Add nginx proxy server

roles/nginx-proxy-manager/files/default.conf

@@ -0,0 +1,42 @@
+# "You are not configured" page, which is the default if another default doesn't exist
+server {
+	listen 80;
+	listen [::]:80;
+
+	set $forward_scheme "http";
+	set $server "127.0.0.1";
+	set $port "80";
+
+	server_name localhost-nginx-proxy-manager;
+	access_log /data/logs/fallback_access.log standard;
+	error_log /data/logs/fallback_error.log warn;
+	include conf.d/include/assets.conf;
+	include conf.d/include/block-exploits.conf;
+	include conf.d/include/letsencrypt-acme-challenge.conf;
+
+	location / {
+		return 444;
+		index index.html;
+		root /var/www/html;
+	}
+	return 444;
+}
+
+# First 443 Host, which is the default if another default doesn't exist
+server {
+	listen 443 ssl;
+	listen [::]:443 ssl;
+
+	set $forward_scheme "https";
+	set $server "127.0.0.1";
+	set $port "443";
+
+	server_name localhost;
+	access_log /data/logs/fallback_access.log standard;
+	error_log /dev/null crit;
+	ssl_certificate /data/nginx/dummycert.pem;
+	ssl_certificate_key /data/nginx/dummykey.pem;
+	include conf.d/include/ssl-ciphers.conf;
+
+	return 444;
+}

roles/nginx-proxy-manager/files/docker-compose.yml

@@ -0,0 +1,13 @@
+version: "3"
+services:
+  app:
+    image: 'jc21/nginx-proxy-manager:latest'
+    restart: unless-stopped
+    ports:
+      - 80:80 # Public HTTP Port
+      - 443:443 # Public HTTPS Port
+      - 81:81 # Admin Web Port
+    volumes:
+      - ./data:/data
+      - ./letsencrypt:/etc/letsencrypt
+      - ./default.conf:/etc/nginx/conf.d/default.conf

roles/nginx-proxy-manager/files/production.conf

@@ -0,0 +1,33 @@
+# Admin Interface
+server {
+        listen 81;
+        listen [::]:81;
+
+        server_name nginxproxymanager;
+        root /app/frontend;
+        access_log /dev/null;
+
+        location /api {
+                return 302 /api/;
+        }
+
+        location /api/ {
+                add_header            X-Served-By $host;
+                proxy_set_header Host $host;
+                proxy_set_header      X-Forwarded-Scheme $scheme;
+                proxy_set_header      X-Forwarded-Proto  $scheme;
+                proxy_set_header      X-Forwarded-For    $remote_addr;
+                proxy_pass            http://127.0.0.1:3000/;
+
+                proxy_read_timeout 15m;
+                proxy_send_timeout 15m;
+        }
+
+        location / {
+                index index.html;
+                if ($request_uri ~ ^/(.*)\.html$) {
+                        return 302 /$1;
+                }
+                try_files $uri $uri.html $uri/ /index.html;
+        }
+}