lemmy_ynh/conf/nginx.conf

#limit_req_zone $binary_remote_addr zone=lemmy_ratelimit:10m rate=1r/s;
    # frontend
    location / {
      # The default ports:
      # lemmy_ui_port: 1235
      # lemmy_port: 8536

      # Force usage of https
      if ($scheme = http) {
      rewrite ^ https://$server_name$request_uri? permanent;
      }

      set $proxpass "http://127.0.0.1:__PORT_UI__";
      if ($http_accept = "application/activity+json") {
        set $proxpass "http://127.0.0.1:__PORT_LEMMY__";
      }
      if ($http_accept = "application/ld+json; profile=\"https://www.w3.org/ns/activitystreams\"") {
        set $proxpass "http://127.0.0.1:__PORT_LEMMY__";
      }
      if ($request_method = POST) {
        set $proxpass "http://127.0.0.1:__PORT_LEMMY__";
      }
      proxy_pass $proxpass;

      rewrite ^(.+)/+$ $1 permanent;

      # Send actual client IP upstream
      proxy_set_header X-Real-IP $remote_addr;
      proxy_set_header Host $host;
      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    }

    # backend
    location ~ ^/(api|pictrs|feeds|nodeinfo|.well-known) {
      proxy_pass http://127.0.0.1:__PORT_LEMMY__;
      proxy_http_version 1.1;
      proxy_set_header Upgrade $http_upgrade;
      proxy_set_header Connection "upgrade";

      # Rate limit
 #     limit_req zone=lemmy_ratelimit burst=30 nodelay;

      # Add IP forwarding headers
      proxy_set_header X-Real-IP $remote_addr;
      proxy_set_header Host $host;
      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    }


    # Redirect pictshare images to pictrs
    location ~ /pictshare/(.*)$ {
      return 301 /pictrs/image/$1;
    }

    location /iframely/ {
      proxy_pass http://127.0.0.1:__PORT_IFRAMELY__/;
      proxy_set_header X-Real-IP $remote_addr;
      proxy_set_header Host $host;
      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    }


# Anonymize IP addresses
# https://www.supertechcrew.com/anonymizing-logs-nginx-apache/
#map $remote_addr $remote_addr_anon {
#  ~(?P<ip>\d+\.\d+\.\d+)\.    $ip.0;
#  ~(?P<ip>[^:]+:[^:]+):       $ip::;
#  127.0.0.1                   $remote_addr;
#  ::1                         $remote_addr;
#  default                     0.0.0.0;
#}
#log_format main '$remote_addr_anon - $remote_user [$time_local] "$request" '
#'$status $body_bytes_sent "$http_referer" "$http_user_agent"';
#access_log /var/log/nginx/access.log main;