Enable access and error logging on all services

data/conf.d/adminer.conf

@@ -62,8 +62,8 @@ server {
     # ssl_dhparam /etc/nginx/ssl/dhparam.pem;
 
     # Logging
-    access_log /var/log/nginx/example.com_access.log;
-    error_log /var/log/nginx/example.com_error.log;
+    access_log /var/log/nginx/adminer.novicelab.io_access.log;
+    error_log /var/log/nginx/adminer.novicelab.io_error.log;
 
     # Root and index
     # root /var/www/html;

data/conf.d/auth.conf

@@ -62,8 +62,8 @@ server {
     # ssl_dhparam /etc/nginx/ssl/dhparam.pem;
 
     # Logging
-    access_log /var/log/nginx/example.com_access.log;
-    error_log /var/log/nginx/example.com_error.log;
+    access_log /var/log/nginx/auth.novicelab.io_access.log;
+    error_log /var/log/nginx/auth.novicelab.io_error.log;
 
     # Root and index
     # root /var/www/html;

data/conf.d/book.conf

@@ -1,18 +1,18 @@
 # # Redirect HTTP to HTTPS
-# server {
-#     listen 80;
-#     listen [::]:80;
-#     server_name book.novicelab.io;
+server {
+    listen 80;
+    listen [::]:80;
+    server_name book.novicelab.io;
     
-#     # ACME challenge for Let's Encrypt certificate renewal
-#     location /.well-known/acme-challenge/ {
-#         root /var/www/certbot;
-#     }
+    # ACME challenge for Let's Encrypt certificate renewal
+    location /.well-known/acme-challenge/ {
+        root /var/www/certbot;
+    }
     
-#     location / {
-#         return 301 https://$server_name$request_uri;
-#     }
-# }
+    location / {
+        return 301 https://$server_name$request_uri;
+    }
+}
 
 server {
     listen 443 ssl; #http2;
@@ -62,8 +62,8 @@ server {
     # ssl_dhparam /etc/nginx/ssl/dhparam.pem;
 
     # Logging
-    access_log /var/log/nginx/example.com_access.log;
-    error_log /var/log/nginx/example.com_error.log;
+    access_log /var/log/nginx/book.novicelab.io_access.log;
+    error_log /var/log/nginx/book.novicelab.io_error.log;
 
     # Root and index
     # root /var/www/html;

data/conf.d/cluster.conf

@@ -38,8 +38,8 @@ server {
     add_header Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" always;
 
     # Logging
-    access_log /var/log/nginx/example.com_access.log;
-    error_log /var/log/nginx/example.com_error.log;
+    access_log /var/log/nginx/*.novicelab.io_access.log;
+    error_log /var/log/nginx/*.novicelab.io_error.log;
 
     location / {
         proxy_pass http://10.0.0.20:80; # Assuming HAProxy is on port 8080

data/conf.d/drone.conf

@@ -14,6 +14,10 @@ server {
     ssl_ciphers         HIGH:!aNULL:!MD5;
     ssl_session_cache   shared:SSL:10m;
 
+    # Logging
+    access_log /var/log/nginx/drone.novicelab.io_access.log;
+    error_log /var/log/nginx/drone.novicelab.io_error.log;
+
     # Security headers
     add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
     add_header X-Frame-Options DENY;

data/conf.d/gitea.conf

@@ -31,8 +31,8 @@ server {
     add_header Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" always;
 
     # Logging
-    access_log /var/log/nginx/example.com_access.log;
-    error_log /var/log/nginx/example.com_error.log;
+    access_log /var/log/nginx/gitea.novicelab.io_access.log;
+    error_log /var/log/nginx/gitea.novicelab.io_error.log;
 
     set $gitea_backend gitea:3000; 
 

data/conf.d/harbor.conf

@@ -31,10 +31,11 @@ server {
     add_header Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" always;
 
     # Logging
-    access_log /var/log/nginx/example.com_access.log;
-    error_log /var/log/nginx/example.com_error.log;
+    access_log /var/log/nginx/harbor.novicelab.io_access.log;
+    error_log /var/log/nginx/harbor.novicelab.io_error.log;
 
-    set $harbor_backend 10.0.0.251:9090; 
+    # set $harbor_backend 10.0.0.251:9090; 
+    set $harbor_backend nginx-harbor:80; 
 
     client_max_body_size 0;
 

data/conf.d/hugo.conf

@@ -62,8 +62,8 @@ server {
     # ssl_dhparam /etc/nginx/ssl/dhparam.pem;
 
     # Logging
-    access_log /var/log/nginx/example.com_access.log;
-    error_log /var/log/nginx/example.com_error.log;
+    access_log /var/log/nginx/novicelab.io_access.log;
+    error_log /var/log/nginx/novicelab.io_error.log;
 
     # Root and index
     # root /var/www/html;

data/conf.d/mailcow.conf

@@ -17,10 +17,14 @@ server {
 
     # See https://ssl-config.mozilla.org/#server=nginx for the latest ssl settings recommendations
     # An example config is given below
-    ssl_protocols TLSv1.2;
+    # ssl_protocols TLSv1.2;
     ssl_ciphers HIGH:!aNULL:!MD5:!SHA1:!kRSA;
     ssl_prefer_server_ciphers off;
 
+    # Logging
+    access_log /var/log/nginx/mailcow.novicelab.io_access.log;
+    error_log /var/log/nginx/mailcow.novicelab.io_error.log;
+
     location /Microsoft-Server-ActiveSync {
         proxy_pass https://10.0.0.251:7443/Microsoft-Server-ActiveSync;
         proxy_set_header Host $http_host;

data/conf.d/minio.conf

@@ -41,8 +41,8 @@ server {
     add_header Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" always;
 
     # Logging
-    access_log /var/log/nginx/example.com_access.log;
-    error_log /var/log/nginx/example.com_error.log;
+    access_log /var/log/nginx/minio.novicelab.io_access.log;
+    error_log /var/log/nginx/minio.novicelab.io_error.log;
 
     # resolver 127.0.0.11 valid=30s;
     set $minio_backend minio:9001; 
@@ -107,8 +107,8 @@ server {
     add_header Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" always;
 
     # Logging
-    access_log /var/log/nginx/example.com_access.log;
-    error_log /var/log/nginx/example.com_error.log;
+    access_log /var/log/nginx/s3.novicelab.io_access.log;
+    error_log /var/log/nginx/s3.novicelab.io_error.log;
 
     # resolver 127.0.0.11 valid=30s;
     set $s3_backend minio:9000; 

data/conf.d/opencloud.conf

@@ -14,6 +14,10 @@ server {
     ssl_ciphers         HIGH:!aNULL:!MD5;
     ssl_session_cache   shared:SSL:10m;
 
+    # Logging
+    access_log /var/log/nginx/opencloud.novicelab.io_access.log;
+    error_log /var/log/nginx/opencloud.novicelab.io_error.log;
+
     # Security headers
     add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
     add_header X-Frame-Options DENY;

data/conf.d/plane.conf

@@ -40,8 +40,8 @@ server {
     add_header Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" always;
 
     # Logging
-    access_log /var/log/nginx/example.com_access.log;
-    error_log /var/log/nginx/example.com_error.log;
+    access_log /var/log/nginx/plane.novicelab.io_access.log;
+    error_log /var/log/nginx/plane.novicelab.io_error.log;
 
     # resolver 127.0.0.11 valid=30s;
     # set $plane_backend 10.0.0.251:9020; 

data/conf.d/tre.conf

@@ -35,8 +35,8 @@ server {
     add_header Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" always;
 
     # Logging
-    access_log /var/log/nginx/example.com_access.log;
-    error_log /var/log/nginx/example.com_error.log;
+    access_log /var/log/nginx/tre.novicelab.io_access.log;
+    error_log /var/log/nginx/tre.novicelab.io_error.log;
 
     location /data-catalog {
         proxy_pass https://10.0.0.251:8888; # Assuming HAProxy is on port 8080

data/conf.d/umami.conf

@@ -62,8 +62,8 @@ server {
     # ssl_dhparam /etc/nginx/ssl/dhparam.pem;
 
     # Logging
-    access_log /var/log/nginx/example.com_access.log;
-    error_log /var/log/nginx/example.com_error.log;
+    access_log /var/log/nginx/umami.novicelab.io_access.log;
+    error_log /var/log/nginx/umami.novicelab.io_error.log;
 
     # Root and index
     # root /var/www/html;

data/conf.d/vault.conf

@@ -31,14 +31,14 @@ server {
     add_header Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval';" always;
 
     # Logging
-    access_log /var/log/nginx/example.com_access.log;
-    error_log /var/log/nginx/example.com_error.log;
+    access_log /var/log/nginx/vault.novicelab.io_access.log;
+    error_log /var/log/nginx/vault.novicelab.io_error.log;
     set $vault_backend vaultwarden:443;
 
     location / {
         # proxy_pass http://$vault_backend;
         # proxy_pass https://10.0.0.251:8100;
-        proxy_pass http://10.0.0.251:8090;
+        proxy_pass http://10.0.0.250:8090;
         proxy_set_header Host $http_host;
         proxy_set_header X-Real-IP $remote_addr;
         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;