domoticz_ynh/conf/nginx.conf

#sub_path_only rewrite ^__PATH__$ __PATH__/ permanent;
location __PATH__/ {

  #Settings for main domoticz interface via web browser
  proxy_http_version 1.1;
  proxy_read_timeout 90;
  proxy_set_header X-Real-IP $remote_addr;
  proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  proxy_set_header X-Forwarded_Proto $scheme;
  proxy_set_header X-Scheme $scheme;
  proxy_set_header Upgrade $http_upgrade;
  proxy_set_header Connection $connection_upgrade;
  more_set_headers "X-Frame-Options: SAMEORIGIN";
  proxy_pass http://localhost:__PORT__/;
  proxy_set_header Host $host;
  #Allow upload until 10M to upload floorplan
  client_max_body_size 10M;
  
  # Include SSOWAT user panel.
  include conf.d/yunohost_panel.conf.inc;
}


#sub_path_only rewrite ^api___PATH__$ api___PATH__/ permanent;
location __API_PATH__/ {
  #Alternative path for api, only authorized json command will be accepted

  #allow only local network on IPv4
  allow 192.168.0.0/16;
  #allow all address in IPv6 => how to filter?
  allow ::/1;
  deny all;

  proxy_http_version 1.1;
  proxy_read_timeout 90;
  proxy_set_header X-Real-IP $remote_addr;
  proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  proxy_set_header X-Forwarded_Proto $scheme;
  proxy_set_header X-Scheme $scheme;
  proxy_set_header Upgrade $http_upgrade;
  proxy_set_header Connection $connection_upgrade;
  more_set_headers "X-Frame-Options: SAMEORIGIN";
  proxy_pass http://localhost:__PORT__/;
  proxy_set_header Host $host;
  
  set $api "0";
  
  include /etc/nginx/conf.d/__DOMAIN__.d/api___APP__.conf;
  
  if ($api = 0) {
    return 403;
  }

}