nginx

Modify your Nginx configuration to trust the proxy headers. In your server block, add:

/etc/nginx/sites-available/peertube

real_ip_header X-Forwarded-For;
set_real_ip_from 0.0.0.0/0;

[error] upstream sent too big header while reading response header from upstream

upstream owncloud {
    server 10.0.3.IP;
}

server {
    listen 80;
    server_name owncloud.TLD;

    add_header Strict-Transport-Security max-age=31536000;
#    ssl_session_timeout  5m;
    include snippets/letsencrypt-acme-challenge.conf;
 

    location / {
        proxy_pass http://owncloud;
        include proxy_params;

server {
       server_name phpmyadmin.bubuit.net;
       add_header Strict-Transport-Security "max-age=7200";
       location / {
               proxy_pass http://10.0.3.IP;
               include proxy_params;
               proxy_ignore_client_abort on;
               
               auth_basic "Restricted";
               auth_basic_user_file /etc/nginx/htpasswd;
       }
       include /etc/nginx/snippets/letsencrypt-acme-challenge.conf;
   listen 80; # managed by Certbot
}

1. htpasswd -c /etc/nginx/htpasswd USERNAME

&nbsp

server {
    server_name jitsi.bubuit.net;

    add_header Strict-Transport-Security "max-age=7200";

    location / {
        proxy_pass http://10.0.3.LXC-IP;
        proxy_ignore_client_abort on;
        include    proxy_params;
    }    

server {
    server_name peertube.TLD;

    access_log    off;
    open_log_file_cache max=1000 inactive=20s valid=1m min_uses=2;

    include /etc/nginx/snippets/letsencrypt-acme-challenge.conf;

server {
    server_name    netdata.TLD;

    add_header Strict-Transport-Security "max-age=7200";

server {
    server_name bubuit.net;
#    add_header Strict-Transport-Security "max-age=7200";

    location / {
        proxy_pass http://10.0.3.LXC-IP;
        include proxy_params;
#        proxy_ignore_client_abort on;

server {
    server_name webradio.TLD;

    add_header Strict-Transport-Security "max-age=7200";