Reverse proxy

Skill tspry/superpowers-devops/skills/reverse-proxy

Use when working with Nginx, Traefik, or HAProxy — setup, config debugging, SSL termination, routingFrom its SKILL.md

Install

npx -y skills add tspry/superpowers-devops --skill reverse-proxy

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

One thing to look at

3 stars3 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.

SKILL.md

2.6 KB, as published. Nobody here has run it

Reverse Proxy

Mode Detection

Repo mode — templates in tooling/network/. Scaffold or modify proxy configs.
Chat mode — user pastes config or error. Diagnose and provide corrected config.

Nginx

Test and reload config (never restart)

nginx -t                        # test config syntax
nginx -s reload                 # reload without downtime
systemctl reload nginx          # alternative

Basic reverse proxy config

server {
    listen 80;
    server_name example.com;

    location / {
        proxy_pass http://localhost:3000;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection 'upgrade';
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_cache_bypass $http_upgrade;
    }
}

SSL with Let's Encrypt

certbot --nginx -d example.com
certbot renew --dry-run          # test auto-renewal

Debugging common errors

Error	First check
502 Bad Gateway	Is the upstream running? `curl localhost:3000`
504 Gateway Timeout	Increase `proxy_read_timeout` and `proxy_connect_timeout`
413 Request Too Large	Increase `client_max_body_size`
SSL handshake error	Check cert validity, check `ssl_protocols`
`connect() failed (111: Connection refused)`	Wrong upstream port or service not running

Useful debug commands

tail -f /var/log/nginx/error.log
tail -f /var/log/nginx/access.log
nginx -T                         # dump full merged config

Traefik

Dynamic config check

# Traefik dashboard (if enabled): http://localhost:8080
# Check router/service status in dashboard

Common issues

Issue	Fix
Router not matching	Check `rule` syntax — Host, Path, PathPrefix
TLS not working	Check `certResolver` name matches static config
Service unreachable	Check `loadBalancer.servers[].url` format

HAProxy

Test and reload config

haproxy -c -f /etc/haproxy/haproxy.cfg    # test config
systemctl reload haproxy                   # reload

Tooling Templates

tooling/network/nginx/ — nginx.conf templates, reverse proxy configs
tooling/network/traefik/ — traefik.yml, dynamic configs
tooling/network/haproxy/ — haproxy.cfg templates
tooling/network/starters/ — full reverse proxy + SSL setups