Post #2575488

2026-05-13 00:20 UTC

duck duck fedi is there a way to make nginx proxy all requests made to a specific host on port 443 to another machine? specifically requests to a certain url (in this case, fv.catwithaclari.net to 10.0.0.210) ssl will be handled on the other machine, so ideally nginx wouldn't touch the requests other than to proxy them i still want nginx to handle port 443 for all the other hosts

Replies (3)

@z@blahaj.zone 2026-05-13 05:11

@Chloe@catwithaclari.net you can, but it's cursed. The keyword to search for is mod_stream. This may not be included in your nginx install and you may need to install it separately (i.e.: an nginx-mod-stream package) or replace your nginx with a version that includes more modules (i.e.: an nginx-full package) Excerpt that I can't fully explain because I didn't research or write it but that dd this for a while for a pufferpanel and an immich: stream { map_hash_bucket_size 128; map $ssl_preread_server_name $domain { hostnames; immich.example.com arbitraryUpstreamName; pufferpanel1.example.com arbitraryUpstreamName; default defaultServerName; } upstream arbitraryUpstreamName { server upstream.example.com:443; } upstream defaultServerName { localhost:3443 # you need to make the rest of your nginx tls services listen on this port! } } Anyways my condolences for finding yourself in need of this

Open ##2700690
@sofia@kittyy.mom 2026-05-13 02:13

@Chloe@catwithaclari.net it can basically do it normally but with the stream module instead of the http module, stream -> ssl_preread_server_name uses the SNI TLS header instead of the Host HTTP header that's normally used https://nginx.org/en/docs/stream/ngx_stream_core_module.html

Open ##2700691
@b@mrrp.place 2026-05-13 00:21

@Chloe@catwithaclari.net yeah i think that should be possible with a normal nginx proxy redirect thing !! i'm doing something very similar for this instance, let me dig up its config

Open ##2700697