1 files changed, 32 insertions, 0 deletions
diff --git a/nginx-config/archive3k.org b/nginx-config/archive3k.org
new file mode 100644
index 0000000..ae35dc8
--- /dev/null
+++ b/nginx-config/archive3k.org
@@ -0,0 +1,32 @@
+
+server {
+    listen 80;
+    listen [::]:80;
+    listen 443 ssl spdy;
+    listen [::]:443 ssl spdy;
+    server_name  archive3k.org www.archive3k.org;
+
+    ssl_certificate /etc/letsencrypt/live/archive3k.org/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/archive3k.org/privkey.pem;
+
+    add_header Content-Security-Policy "default-src 'self'; style-src 'self' 'unsafe-inline'";
+    add_header X-Frame-Options "SAMEORIGIN";       # 'always' if nginx > 1.7.5
+    add_header X-Content-Type-Options "nosniff";   # 'always' if nginx > 1.7.5
+    add_header X-Xss-Protection "1";
+
+    access_log  /var/log/nginx/archive3k.access.log;
+    error_log  /var/log/nginx/archive3k.error.log;
+
+    location / {
+        root   /srv/http/archive3k.org/www/;
+        index index.html index.htm;
+    }
+
+    # Let's Encrypt SSL Certs
+    location /.well-known/acme-challenge/ {
+        root /var/www/letsencrypt;
+        autoindex off;
+    }
+
+}
+