split internal & external

internal/proxy/nginx.conf

@@ -0,0 +1,38 @@
+user  nginx;
+worker_processes  auto;
+error_log  /var/log/nginx/error.log warn;
+pid        /var/run/nginx.pid;
+
+events {
+  worker_connections  1024;
+}
+
+http {
+  # Basic config
+  include       /etc/nginx/mime.types;
+  default_type  application/octet-stream;
+  sendfile        on;
+  keepalive_timeout  65;
+
+  # We define internal upstreams
+  upstream internal_ingress {
+    server nginx-internal.ingress-nginx.svc.cluster.local:80;
+  }
+
+  server {
+    listen 80 default_server;
+    server_name _;
+  }
+
+  # dev.mrcynic.site - allow only LAN
+  server {
+    listen 80;
+    server_name ~^(?<subdomain>.+)\.dev\.mrcynic\.site$;
+
+    location / {
+      proxy_pass http://internal_ingress;
+      proxy_set_header Host $host;
+      proxy_set_header X-Real-IP $remote_addr;
+    }
+  }
+}