From 381e40f2b9c87b6a9359f2c79cf4687064625288 Mon Sep 17 00:00:00 2001
From: Bryan Newbold <bnewbold@archive.org>
Date: Wed, 30 Aug 2017 21:04:39 -0700
Subject: bootstrap 3 + pelican template repo

---
 nginx-config/bnewbold.net | 32 ++++++++++++++++++++++++++++++++
 1 file changed, 32 insertions(+)
 create mode 100644 nginx-config/bnewbold.net

(limited to 'nginx-config')

diff --git a/nginx-config/bnewbold.net b/nginx-config/bnewbold.net
new file mode 100644
index 0000000..ae35dc8
--- /dev/null
+++ b/nginx-config/bnewbold.net
@@ -0,0 +1,32 @@
+
+server {
+    listen 80;
+    listen [::]:80;
+    listen 443 ssl spdy;
+    listen [::]:443 ssl spdy;
+    server_name  archive3k.org www.archive3k.org;
+
+    ssl_certificate /etc/letsencrypt/live/archive3k.org/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/archive3k.org/privkey.pem;
+
+    add_header Content-Security-Policy "default-src 'self'; style-src 'self' 'unsafe-inline'";
+    add_header X-Frame-Options "SAMEORIGIN";       # 'always' if nginx > 1.7.5
+    add_header X-Content-Type-Options "nosniff";   # 'always' if nginx > 1.7.5
+    add_header X-Xss-Protection "1";
+
+    access_log  /var/log/nginx/archive3k.access.log;
+    error_log  /var/log/nginx/archive3k.error.log;
+
+    location / {
+        root   /srv/http/archive3k.org/www/;
+        index index.html index.htm;
+    }
+
+    # Let's Encrypt SSL Certs
+    location /.well-known/acme-challenge/ {
+        root /var/www/letsencrypt;
+        autoindex off;
+    }
+
+}
+
-- 
cgit v1.2.3