Differences

This shows you the differences between two versions of the page.

--- hosts:virtual_machines:web:userhomes_hosting [2023/08/30 18:06] – tcmal
+++ hosts:virtual_machines:web:userhomes_hosting [2025/02/17 20:29] (current) – Say correct reverse proxies. Add a couple links merlin
@@ Line 9: / Line 9: @@
 The sandbox VM exports users home directories as an NFS share, which is mounted by this VM. You can find the configuration [[https://git.tardisproject.uk/tardis/nix/-/blob/main/profiles/web/userhomes.nix|here]].
+===== What if I want to use a custom domain? =====
+This is totally possible by adding the domain and forwarding it manually to nginx. See the step-by-step below. Some steps require an admin, so please contact an admin if you would like this (we're friendly, I promise!).
+Currently working examples of this include https://mathsoc.uk and https://www.emilymiller.xyz.
+. (Admin required) Add the domain to the users account. For instance, "example.com" and "www.example.com" \\
+**Note: subdomains like www. are not automatically included, so it's usually smartest to add them manually.** \\
+Further Note: wildcard domains aren't handled well by Caddy, so putting a wildcard domain will likely require extra configuration to make work. Roughly however, this should at least serve the site, albiet with a potentially broken SSL cert. \\
+. Go into the console ([[https://console.tardisproject.uk|console.tardisproject.uk]]) and select "Manage Endpoints".
+. Add a new proxy rule with the following settings. Note: You'll need to do this for each subdomain (which will usually be at least "example.com" and "www.example.com").
+**What to proxy:**
+Domain: <whatever domain you want to add> (e.g. example.com) \\
+Path prefix: / \\
+**Where to proxy to:**
+Target IP: 192.168.0.14 (This is the internal IP address of [[hosts:virtual_machines:web:|hosts:virtual_machines:web]], which hosts [[https://git.tardisproject.uk/tardis/nix/-/blob/main/profiles/web/userhomes.nix|an nginx webserver which servers userhomes]]) \\
+Target Port: 8181 (This is the port where nginx is expecting traffic to come through on) \\
+Does the target expect HTTPS? No (SSL termination is handled seperately by traefik) \\
+**Advanced**
+Strip path prefix before sending to app? No \\
+Redirect HTTP to HTTPS? Yes \\
+Override the Host header: <your username>.tardis.ac (e.g. jdoe.tardis.ac, without this nginx won't know where to route the traffic) \\