From e0a100cae20fca18519829952d659d94a9855b80 Mon Sep 17 00:00:00 2001
From: Thomas Vanbesien <tvanbesi@proton.me>
Date: Fri, 13 Feb 2026 06:27:59 +0100
Subject: Add Syncthing service

---
 .../nginx/etc/nginx/templates/default.conf.template  |  3 ++-
 .../nginx/templates/services/syncthing.conf.template | 20 ++++++++++++++++++++
 2 files changed, 22 insertions(+), 1 deletion(-)
 create mode 100644 services/nginx/etc/nginx/templates/services/syncthing.conf.template

(limited to 'services/nginx')

diff --git a/services/nginx/etc/nginx/templates/default.conf.template b/services/nginx/etc/nginx/templates/default.conf.template
index 306a074..f90b61a 100644
--- a/services/nginx/etc/nginx/templates/default.conf.template
+++ b/services/nginx/etc/nginx/templates/default.conf.template
@@ -5,7 +5,8 @@ server {
     server_name ${NGINX__HOST}
                 www.${NGINX__HOST}
                 dav.${NGINX__HOST}
-                git.${NGINX__HOST};
+                git.${NGINX__HOST}
+                sync.${NGINX__HOST};
 
     # Prevent nginx HTTP Server Detection
     server_tokens off;
diff --git a/services/nginx/etc/nginx/templates/services/syncthing.conf.template b/services/nginx/etc/nginx/templates/services/syncthing.conf.template
new file mode 100644
index 0000000..31c90bb
--- /dev/null
+++ b/services/nginx/etc/nginx/templates/services/syncthing.conf.template
@@ -0,0 +1,20 @@
+server {
+    listen 443 ssl;
+    listen [::]:443 ssl;
+
+    server_name sync.${NGINX__HOST};
+
+    ssl_certificate     /run/secrets/server.crt;
+    ssl_certificate_key /run/secrets/server.key;
+
+    location / {
+        proxy_pass http://syncthing:8384;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+
+        proxy_read_timeout      600s;
+        proxy_send_timeout      600s;
+    }
+}
-- 
cgit v1.2.3