القائمة
Use when working with Nginx, Traefik, or HAProxy — setup, config debugging, SSL termination, routing
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
استنادا إلى تصنيف SOC المهني
Use before any DevOps build, change, or new feature — refine requirements through dialogue before touching infrastructure or code
Use when working with Docker — building images, writing Dockerfiles, debugging container issues
Use to execute a written implementation plan via subagents with review checkpoints
Use when implementation is complete, all tests pass, and you need to decide how to integrate the work - guides completion of development work by presenting structured options for merge, PR, or cleanup
Use when working with Kubernetes or Helm — authoring, reviewing, hardening, or debugging manifests, Deployments, Services, Ingress, RBAC, NetworkPolicy, or cluster operations
Use when receiving code review feedback, before implementing suggestions, especially if feedback seems unclear or technically questionable - requires technical rigor and verification, not performative agreement or blind implementation
| name | reverse-proxy |
| description | Use when working with Nginx, Traefik, or HAProxy — setup, config debugging, SSL termination, routing |
tooling/network/. Scaffold or modify proxy configs.nginx -t # test config syntax
nginx -s reload # reload without downtime
systemctl reload nginx # alternative
server {
listen 80;
server_name example.com;
location / {
proxy_pass http://localhost:3000;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection 'upgrade';
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_cache_bypass $http_upgrade;
}
}
certbot --nginx -d example.com
certbot renew --dry-run # test auto-renewal
| Error | First check |
|---|---|
| 502 Bad Gateway | Is the upstream running? curl localhost:3000 |
| 504 Gateway Timeout | Increase proxy_read_timeout and proxy_connect_timeout |
| 413 Request Too Large | Increase client_max_body_size |
| SSL handshake error | Check cert validity, check ssl_protocols |
connect() failed (111: Connection refused) | Wrong upstream port or service not running |
tail -f /var/log/nginx/error.log
tail -f /var/log/nginx/access.log
nginx -T # dump full merged config
# Traefik dashboard (if enabled): http://localhost:8080
# Check router/service status in dashboard
| Issue | Fix |
|---|---|
| Router not matching | Check rule syntax — Host, Path, PathPrefix |
| TLS not working | Check certResolver name matches static config |
| Service unreachable | Check loadBalancer.servers[].url format |
haproxy -c -f /etc/haproxy/haproxy.cfg # test config
systemctl reload haproxy # reload
tooling/network/nginx/ — nginx.conf templates, reverse proxy configstooling/network/traefik/ — traefik.yml, dynamic configstooling/network/haproxy/ — haproxy.cfg templatestooling/network/starters/ — full reverse proxy + SSL setups