unifi nearly done

compose/truenas-apps.yaml

@@ -159,15 +159,34 @@ services:
       - /mnt/hdd/apps/nginx/default.conf:/etc/nginx/conf.d/default.conf
       - /mnt/hdd/apps/certbot/etc:/etc/letsencrypt
 
-  # unifi:
+  unifi:
-  #   container_name: unifi
+    container_name: unifi
-  #   image: goofball222/unifi:8.6.9
+    image: goofball222/unifi:8.6.9
-  #   pull_policy: always
+    pull_policy: always
-  #   restart: unless-stopped
+    environment:
-  #   networks: 
+      READENV: 'true'
-  #     apps:
+      DB_MONGO_LOCAL: 'false'
-  #       ipv4_address: 10.96.10.17
+      TZ: America/New_York
-  #       link_local_ips: []
+      RUN_CHOWN: 'false'
-  #   volumes:
+      DEBIAN_FRONTEND: noninteractive
-  #     - /mnt/hdd/apps/unifi:/usr/lib/unifi/data
+      DB_MONGO_URI: mongodb://10.96.10.18:27017/unifi
+      STATDB_MONGO_URI: mongodb://10.96.10.18:27017/unifi_stat
+      UNIFI_DB_NAME: unifi
+    restart: unless-stopped
+    networks: 
+      apps:
+        ipv4_address: 10.96.10.17
+        link_local_ips: []
+    volumes:
+      - /mnt/hdd/apps/unifi:/usr/lib/unifi/data
 
+  mongodb:
+    image: mongo:5.0
+    container_name: mongodb
+    restart: unless-stopped
+    networks: 
+      apps:
+        ipv4_address: 10.96.10.18
+        link_local_ips: []
+    volumes:
+      - /mnt/hdd/apps/mongodb:/data/db

distribution/config.yml

@@ -38,8 +38,8 @@ http:
   relativeurls: false
   draintimeout: 30s
   tls:
-    certificate: /etc/letsencrypt/live/adguard.balsillie.house/fullchain.pem
+    certificate: /etc/letsencrypt/live/adguard.balsillie.house-0002/fullchain.pem
-    key: /etc/letsencrypt/live/adguard.balsillie.house/privkey.pem
+    key: /etc/letsencrypt/live/adguard.balsillie.house-0002/privkey.pem
     minimumtls: tls1.2
   prometheus:
     enabled: false

nginx/truenas.conf

@@ -27,13 +27,20 @@ server {
     listen 443 ssl;
     server_name unifi.balsillie.house;
     http2 on;
+    proxy_ssl_verify off;
+    location /wss/ {
+            proxy_pass https://10.96.10.17:8443;
+            proxy_http_version 1.1;
+            proxy_buffering off;
+            proxy_set_header Upgrade $http_upgrade;
+            proxy_set_header Connection "Upgrade";
+            proxy_read_timeout 86400;
+    }
+
     location / {
+            proxy_pass https://10.96.10.17:8443/; # The Unifi Controller Port
             proxy_set_header Host $host;
             proxy_set_header X-Real-IP $remote_addr;
-        proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forward-For $proxy_add_x_forwarded_for;
-        proxy_set_header        X-Forwarded-Proto $scheme;
-        proxy_pass              http://10.96.10.17:8080/;
-        proxy_read_timeout      600s;
-        proxy_send_timeout      600s;
     }
 }