From f7f50863feddf80d85aeaa15a5fd1d4d86eaa442 Mon Sep 17 00:00:00 2001
From: Edwin Lyon <edwin@thelyoncompany.com>
Date: Mon, 10 Jun 2024 14:07:40 -0700
Subject: [PATCH] bitwarden.subdomain.conf

---
 .../proxy-confs/bitwarden.subdomain.conf      | 76 +++++++++++++++++++
 1 file changed, 76 insertions(+)
 create mode 100644 swag/nginx/proxy-confs/bitwarden.subdomain.conf

diff --git a/swag/nginx/proxy-confs/bitwarden.subdomain.conf b/swag/nginx/proxy-confs/bitwarden.subdomain.conf
new file mode 100644
index 0000000..eeb7b95
--- /dev/null
+++ b/swag/nginx/proxy-confs/bitwarden.subdomain.conf
@@ -0,0 +1,76 @@
+server {
+    listen 443 ssl;
+    listen [::]:443 ssl;
+
+    server_name bitwarden.*;
+
+    include /config/nginx/ssl.conf;
+
+    client_max_body_size 128M;
+
+    # enable for ldap auth (requires ldap-location.conf in the location block)
+    #include /config/nginx/ldap-server.conf;
+
+    # enable for Authelia (requires authelia-location.conf in the location block)
+    #include /config/nginx/authelia-server.conf;
+
+    location / {
+        # enable the next two lines for http auth
+        #auth_basic "Restricted";
+        #auth_basic_user_file /config/nginx/.htpasswd;
+
+        # enable for ldap auth (requires ldap-server.conf in the server block)
+        #include /config/nginx/ldap-location.conf;
+
+        # enable for Authelia (requires authelia-server.conf in the server block)
+        #include /config/nginx/authelia-location.conf;
+
+        include /config/nginx/proxy.conf;
+        include /config/nginx/resolver.conf;
+        set $upstream_app bitwarden;
+        set $upstream_port 80;
+        set $upstream_proto http;
+        proxy_pass $upstream_proto://$upstream_app:$upstream_port;
+
+    }
+
+    location ~ (/bitwarden)?/admin {
+        # enable the next two lines for http auth
+        auth_basic "Restricted";
+        auth_basic_user_file /config/nginx/.htpasswd;
+
+        # enable for ldap auth (requires ldap-server.conf in the server block)
+        #include /config/nginx/ldap-location.conf;
+
+        # enable for Authelia (requires authelia-server.conf in the server block)
+        #include /config/nginx/authelia-location.conf;
+
+        include /config/nginx/proxy.conf;
+        include /config/nginx/resolver.conf;
+        set $upstream_app bitwarden;
+        set $upstream_port 80;
+        set $upstream_proto http;
+        proxy_pass $upstream_proto://$upstream_app:$upstream_port;
+
+    }
+
+    location ~ (/bitwarden)?/notifications/hub {
+        include /config/nginx/proxy.conf;
+        include /config/nginx/resolver.conf;
+        set $upstream_app bitwarden;
+        set $upstream_port 3012;
+        set $upstream_proto http;
+        proxy_pass $upstream_proto://$upstream_app:$upstream_port;
+
+    }
+
+    location ~ (/bitwarden)?/notifications/hub/negotiate {
+        include /config/nginx/proxy.conf;
+        include /config/nginx/resolver.conf;
+        set $upstream_app bitwarden;
+        set $upstream_port 80;
+        set $upstream_proto http;
+        proxy_pass $upstream_proto://$upstream_app:$upstream_port;
+
+    }
+}
\ No newline at end of file