Nginx Documentation Re-work

[solidsnake1298]

• Simplifying example to minimum "secure" config.
• Adding font-src to CSP to resolve Cannot get fonts using nginx example #1275
• Removing http examples. Not appreciably different that https.
• Adding Nginx Proxy Manager sub-path example as provided by forum user. https://forum.jellyfin.org/t-nginx-proxy-manager-config?pid=42446#pid42446

Fixes #1275

[felix920506]

Someone familiar with nginx should double check

[nielsvanvelzen]

If we really want to simplify this page I'd suggest some additional removals:

• Remove SSL config (rely on default options)
• Remove X-Content-Type-Options header
• Remove permission policy header
• Remove CSP header
• Remove "nginx with subpath" part, just focus on a normal install with dedicated subdomain
• Remove image cache example, the server already caches images
• Remove download rate limiting!! This should've never been added in the first place as clients do NOT expect this

[solidsnake1298]

If we really want to simplify this page I'd suggest some additional removals:

• Remove SSL config (rely on default options)
• Remove X-Content-Type-Options header
• Remove permission policy header
• Remove CSP header
• Remove "nginx with subpath" part, just focus on a normal install with dedicated subdomain
• Remove image cache example, the server already caches images
• Remove download rate limiting!! This should've never been added in the first place as clients do NOT expect this

The goal isn't to simplify down to the absolute minimum for a working HTTPS proxy. I want this to be the minimum secure config that doesn't break 99.999% of user clients. The exception is super super old clients, which I mention for the ssl_protocols line, which would compromise security unnecessarily if that was not configured.

Subpaths are pretty common for users that don't want wildcard certs or multiple subdomain certs.

The image cache is useful for proxies not located on the same host as Jellyfin. A common use case to provide an example for, but clearly labeled as optional. Same with download limiting for users with limited upload speed.

However, my download limit testing was flawed and it does not work as documented. Will remove that for now.

[jellyfin-bot]

Cloudflare Pages deployment

Latest commit	c2d077431cf28671fa6343359ead36707dd806e1
Status	✅ Deployed!
Preview URL	https://37f4a6b7.jellyfin-org.pages.dev
Type	🔀 Preview