add syncthing & files mount

.gitignore

@@ -1,4 +1,4 @@
-**/htpasswd
+**/*htpasswd*
 docker-fogcutter/airsonic/config
 docker-fogcutter/minecraft/data
 docker-fogcutter/nginx/config

docker-fogcutter/airsonic/launch.sh

@@ -1,6 +1,7 @@
 #!/bin/bash
 
 # Assumes pew-net exists
+# Make config dir (as non-root) before launching
 
 docker run \
     --name airsonic \

docker-fogcutter/minecraft/launch.sh

@@ -1,5 +1,7 @@
 #!/bin/bash
 
+# Make data dir (as non-root) before launching
+
 docker run \
     --name minecraft \
     --detach \

docker-fogcutter/nginx/launch.sh

@@ -16,6 +16,10 @@ docker run \
     --volume $PWD/config:/config:rw \
     --volume $PWD/nginx.conf:/config/nginx/nginx.conf:ro \
     --volume $PWD/site-confs:/config/nginx/site-confs:ro \
+    --volume $PWD/../syncthing/sync:/sync-docker:ro \
+    --volume /bigdata/files:/files-docker:ro \
+    --volume $PWD/syncthing-htpasswd:/config/nginx/syncthing-htpasswd:ro \
+    --volume $PWD/sync-htpasswd:/config/nginx/sync-htpasswd:ro \
     --publish 10.42.0.203:80:80 \
     --publish 10.42.0.203:443:443 \
     --publish [2601:5c0:c100:6e65:96c6:91ff:feab:69e3]:80:80 \

docker-fogcutter/nginx/site-confs/seaturtle.pw.enabled

@@ -31,4 +31,28 @@ server {
     location / {
         proxy_pass https://paulwalko.github.io;
     }
+
+    # Proxy misc files
+    location /files {
+        alias /files-docker;
+        autoindex on;
+    }
+
+    # Server syncthing files
+    location /sync {
+        auth_basic "nope definitely not today buddy";
+        auth_basic_user_file /config/nginx/sync-htpasswd;
+        alias /sync-docker;
+        autoindex on;
+    }
+
+    # Weechat relay
+    location /weechat {
+        proxy_pass http://172.17.0.1:9001/weechat;
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection "Upgrade";
+        proxy_read_timeout 604800;
+        proxy_set_header X-RealIP $remote_addr;
+    }
 }

docker-fogcutter/nginx/site-confs/syncthing.seaturtle.pw.enabled

@@ -0,0 +1,27 @@
+server {
+    listen 80;
+    listen [::]:80;
+    server_name syncthing.seaturtle.pw;
+
+    return 301 https://syncthing.seaturtle.pw$request_uri;
+}
+
+server {
+    listen 443 ssl;
+    listen [::]:443 ssl;
+    server_name syncthing.seaturtle.pw;
+
+    # ssl conf
+    include /config/nginx/ssl.conf;
+
+    # Proxy syncthing
+    location / {
+        auth_basic "not today buddy";
+        auth_basic_user_file /config/nginx/syncthing-htpasswd;
+
+        proxy_set_header    X-Real-IP $remote_addr;
+        proxy_set_header    X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header    X-Forwarded-Proto $scheme;
+        proxy_pass http://syncthing:8384;
+    }
+}

docker-fogcutter/plex/launch.sh

@@ -1,6 +1,7 @@
 #!/bin/bash
 
 # Assumes pew-net exists
+# Make config dir (as non-root) before launching
 
 docker run \
     --name plex \

docker-fogcutter/syncthing/launch.sh

@@ -1,6 +1,7 @@
 #!/bin/bash
 
 # Assumes pew-net exists
+# Make config dir (as non-root) before launching
 
 docker run \
     --name syncthing \