1. Add Proxy Host one137.dev → http://STATIC_FILES:1 (name doesn’t matter)
  2. Activate Block Exploits and SSL as usual
    • Note Access rules are not applied. If needed, they should go in the advanced tab under location /, for example (IPs should match those in Create Access List):
	allow 192.168.137.1/24;
    allow ip-of-wg-easy/32;
	allow ip-of-cloudflared/32;
	deny all;
  1. In Advanced tab, add (see Setup NPM for the logs, and X is the proxy number):
	location / {
		root /data/nginx/custom/one137-web;
		try_files $uri $uri.html $uri/ =404;
	    access_log /data/logs/proxy-host-X_access.log default_plus_cf; # for fail2ban
	}
  1. Create static web files
    1. in dockerhost’s /srv/docker/volumes/one137-web
    2. bind /srv/docker/volumes/one137-web:/srv/docker/volumes/one137-web in NPM’s stack
    3. on dockerhost: sudo -u dockeruser ln -s /srv/docker/volumes/one137-web /srv/docker/volumes/npm/data/nginx/custom/one137-web
    4. See Continuous Delivery for automation. If one137-web/ is cloned from a repo, use git clone [email protected]:username/one137-web.git instead of https, or manually set an SSH address for the remote.