| gateway server == yunohost == nosignal.hopto.org (192.168.1.120)
| proxy server == nextcloudpi (odroid-hc2_4T_HDD) == nopost.hopto.org (192.168.1.110)
|
| public ip == 211.108.178.33
| ddns to this ip == nosignal.hopto.org, nopost.hopto.org, nomatter.hopto.org
|

gateway server configurations
-----------------------------

cat /etc/hosts

----

| 127.0.0.1       localhost
| 127.0.1.1       yunohost.yunohost.org   yunohost
|
| # The following lines are desirable for IPv6 capable hosts
| ::1     localhost ip6-localhost ip6-loopback
| ff02::1 ip6-allnodes
| ff02::2 ip6-allrouters
| 192.168.1.150    nextcloud.local     nextcloud
| 192.168.1.110    nextcloudpi.local   nextcloudpi
|

cat /etc/nginx/conf.d/nopost.hopto.org.d/proxy.conf

----

| location / {
|   proxy_pass https://192.168.1.110;
|   proxy_set_header Host $host;
|
|   if ($scheme = http)
|   {
|     rewrite ^ https://$server_name$request_uri? permanent;
|   }
|
|   proxy_buffering off;
|   tcp_nodelay on;
| }
|
|
| *nopost.hopto.org is dedicated only for this proxy server. no other app is using it.*
|

cat /etc/ssowat/conf.json

----

| {
|     "additional_headers": {
|         "Auth-User": "uid",
|         "Email": "mail",
|         "Name": "cn",
|         "Remote-User": "uid"
|     },
|     "domains": [
|         "nopost.hopto.org",
|         "nomatter.hopto.org",
|         "nosignal.hopto.org"
|     ],
|     "portal_domain": "nosignal.hopto.org",
|     "portal_path": "/yunohost/sso/",
|     "protected_regex": [],
|     "protected_urls": [],
|     "redirected_regex": {
|         "nosignal.hopto.org/yunohost[\\/]?$": "https://nosignal.hopto.org/yunohost/sso/"
|     },
|     "redirected_urls": {},
|     "skipped_regex": [
|         "nopost%.hopto%.org/%.well%-known/.*",
|         "^[^/]*/%.well%-known/acme%-challenge/.*$",
|         "^[^/]*/%.well%-known/autoconfig/mail/config%-v1%.1%.xml.*$"
|     ],
|     "skipped_urls": [
|         "nosignal.hopto.org/pad",
|         "nopost.hopto.org/yunohost/admin",
|         "nopost.hopto.org/yunohost/api",
|         "nomatter.hopto.org/yunohost/admin",
|         "nomatter.hopto.org/yunohost/api",
|         "nosignal.hopto.org/yunohost/admin",
|         "nosignal.hopto.org/yunohost/api",
|     ],
|     "unprotected_regex": [],
|     "unprotected_urls": [
|         "nosignal.hopto.org/flarum",
|         "nosignal.hopto.org/gitlab",
|         "nosignal.hopto.org/grav",
|         "nosignal.hopto.org/jupyterlab",
|         "nosignal.hopto.org/kanboard/jsonrpc.php",
|         "nomatter.hopto.org",
|         "nosignal.hopto.org/nextcloud",
|         "nosignal.hopto.org/SOGo",
|         "nopost.hopto.org"
|     ],
|     "users": {
|         "doohoyi": {
|             "nomatter.hopto.org/": "Mattermost",
|             "nosignal.hopto.org/SOGo": "SOGo",
|             "nosignal.hopto.org/airsonic": "Airsonic",
|             "nosignal.hopto.org/distbin": "Distbin",
|             "nosignal.hopto.org/flarum": "Flarum",
|             "nosignal.hopto.org/gitlab": "Gitlab",
|             "nosignal.hopto.org/grav": "Grav",
|             "nosignal.hopto.org/jupyterlab": "JupyterLab",
|             "nosignal.hopto.org/kanboard": "Kanboard",
|             "nosignal.hopto.org/nextcloud": "Nextcloud",
|             "nosignal.hopto.org/pad": "Etherpad Mypads",
|             "nosignal.hopto.org/phpmyadmin": "phpMyAdmin",
|             "nosignal.hopto.org/rainloop": "Rainloop",
|             "nosignal.hopto.org/riot": "Riot",
|             "nosignal.hopto.org/site": "Multi custom webapp",
|             "nosignal.hopto.org/strut": "Strut",
|             "nosignal.hopto.org/torrent": "Transmission"
|         },
|         "wonjung": {
|             "nomatter.hopto.org/": "Mattermost",
|             "nosignal.hopto.org/SOGo": "SOGo",
|             "nosignal.hopto.org/airsonic": "Airsonic",
|             "nosignal.hopto.org/distbin": "Distbin",
|             "nosignal.hopto.org/flarum": "Flarum",
|             "nosignal.hopto.org/gitlab": "Gitlab",
|             "nosignal.hopto.org/grav": "Grav",
|             "nosignal.hopto.org/jupyterlab": "JupyterLab",
|             "nosignal.hopto.org/kanboard": "Kanboard",
|             "nosignal.hopto.org/nextcloud": "Nextcloud",
|             "nosignal.hopto.org/pad": "Etherpad Mypads",
|             "nosignal.hopto.org/rainloop": "Rainloop",
|             "nosignal.hopto.org/riot": "Riot",
|             "nosignal.hopto.org/site": "Multi custom webapp",
|             "nosignal.hopto.org/strut": "Strut",
|             "nosignal.hopto.org/torrent": "Transmission"
|         }
|     }
| }
|
| *only "nopost.hopto.org" is added to "unprotected_urls"*
|