diff --git a/Proxy-examples.md b/Proxy-examples.md
index 5735e45..18f5e61 100644
--- a/Proxy-examples.md
+++ b/Proxy-examples.md
@@ -3,7 +3,9 @@ The ports proxied by default are `80` for the web server and `3012` for the WebS
When using a proxy, it's preferrable to configure HTTPS at the proxy level and not at the application level, this way the WebSockets connection is also secured.
-## Caddy
+
+Caddy 1
+
Caddy can also automatically enable HTTPS in some circumstances, check the [docs](https://caddyserver.com/v1/docs/automatic-https).
```nginx
:443 {
@@ -27,8 +29,11 @@ Caddy can also automatically enable HTTPS in some circumstances, check the [docs
}
}
```
+
+
+
+Caddy 2
-## Caddy 2
Caddy 2 can also automatically enable HTTPS in some circumstances, check the [docs](https://caddyserver.com/docs/automatic-https).
```nginx
:443 {
@@ -45,8 +50,11 @@ Caddy 2 can also automatically enable HTTPS in some circumstances, check the [do
reverse_proxy :80
}
```
+
+
+
+Nginx (by shauder)
-## Nginx (by shauder)
```nginx
server {
listen 443 ssl http2;
@@ -93,8 +101,10 @@ server {
}
```
+
-## Nginx (by ypid)
+
+Nginx (by ypid)
Ansible inventory example that uses DebOps to configure nginx as a reverse proxy for bitwarden_rs. I choose to go with the PSK in the URL for additional security to not expose the API to everyone on the Internet because the client apps do not support client certificates yet (I tested it). Note: Using subpath/PSK requires to patch the source code and recompile, ref: https://github.com/dani-garcia/bitwarden_rs/issues/241#issuecomment-436376497. /admin is untested. For general discussion about subpath hosting for security refer to: https://github.com/debops/debops/issues/1233
@@ -149,8 +159,11 @@ nginx__servers:
log_not_found off;
deny all;
```
+
+
+
+Apache (by fbartels)
-## Apache (by fbartels)
```apache
SSLEngine on
@@ -174,8 +187,11 @@ nginx__servers:
RequestHeader set X-Real-IP %{REMOTE_ADDR}s
```
+
+
+
+Traefik v1 (docker-compose example)
-## Traefik v1 (docker-compose example)
```yaml
labels:
- traefik.enable=true
@@ -186,8 +202,11 @@ labels:
- traefik.hub.port=3012
- traefik.hub.protocol=ws
```
+
+
+
+Traefik v2 (docker-compose example by hwwilliams)
-## Traefik v2 (docker-compose example by hwwilliams)
#### Traefik v1 labels migrated to Traefik v2
```yaml
labels:
@@ -229,4 +248,5 @@ labels:
- traefik.http.routers.bitwarden-websocket-http.middlewares=redirect-https
- traefik.http.routers.bitwarden-websocket-http.service=bitwarden-websocket
- traefik.http.services.bitwarden-websocket.loadbalancer.server.port=3012
-```
\ No newline at end of file
+```
+
\ No newline at end of file