Menú
Use when working with Nginx, Traefik, or HAProxy — setup, config debugging, SSL termination, routing
Instalar con Codex o Claude Copia este prompt, pégalo en Codex, Claude u otro asistente, y deja que revise la página de la skill y la instale por ti.
Basado en la clasificación ocupacional SOC
Use before any DevOps build, change, or new feature — refine requirements through dialogue before touching infrastructure or code
Use when working with Docker — building images, writing Dockerfiles, debugging container issues
Use to execute a written implementation plan via subagents with review checkpoints
Use when implementation is complete, all tests pass, and you need to decide how to integrate the work - guides completion of development work by presenting structured options for merge, PR, or cleanup
Use when working with Kubernetes or Helm — authoring, reviewing, hardening, or debugging manifests, Deployments, Services, Ingress, RBAC, NetworkPolicy, or cluster operations
Use when receiving code review feedback, before implementing suggestions, especially if feedback seems unclear or technically questionable - requires technical rigor and verification, not performative agreement or blind implementation
| name | reverse-proxy |
| description | Use when working with Nginx, Traefik, or HAProxy — setup, config debugging, SSL termination, routing |
tooling/network/. Scaffold or modify proxy configs.nginx -t # test config syntax
nginx -s reload # reload without downtime
systemctl reload nginx # alternative
server {
listen 80;
server_name example.com;
location / {
proxy_pass http://localhost:3000;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection 'upgrade';
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_cache_bypass $http_upgrade;
}
}
certbot --nginx -d example.com
certbot renew --dry-run # test auto-renewal
| Error | First check |
|---|---|
| 502 Bad Gateway | Is the upstream running? curl localhost:3000 |
| 504 Gateway Timeout | Increase proxy_read_timeout and proxy_connect_timeout |
| 413 Request Too Large | Increase client_max_body_size |
| SSL handshake error | Check cert validity, check ssl_protocols |
connect() failed (111: Connection refused) | Wrong upstream port or service not running |
tail -f /var/log/nginx/error.log
tail -f /var/log/nginx/access.log
nginx -T # dump full merged config
# Traefik dashboard (if enabled): http://localhost:8080
# Check router/service status in dashboard
| Issue | Fix |
|---|---|
| Router not matching | Check rule syntax — Host, Path, PathPrefix |
| TLS not working | Check certResolver name matches static config |
| Service unreachable | Check loadBalancer.servers[].url format |
haproxy -c -f /etc/haproxy/haproxy.cfg # test config
systemctl reload haproxy # reload
tooling/network/nginx/ — nginx.conf templates, reverse proxy configstooling/network/traefik/ — traefik.yml, dynamic configstooling/network/haproxy/ — haproxy.cfg templatestooling/network/starters/ — full reverse proxy + SSL setups