podman-services/etc/nginx/sites-available/pihole.theribbles.org

server {

server_name pihole.theribbles.org;

allow 192.168.1.0/24; deny all;

location ~ { proxy_pass http://127.0.0.1:10000; }

listen [::]:443 ssl; # managed by Certbot listen 443 ssl; # managed by Certbot

ssl_certificate /etc/letsencrypt/live/theribbles.org/fullchain.pem; # managed by Certbot ssl_certificate_key /etc/letsencrypt/live/theribbles.org/privkey.pem; # managed by Certbot include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot }

server { if ($host = pihole.theribbles.org) { return 301 https://$host$request_uri; } # managed by Certbot

listen 80; listen [::]:80;

server_name pihole.theribbles.org; return 404; # managed by Certbot }