[FEAT] Seerr proxy conf

[mtrolley]

Is this a new feature request?

• I have searched the existing issues

Wanted change

With the deprecation of the LSIO Overseerr container in favor of the official Seerr container, it would be nice to have a sample reverse proxy config for Seerr.

Reason for change

Overseerr container has been deprecated in favor of official Seerr container.

Proposed code change

Updated to the example config from their docs.

server {
    listen 443 ssl http2;
    listen [::]:443 ssl http2;

    server_name seerr.*;

    include /config/nginx/ssl.conf;

    client_max_body_size 0;

    location / {
        include /config/nginx/proxy.conf;
        resolver 127.0.0.11 valid=30s;
        set $upstream_app seerr;
        set $upstream_port 5055;
        set $upstream_proto http;
        proxy_pass $upstream_proto://$upstream_app:$upstream_port;
    }

}

[tr4cks]

On the official website, they don't define the /api route. So there's probably no need for it. Here is the configuration they recommend for swag:

server {
    listen 443 ssl http2;
    listen [::]:443 ssl http2;

    server_name seerr.*;

    include /config/nginx/ssl.conf;

    client_max_body_size 0;

    location / {
        include /config/nginx/proxy.conf;
        resolver 127.0.0.11 valid=30s;
        set $upstream_app seerr;
        set $upstream_port 5055;
        set $upstream_proto http;
        proxy_pass $upstream_proto://$upstream_app:$upstream_port;
    }
}

[mtrolley]

I didn't even notice the Swag section on their site, thanks for pointing that out.

[tr4cks]

I saw that you updated your code, but I think it's still necessary to integrate the LinuxServer stuff into the code (authelia, etc.).
I just removed the /api from what you had put at the very beginning. I don't know if LinuxServer wants to keep it or not. To be discussed with those who originally set up the configuration file.

seerr.subdomain.conf.sample:

## Version 2026/02/17
# make sure that your seerr container is named seerr
# make sure that your dns has a cname set for seerr

server {
    listen 443 ssl;
#    listen 443 quic;
    listen [::]:443 ssl;
#    listen [::]:443 quic;

    server_name seerr.*;

    include /config/nginx/ssl.conf;

    client_max_body_size 0;

    # enable for ldap auth (requires ldap-location.conf in the location block)
    #include /config/nginx/ldap-server.conf;

    # enable for Authelia (requires authelia-location.conf in the location block)
    #include /config/nginx/authelia-server.conf;

    # enable for Authentik (requires authentik-location.conf in the location block)
    #include /config/nginx/authentik-server.conf;

    # enable for Tinyauth (requires tinyauth-location.conf in the location block)
    #include /config/nginx/tinyauth-server.conf;

    location / {
        # enable the next two lines for http auth
        #auth_basic "Restricted";
        #auth_basic_user_file /config/nginx/.htpasswd;

        # enable for ldap auth (requires ldap-server.conf in the server block)
        #include /config/nginx/ldap-location.conf;

        # enable for Authelia (requires authelia-server.conf in the server block)
        #include /config/nginx/authelia-location.conf;

        # enable for Authentik (requires authentik-server.conf in the server block)
        #include /config/nginx/authentik-location.conf;

        # enable for Tinyauth (requires tinyauth-server.conf in the server block)
        #include /config/nginx/tinyauth-location.conf;

        include /config/nginx/proxy.conf;
        include /config/nginx/resolver.conf;
        set $upstream_app seerr;
        set $upstream_port 5055;
        set $upstream_proto http;
        proxy_pass $upstream_proto://$upstream_app:$upstream_port;

    }
}

[LinuxServer-CI]

This issue has been automatically marked as stale because it has not had recent activity. This might be due to missing feedback from OP. It will be closed if no further activity occurs. Thank you for your contributions.

[mtrolley]

I hadn't noticed that this was done with #796.