Nginx

Overview

Nginx serves as the web server and reverse proxy for all apps.

Field	Value
Service	nginx.service
Config dir	/etc/nginx/conf.d/
SSL	Auto Let's Encrypt via host tools

Configuration Structure

Each domain gets two files:

/etc/nginx/conf.d/
├── <domain>.conf           # Main Nginx config
└── <domain>.d/              # App-specific includes
    ├── <app1>.conf
    └── <app2>.conf

Key Includes

• yunohost_sso.conf.inc — SSOwat integration
• yunohost_admin.conf.inc — Admin panel routes
• yunohost_api.conf.inc — API
• yunohost_http_errors.conf.inc — Custom error pages
• security.conf.inc — TLS security headers

SSL Certificates

Certificates stored at:

/etc/yunohost/certs/<domain>/crt.pem
/etc/yunohost/certs/<domain>/key.pem

SSO Integration

SSOwat is used, a Lua module for Nginx, for single sign-on:

access_by_lua_file /usr/share/ssowat/access.lua;

See also: yunohost-sso.conf.inc