ReverseProxy

It's a common usage that running Simple Torrent behind a proxy server.

NOTE: simple-torrent shouldn't be on TLS mode when used with a reverse proxy.

• Caddy2
  • Simple reverse proxy
  • Exclude the /dl/ path, allowing to download files without authentication.
  • shared domain with other application, under a directory
• Nginx
  • with dedicated domain
  • with shared domain, under a directory /ctorrent/
• Apache2

Caddy2

Everything gets easy when it comes with caddy!

Simple reverse proxy

https://your.domain.tld {
  reverse_proxy * localhost:1300
}

Exclude the /dl/ path, allowing to download files without authentication.

https://your.domain.tld {
  @cld not path /dl/*
  reverse_proxy @cld localhost:1300

  file_server * {
    root /srv/http/  #the upper path of the download dir
    browse
  }
}

shared domain with other application, under a directory

https://your.domain.tld {
  #... other path config

  handle_path /cloud/* {
    rewrite * {path}
    reverse_proxy localhost:1300
  }
}

Nginx

with dedicated domain

map $http_upgrade $connection_upgrade {
    default upgrade;
    '' 	    keep-alive;
}

server {
    listen 443 ssl http2;
    listen [::]:443 ssl http2;
    server_name your.domain.tld;
    ssl_certificate /usr/local/nginx/ssl/wildcard.crt;
    ssl_certificate_key /usr/local/nginx/ssl/wildcard.key;

    location / {                                                                    
        proxy_pass http://127.0.0.1:3000;                                          
        #proxy_pass http://unix:/run/cloud-torrent/cloud.sock; # use if listening on unixsocket                  
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection $connection_upgrade;
	proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_http_version 1.1;                                                     
        chunked_transfer_encoding off;                                              
        proxy_buffering off;                                                        
        proxy_cache off;                                                                                                              
    }    
}

with shared domain, under a directory /ctorrent/

map $http_upgrade $connection_upgrade {
    default upgrade;
    '' 	    keep-alive;
}
server {
    listen 443 ssl http2;
    listen [::]:443 ssl http2;
    server_name your.domain.tld;
    ssl_certificate /usr/local/nginx/ssl/wildcard.crt;
    ssl_certificate_key /usr/local/nginx/ssl/wildcard.key;

    location / {
        # your default site config
    }

    location /ctorrent/ {                                                                    
        proxy_pass http://127.0.0.1:3000/; # note the trailing slash here, it matters!
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection $connection_upgrade;
        proxy_http_version 1.1;                                                     
        chunked_transfer_encoding off;                                              
        proxy_buffering off;                                                        
        proxy_cache off;                                                            
    }
}

Apache2

Enable the following modules:

a2enmod rewrite
a2enmod proxy
a2enmod proxy_http
a2enmod proxy_wstunnel

The working conf:

<VirtualHost *:80>
#  ServerName www.domain2.com

  RewriteEngine On
  RewriteCond %{HTTP:Upgrade} =websocket [NC]
  RewriteRule /(.*)           ws://127.0.0.1:3000/$1 [P,L]
  ProxyPreserveHost On

  ProxyPass / http://127.0.0.1:3000/
  ProxyPassReverse / http://127.0.0.1:3000/
</VirtualHost>