blob: ae35dc8390e86b4a9c199afc9e69a09fe4d0aeaa (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
|
server {
listen 80;
listen [::]:80;
listen 443 ssl spdy;
listen [::]:443 ssl spdy;
server_name archive3k.org www.archive3k.org;
ssl_certificate /etc/letsencrypt/live/archive3k.org/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/archive3k.org/privkey.pem;
add_header Content-Security-Policy "default-src 'self'; style-src 'self' 'unsafe-inline'";
add_header X-Frame-Options "SAMEORIGIN"; # 'always' if nginx > 1.7.5
add_header X-Content-Type-Options "nosniff"; # 'always' if nginx > 1.7.5
add_header X-Xss-Protection "1";
access_log /var/log/nginx/archive3k.access.log;
error_log /var/log/nginx/archive3k.error.log;
location / {
root /srv/http/archive3k.org/www/;
index index.html index.htm;
}
# Let's Encrypt SSL Certs
location /.well-known/acme-challenge/ {
root /var/www/letsencrypt;
autoindex off;
}
}
|