[twinkybot]

Hi there,

can somebody tell me how a Nginx config has to look like for Kodi. So that it is accessible as a service (daemon) via a subdomain e.g. music.example.com


Greetings.

[twinkybot]

Would this be valid:

conf:


server {

    listen 443 ssl http2;

    listen [::]:443 ssl http2;

    server_name musik.example.com;



    ssl_certificate /etc/letsencrypt/live/musik.example.com/fullchain.pem;

    ssl_certificate_key /etc/letsencrypt/live/musik.example.com/privkey.pem;



    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;



    include /etc/nginx/conf.d/ssl.conf;



    # Security / XSS Mitigation Headers

    add_header X-Frame-Options "SAMEORIGIN";

    add_header X-XSS-Protection "1; mode=block";

    add_header X-Content-Type-Options "nosniff";



    # Remove X-Powered-By, which is an information leak

    fastcgi_hide_header X-Powered-By;



    # Content Security Policy

    # See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP

    # Enforces https content and restricts JS/CSS to origin

    # External Javascript (such as cast_sender.js for Chromecast) must be whitelisted.

    add_header Content-Security-Policy "default-src https: data: blob:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' https://www.gstatic.com/cv/js/sender/v1/cast_sender.js; worker-src 'self' blob:; connect-src 'self'; object-src 'none'; frame-ancestors 'self'";



   location / {

        proxy_pass        http://127.0.0.1:9500/;

     

        proxy_connect_timeout 160;

        proxy_send_timeout 160;

        proxy_read_timeout 160;

        proxy_buffer_size 4k;

        proxy_buffers 4 32k;

        proxy_busy_buffers_size 64k;

        proxy_temp_file_write_size 64k;

        proxy_pass_header       Set-Cookie;

        proxy_hide_header       Vary;

        proxy_set_header        Accept-Encoding         '';

        proxy_set_header        Referer                 $http_referer;

        proxy_set_header        Host                    $host;

        proxy_set_header        Cookie                  $http_cookie;

        proxy_set_header        X-Real-IP               $remote_addr;

        proxy_set_header        X-Forwarded-Host        $host;

        proxy_set_header        X-Forwarded-Server      $host;

        proxy_set_header        X-Forwarded-For          $proxy_add_x_forwarded_for;

        proxy_set_header        X-Forwarded-Port        '443';

        proxy_set_header        X-Forwarded-Ssl         on;

        proxy_set_header        X-Forwarded-Proto       https;

    }

}

Mainly gotten from here: https://www.reddit.com/r/kodi/comments/3...server_on/