policy_balanced.conf;
+	include custom.d/basic.conf;
+
+	# ----------------------------------------------------------------------
+	# | Custom rules & config for specific website                     |
+	# ----------------------------------------------------------------------
+	location / {
+                set $upstream http://127.0.0.1:10633;
+                proxy_pass $upstream;
+
+		include custom.d/reverse_proxy/basic.conf;
+	}
+
+        include custom.d/security/robots_index_only.conf;
+	# ----------------------------------------------------------------------
+}
+
+# ----------------------------------------------------------------------
+# | Config file for non-secure host                                |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:80;
+	listen 80;
+	server_name lemmy.cleberg.net;
+
+	return 301 https://$host$request_uri;
+}
diff --git a/linux/nginx/etc/nginx/conf.d/lt.conf b/linux/nginx/etc/nginx/conf.d/lt.conf
new file mode 100644
index 0000000..620f02b
--- /dev/null
+++ b/linux/nginx/etc/nginx/conf.d/lt.conf
@@ -0,0 +1,39 @@
+# ----------------------------------------------------------------------
+# | Config file for host                                   |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:443 ssl;
+	listen 443 ssl;
+	http2 on;
+
+	server_name lt.cleberg.net;
+
+	include custom.d/tls/ssl_engine.conf;
+	include custom.d/tls/certificate_files.conf;
+	include custom.d/tls/policy_balanced.conf;
+	include custom.d/basic.conf;
+
+	# ----------------------------------------------------------------------
+	# | Custom rules & config for specific website                     |
+	# ----------------------------------------------------------------------
+	location / {
+                set $upstream http://127.0.0.1:5000;
+                proxy_pass $upstream;
+
+		include custom.d/reverse_proxy/basic.conf;
+	}
+
+        include custom.d/security/robots_index_only.conf;
+	# ----------------------------------------------------------------------
+}
+
+# ----------------------------------------------------------------------
+# | Config file for non-secure host                                |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:80;
+	listen 80;
+	server_name lt.cleberg.net;
+
+	return 301 https://$host$request_uri;
+}
diff --git a/linux/nginx/etc/nginx/conf.d/mz.conf b/linux/nginx/etc/nginx/conf.d/mz.conf
new file mode 100644
index 0000000..df7d7b2
--- /dev/null
+++ b/linux/nginx/etc/nginx/conf.d/mz.conf
@@ -0,0 +1,39 @@
+# ----------------------------------------------------------------------
+# | Config file for host                                   |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:443 ssl;
+	listen 443 ssl;
+	http2 on;
+
+	server_name mz.cleberg.net;
+
+	include custom.d/tls/ssl_engine.conf;
+	include custom.d/tls/certificate_files.conf;
+	include custom.d/tls/policy_balanced.conf;
+	include custom.d/basic.conf;
+
+	# ----------------------------------------------------------------------
+	# | Custom rules & config for specific website                     |
+	# ----------------------------------------------------------------------
+	location / {
+                set $upstream http://127.0.0.1:3474;
+                proxy_pass $upstream;
+
+		include custom.d/reverse_proxy/basic.conf;
+	}
+
+        include custom.d/security/robots_index_only.conf;
+	# ----------------------------------------------------------------------
+}
+
+# ----------------------------------------------------------------------
+# | Config file for non-secure host                                |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:80;
+	listen 80;
+	server_name mz.cleberg.net;
+
+	return 301 https://$host$request_uri;
+}
diff --git a/linux/nginx/etc/nginx/conf.d/paste.conf b/linux/nginx/etc/nginx/conf.d/paste.conf
new file mode 100644
index 0000000..9164097
--- /dev/null
+++ b/linux/nginx/etc/nginx/conf.d/paste.conf
@@ -0,0 +1,39 @@
+# ----------------------------------------------------------------------
+# | Config file for host                                   |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:443 ssl;
+	listen 443 ssl;
+	http2 on;
+
+	server_name paste.cleberg.net;
+
+	include custom.d/tls/ssl_engine.conf;
+	include custom.d/tls/certificate_files.conf;
+	include custom.d/tls/policy_balanced.conf;
+	include custom.d/basic.conf;
+
+	# ----------------------------------------------------------------------
+	# | Custom rules & config for specific website                     |
+	# ----------------------------------------------------------------------
+	location / {
+                set $upstream http://127.0.0.1:8084;
+                proxy_pass $upstream;
+
+		include custom.d/reverse_proxy/basic.conf;
+	}
+
+        include custom.d/security/robots_index_only.conf;
+	# ----------------------------------------------------------------------
+}
+
+# ----------------------------------------------------------------------
+# | Config file for non-secure host                                |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:80;
+	listen 80;
+	server_name paste.cleberg.net;
+
+	return 301 https://$host$request_uri;
+}
diff --git a/linux/nginx/etc/nginx/conf.d/pb.conf b/linux/nginx/etc/nginx/conf.d/pb.conf
new file mode 100644
index 0000000..4adbc0a
--- /dev/null
+++ b/linux/nginx/etc/nginx/conf.d/pb.conf
@@ -0,0 +1,39 @@
+# ----------------------------------------------------------------------
+# | Config file for host                                   |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:443 ssl;
+	listen 443 ssl;
+	http2 on;
+
+	server_name pb.cleberg.net;
+
+	include custom.d/tls/ssl_engine.conf;
+	include custom.d/tls/certificate_files.conf;
+	include custom.d/tls/policy_balanced.conf;
+	include custom.d/basic.conf;
+
+	# ----------------------------------------------------------------------
+	# | Custom rules & config for specific website                     |
+	# ----------------------------------------------------------------------
+	location / {
+                set $upstream http://127.0.0.1:8745;
+                proxy_pass $upstream;
+
+		include custom.d/reverse_proxy/basic.conf;
+	}
+
+        # include custom.d/security/robots_index_only.conf;
+	# ----------------------------------------------------------------------
+}
+
+# ----------------------------------------------------------------------
+# | Config file for non-secure host                                |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:80;
+	listen 80;
+	server_name pb.cleberg.net;
+
+	return 301 https://$host$request_uri;
+}
diff --git a/linux/nginx/etc/nginx/conf.d/photos.conf b/linux/nginx/etc/nginx/conf.d/photos.conf
new file mode 100644
index 0000000..1a1e41a
--- /dev/null
+++ b/linux/nginx/etc/nginx/conf.d/photos.conf
@@ -0,0 +1,54 @@
+# ----------------------------------------------------------------------
+# | Config file for host                                   |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:443 ssl;
+	listen 443 ssl;
+	http2 on;
+
+	server_name photos.cleberg.net;
+
+	include custom.d/tls/ssl_engine.conf;
+	include custom.d/tls/certificate_files.conf;
+	include custom.d/tls/policy_balanced.conf;
+	include custom.d/basic.conf;
+
+	# ----------------------------------------------------------------------
+	# | Custom rules & config for specific website                     |
+	# ----------------------------------------------------------------------
+	# allow large file uploads
+	client_max_body_size 50000M;
+
+	# Set headers
+	proxy_set_header Host              $host;
+	proxy_set_header X-Real-IP         $remote_addr;
+	proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;
+	proxy_set_header X-Forwarded-Proto $scheme;
+
+	# enable websockets: http://nginx.org/en/docs/http/websocket.html
+	proxy_http_version 1.1;
+	proxy_set_header   Upgrade    $http_upgrade;
+	proxy_set_header   Connection "upgrade";
+	proxy_redirect     off;
+
+	# set timeout
+	proxy_read_timeout 600s;
+	proxy_send_timeout 600s;
+	send_timeout       600s;
+
+	location / {
+		proxy_pass http://127.0.0.1:2283;
+	}
+	# ----------------------------------------------------------------------
+}
+
+# ----------------------------------------------------------------------
+# | Config file for non-secure host                                |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:80;
+	listen 80;
+	server_name photos.cleberg.net;
+
+	return 301 https://$host$request_uri;
+}
diff --git a/linux/nginx/etc/nginx/conf.d/pin.conf b/linux/nginx/etc/nginx/conf.d/pin.conf
new file mode 100644
index 0000000..228cfd0
--- /dev/null
+++ b/linux/nginx/etc/nginx/conf.d/pin.conf
@@ -0,0 +1,39 @@
+# ----------------------------------------------------------------------
+# | Config file for host                                   |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:443 ssl;
+	listen 443 ssl;
+	http2 on;
+
+	server_name pin.cleberg.net;
+
+	include custom.d/tls/ssl_engine.conf;
+	include custom.d/tls/certificate_files.conf;
+	include custom.d/tls/policy_balanced.conf;
+	include custom.d/basic.conf;
+
+	# ----------------------------------------------------------------------
+	# | Custom rules & config for specific website                     |
+	# ----------------------------------------------------------------------
+	location / {
+                set $upstream http://127.0.0.1:8086;
+                proxy_pass $upstream;
+
+		include custom.d/reverse_proxy/basic.conf;
+	}
+
+        include custom.d/security/robots_index_only.conf;
+	# ----------------------------------------------------------------------
+}
+
+# ----------------------------------------------------------------------
+# | Config file for non-secure host                                |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:80;
+	listen 80;
+	server_name pin.cleberg.net;
+
+	return 301 https://$host$request_uri;
+}
diff --git a/linux/nginx/etc/nginx/conf.d/piped.conf b/linux/nginx/etc/nginx/conf.d/piped.conf
new file mode 100644
index 0000000..8efa6aa
--- /dev/null
+++ b/linux/nginx/etc/nginx/conf.d/piped.conf
@@ -0,0 +1,40 @@
+# ----------------------------------------------------------------------
+# | Config file for host                                   |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:443 ssl;
+	listen 443 ssl;
+	http2 on;
+
+	server_name piped.cleberg.net pipedapi.cleberg.net pipedproxy.cleberg.net;
+
+	include custom.d/tls/ssl_engine.conf;
+	include custom.d/tls/certificate_files.conf;
+	include custom.d/tls/policy_balanced.conf;
+	include custom.d/basic.conf;
+
+	# ----------------------------------------------------------------------
+	# | Custom rules & config for specific website                     |
+	# ----------------------------------------------------------------------
+	location / {
+                set $upstream http://127.0.0.1:8077;
+                proxy_pass $upstream;
+
+		proxy_set_header Host $host;
+		# include custom.d/reverse_proxy/basic.conf;
+	}
+
+        include custom.d/security/robots_index_only.conf;
+	# ----------------------------------------------------------------------
+}
+
+# ----------------------------------------------------------------------
+# | Config file for non-secure host                                |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:80;
+	listen 80;
+	server_name piped.cleberg.net pipedapi.cleberg.net pipedproxy.cleberg.net;
+
+	return 301 https://$host$request_uri;
+}
diff --git a/linux/nginx/etc/nginx/conf.d/rd.conf b/linux/nginx/etc/nginx/conf.d/rd.conf
new file mode 100644
index 0000000..bea88da
--- /dev/null
+++ b/linux/nginx/etc/nginx/conf.d/rd.conf
@@ -0,0 +1,39 @@
+# ----------------------------------------------------------------------
+# | Config file for host                                   |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:443 ssl;
+	listen 443 ssl;
+	http2 on;
+
+	server_name rd.cleberg.net;
+
+	include custom.d/tls/ssl_engine.conf;
+	include custom.d/tls/certificate_files.conf;
+	include custom.d/tls/policy_balanced.conf;
+	include custom.d/basic.conf;
+
+	# ----------------------------------------------------------------------
+	# | Custom rules & config for specific website                     |
+	# ----------------------------------------------------------------------
+	location / {
+                set $upstream http://127.0.0.1:5758;
+                proxy_pass $upstream;
+
+		include custom.d/reverse_proxy/basic.conf;
+	}
+
+        include custom.d/security/robots_index_only.conf;
+	# ----------------------------------------------------------------------
+}
+
+# ----------------------------------------------------------------------
+# | Config file for non-secure host                                |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:80;
+	listen 80;
+	server_name rd.cleberg.net;
+
+	return 301 https://$host$request_uri;
+}
diff --git a/linux/nginx/etc/nginx/conf.d/rimgo.conf b/linux/nginx/etc/nginx/conf.d/rimgo.conf
new file mode 100644
index 0000000..2d1272f
--- /dev/null
+++ b/linux/nginx/etc/nginx/conf.d/rimgo.conf
@@ -0,0 +1,39 @@
+# ----------------------------------------------------------------------
+# | Config file for host                                   |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:443 ssl;
+	listen 443 ssl;
+	http2 on;
+
+	server_name rimgo.cleberg.net;
+
+	include custom.d/tls/ssl_engine.conf;
+	include custom.d/tls/certificate_files.conf;
+	include custom.d/tls/policy_balanced.conf;
+	include custom.d/basic.conf;
+
+	# ----------------------------------------------------------------------
+	# | Custom rules & config for specific website                     |
+	# ----------------------------------------------------------------------
+	location / {
+                set $upstream http://127.0.0.1:3869;
+                proxy_pass $upstream;
+
+		include custom.d/reverse_proxy/basic.conf;
+	}
+
+        include custom.d/security/robots_index_only.conf;
+	# ----------------------------------------------------------------------
+}
+
+# ----------------------------------------------------------------------
+# | Config file for non-secure host                                |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:80;
+	listen 80;
+	server_name rimgo.cleberg.net;
+
+	return 301 https://$host$request_uri;
+}
diff --git a/linux/nginx/etc/nginx/conf.d/rl.conf b/linux/nginx/etc/nginx/conf.d/rl.conf
new file mode 100644
index 0000000..d00f563
--- /dev/null
+++ b/linux/nginx/etc/nginx/conf.d/rl.conf
@@ -0,0 +1,44 @@
+# ----------------------------------------------------------------------
+# | Config file for host                                   |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:443 ssl;
+	listen 443 ssl;
+	http2 on;
+
+	server_name rl.cleberg.net;
+
+	include custom.d/tls/ssl_engine.conf;
+	include custom.d/tls/certificate_files.conf;
+	include custom.d/tls/policy_balanced.conf;
+	include custom.d/basic.conf;
+
+	# ----------------------------------------------------------------------
+	# | Custom rules & config for specific website                     |
+	# ----------------------------------------------------------------------
+	location /authelia {
+		include custom.d/reverse_proxy/authelia.conf;
+	}
+
+	location / {
+                set $upstream http://192.168.0.251:8983;
+                proxy_pass $upstream;
+
+		include custom.d/reverse_proxy/authelia_request.conf;
+		include custom.d/reverse_proxy/basic.conf;
+	}
+
+        include custom.d/security/robots_index_only.conf;
+	# ----------------------------------------------------------------------
+}
+
+# ----------------------------------------------------------------------
+# | Config file for non-secure host                                |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:80;
+	listen 80;
+	server_name rl.cleberg.net;
+
+	return 301 https://$host$request_uri;
+}
diff --git a/linux/nginx/etc/nginx/conf.d/rss.conf b/linux/nginx/etc/nginx/conf.d/rss.conf
new file mode 100644
index 0000000..a097b50
--- /dev/null
+++ b/linux/nginx/etc/nginx/conf.d/rss.conf
@@ -0,0 +1,58 @@
+# ----------------------------------------------------------------------
+# | Config file for host                                   |
+# ----------------------------------------------------------------------
+upstream freshrss {
+	server 192.168.0.251:8081;
+	keepalive 64;
+}
+
+server {
+	listen [::]:443 ssl;
+	listen 443 ssl;
+	http2 on;
+
+	server_name rss.cleberg.net;
+
+	include custom.d/tls/ssl_engine.conf;
+	include custom.d/tls/certificate_files.conf;
+	include custom.d/tls/policy_balanced.conf;
+	include custom.d/basic.conf;
+
+	# ----------------------------------------------------------------------
+	# | Custom rules & config for specific website                     |
+	# ----------------------------------------------------------------------
+	location / {
+                proxy_pass http://freshrss/;
+
+		# include custom.d/reverse_proxy/basic.conf;
+
+		add_header X-Frame-Options SAMEORIGIN;
+		add_header X-XSS-Protection "1; mode=block";
+		proxy_redirect off;
+		proxy_buffering off;
+		proxy_set_header Host $host;
+		proxy_set_header X-Real-IP $remote_addr;
+		proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+		proxy_set_header X-Forwarded-Proto $scheme;
+		proxy_set_header X-Forwarded-Port $server_port;
+		proxy_read_timeout 90;
+
+		# Forward the Authorization header for the Google Reader API.
+		proxy_set_header Authorization $http_authorization;
+		proxy_pass_header Authorization;
+	}
+
+        include custom.d/security/robots_index_only.conf;
+	# ----------------------------------------------------------------------
+}
+
+# ----------------------------------------------------------------------
+# | Config file for non-secure host                                |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:80;
+	listen 80;
+	server_name rss.cleberg.net;
+
+	return 301 https://$host$request_uri;
+}
diff --git a/linux/nginx/etc/nginx/conf.d/search.conf b/linux/nginx/etc/nginx/conf.d/search.conf
new file mode 100644
index 0000000..8ba49b0
--- /dev/null
+++ b/linux/nginx/etc/nginx/conf.d/search.conf
@@ -0,0 +1,44 @@
+# ----------------------------------------------------------------------
+# | Config file for host                                   |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:443 ssl;
+	listen 443 ssl;
+	http2 on;
+
+	server_name search.cleberg.net;
+
+	include custom.d/tls/ssl_engine.conf;
+	include custom.d/tls/certificate_files.conf;
+	include custom.d/tls/policy_balanced.conf;
+	include custom.d/basic.conf;
+
+	# ----------------------------------------------------------------------
+	# | Custom rules & config for specific website                     |
+	# ----------------------------------------------------------------------
+	location / {
+                set $upstream http://127.0.0.1:9191;
+                proxy_pass $upstream;
+
+		# include custom.d/reverse_proxy/basic.conf;
+		proxy_set_header   Host $host;
+		proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
+		proxy_set_header   Upgrade $http_upgrade;
+		proxy_set_header   Connection "upgrade";
+		proxy_http_version 1.1;
+	}
+
+        include custom.d/security/robots_index_only.conf;
+	# ----------------------------------------------------------------------
+}
+
+# ----------------------------------------------------------------------
+# | Config file for non-secure host                                |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:80;
+	listen 80;
+	server_name search.cleberg.net;
+
+	return 301 https://$host$request_uri;
+}
diff --git a/linux/nginx/etc/nginx/conf.d/send.conf b/linux/nginx/etc/nginx/conf.d/send.conf
new file mode 100644
index 0000000..0314bb5
--- /dev/null
+++ b/linux/nginx/etc/nginx/conf.d/send.conf
@@ -0,0 +1,39 @@
+# ----------------------------------------------------------------------
+# | Config file for host                                   |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:443 ssl;
+	listen 443 ssl;
+	http2 on;
+
+	server_name send.cleberg.net;
+
+	include custom.d/tls/ssl_engine.conf;
+	include custom.d/tls/certificate_files.conf;
+	include custom.d/tls/policy_balanced.conf;
+	include custom.d/basic.conf;
+
+	# ----------------------------------------------------------------------
+	# | Custom rules & config for specific website                     |
+	# ----------------------------------------------------------------------
+	location / {
+                set $upstream http://192.168.0.251:1443;
+                proxy_pass $upstream;
+
+		include custom.d/reverse_proxy/basic.conf;
+	}
+
+        include custom.d/security/robots_index_only.conf;
+	# ----------------------------------------------------------------------
+}
+
+# ----------------------------------------------------------------------
+# | Config file for non-secure host                                |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:80;
+	listen 80;
+	server_name send.cleberg.net;
+
+	return 301 https://$host$request_uri;
+}
diff --git a/linux/nginx/etc/nginx/conf.d/slash.conf b/linux/nginx/etc/nginx/conf.d/slash.conf
new file mode 100644
index 0000000..b7489dd
--- /dev/null
+++ b/linux/nginx/etc/nginx/conf.d/slash.conf
@@ -0,0 +1,39 @@
+# ----------------------------------------------------------------------
+# | Config file for host                                   |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:443 ssl;
+	listen 443 ssl;
+	http2 on;
+
+	server_name slash.cleberg.net;
+
+	include custom.d/tls/ssl_engine.conf;
+	include custom.d/tls/certificate_files.conf;
+	include custom.d/tls/policy_balanced.conf;
+	include custom.d/basic.conf;
+
+	# ----------------------------------------------------------------------
+	# | Custom rules & config for specific website                     |
+	# ----------------------------------------------------------------------
+	location / {
+                set $upstream http://192.168.0.251:5231;
+                proxy_pass $upstream;
+
+		include custom.d/reverse_proxy/basic.conf;
+	}
+
+        include custom.d/security/robots_index_only.conf;
+	# ----------------------------------------------------------------------
+}
+
+# ----------------------------------------------------------------------
+# | Config file for non-secure host                                |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:80;
+	listen 80;
+	server_name slash.cleberg.net;
+
+	return 301 https://$host$request_uri;
+}
diff --git a/linux/nginx/etc/nginx/conf.d/small.conf b/linux/nginx/etc/nginx/conf.d/small.conf
new file mode 100644
index 0000000..1bdb145
--- /dev/null
+++ b/linux/nginx/etc/nginx/conf.d/small.conf
@@ -0,0 +1,39 @@
+# ----------------------------------------------------------------------
+# | Config file for host                                   |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:443 ssl;
+	listen 443 ssl;
+	http2 on;
+
+	server_name small.cleberg.net;
+
+	include custom.d/tls/ssl_engine.conf;
+	include custom.d/tls/certificate_files.conf;
+	include custom.d/tls/policy_balanced.conf;
+	include custom.d/basic.conf;
+
+	# ----------------------------------------------------------------------
+	# | Custom rules & config for specific website                     |
+	# ----------------------------------------------------------------------
+	location / {
+                set $upstream http://127.0.0.1:8002;
+                proxy_pass $upstream;
+
+		include custom.d/reverse_proxy/basic.conf;
+	}
+
+        include custom.d/security/robots_index_only.conf;
+	# ----------------------------------------------------------------------
+}
+
+# ----------------------------------------------------------------------
+# | Config file for non-secure host                                |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:80;
+	listen 80;
+	server_name small.cleberg.net;
+
+	return 301 https://$host$request_uri;
+}
diff --git a/linux/nginx/etc/nginx/conf.d/ssh.conf b/linux/nginx/etc/nginx/conf.d/ssh.conf
new file mode 100644
index 0000000..726a0d8
--- /dev/null
+++ b/linux/nginx/etc/nginx/conf.d/ssh.conf
@@ -0,0 +1,44 @@
+# ----------------------------------------------------------------------
+# | Config file for host                                   |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:443 ssl;
+	listen 443 ssl;
+	http2 on;
+
+	server_name ssh.cleberg.net;
+
+	include custom.d/tls/ssl_engine.conf;
+	include custom.d/tls/certificate_files.conf;
+	include custom.d/tls/policy_balanced.conf;
+	include custom.d/basic.conf;
+
+	# ----------------------------------------------------------------------
+	# | Custom rules & config for specific website                     |
+	# ----------------------------------------------------------------------
+	location /authelia {
+		include custom.d/reverse_proxy/authelia.conf;
+	}
+
+	location / {
+                set $upstream http://127.0.0.1:8169;
+                proxy_pass $upstream;
+
+		include custom.d/reverse_proxy/authelia_request.conf;
+		include custom.d/reverse_proxy/basic.conf;
+	}
+
+        include custom.d/security/robots_index_only.conf;
+	# ----------------------------------------------------------------------
+}
+
+# ----------------------------------------------------------------------
+# | Config file for non-secure host                                |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:80;
+	listen 80;
+	server_name ssh.cleberg.net;
+
+	return 301 https://$host$request_uri;
+}
diff --git a/linux/nginx/etc/nginx/conf.d/teddit.conf b/linux/nginx/etc/nginx/conf.d/teddit.conf
new file mode 100644
index 0000000..f96bd34
--- /dev/null
+++ b/linux/nginx/etc/nginx/conf.d/teddit.conf
@@ -0,0 +1,44 @@
+# ----------------------------------------------------------------------
+# | Config file for host                                   |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:443 ssl;
+	listen 443 ssl;
+	http2 on;
+
+	server_name teddit.cleberg.net;
+
+	include custom.d/tls/ssl_engine.conf;
+	include custom.d/tls/certificate_files.conf;
+	include custom.d/tls/policy_balanced.conf;
+	include custom.d/basic.conf;
+
+	# ----------------------------------------------------------------------
+	# | Custom rules & config for specific website                     |
+	# ----------------------------------------------------------------------
+	location /authelia {
+		include custom.d/reverse_proxy/authelia.conf;
+	}
+
+	location / {
+                set $upstream http://192.168.0.251:8181;
+                proxy_pass $upstream;
+
+		include custom.d/reverse_proxy/authelia_request.conf;
+		include custom.d/reverse_proxy/basic.conf;
+	}
+
+        include custom.d/security/robots_index_only.conf;
+	# ----------------------------------------------------------------------
+}
+
+# ----------------------------------------------------------------------
+# | Config file for non-secure host                                |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:80;
+	listen 80;
+	server_name teddit.cleberg.net;
+
+	return 301 https://$host$request_uri;
+}
diff --git a/linux/nginx/etc/nginx/conf.d/wyl.conf b/linux/nginx/etc/nginx/conf.d/wyl.conf
new file mode 100644
index 0000000..da20b69
--- /dev/null
+++ b/linux/nginx/etc/nginx/conf.d/wyl.conf
@@ -0,0 +1,44 @@
+# ----------------------------------------------------------------------
+# | Config file for host                                   |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:443 ssl;
+	listen 443 ssl;
+	http2 on;
+
+	server_name wyl.cleberg.net;
+
+	include custom.d/tls/ssl_engine.conf;
+	include custom.d/tls/certificate_files.conf;
+	include custom.d/tls/policy_balanced.conf;
+	include custom.d/basic.conf;
+
+	# ----------------------------------------------------------------------
+	# | Custom rules & config for specific website                     |
+	# ----------------------------------------------------------------------
+	location /authelia {
+		include custom.d/reverse_proxy/authelia.conf;
+	}
+
+	location / {
+                set $upstream http://192.168.0.251:8840;
+                proxy_pass $upstream;
+
+		include custom.d/reverse_proxy/authelia_request.conf;
+		include custom.d/reverse_proxy/basic.conf;
+	}
+
+        include custom.d/security/robots_index_only.conf;
+	# ----------------------------------------------------------------------
+}
+
+# ----------------------------------------------------------------------
+# | Config file for non-secure host                                |
+# ----------------------------------------------------------------------
+server {
+	listen [::]:80;
+	listen 80;
+	server_name wyl.cleberg.net;
+
+	return 301 https://$host$request_uri;
+}