diff options
author | Bryan Newbold <bnewbold@archive.org> | 2017-08-05 13:07:50 -0700 |
---|---|---|
committer | Bryan Newbold <bnewbold@archive.org> | 2017-08-05 13:07:50 -0700 |
commit | 6b83183a205cb1e90c690c7e7f71c447cfae9a32 (patch) | |
tree | 870ae93beb63ce3d3b338346cff3a8f2fb35bcd1 /adze_extras/nginx-sites/feeds.bnewbold.net_unused_temboz | |
parent | 8974dd5f9351c666a1144b0584189d3a07c62351 (diff) | |
download | infra-6b83183a205cb1e90c690c7e7f71c447cfae9a32.tar.gz infra-6b83183a205cb1e90c690c7e7f71c447cfae9a32.zip |
backup adze nginx config
Diffstat (limited to 'adze_extras/nginx-sites/feeds.bnewbold.net_unused_temboz')
-rw-r--r-- | adze_extras/nginx-sites/feeds.bnewbold.net_unused_temboz | 73 |
1 files changed, 73 insertions, 0 deletions
diff --git a/adze_extras/nginx-sites/feeds.bnewbold.net_unused_temboz b/adze_extras/nginx-sites/feeds.bnewbold.net_unused_temboz new file mode 100644 index 0000000..fe016b0 --- /dev/null +++ b/adze_extras/nginx-sites/feeds.bnewbold.net_unused_temboz @@ -0,0 +1,73 @@ + +server { + listen 80; + listen [::]:80; + server_name feeds.bnewbold.net; + + access_log /var/log/nginx/feeds.access.log; + error_log /var/log/nginx/feeds.error.log; + + location = /temboz_css { + proxy_pass http://127.0.0.1:9999/temboz_css; + proxy_redirect default; + } + location = /temboz.css { + proxy_pass http://127.0.0.1:9999/temboz.css; + proxy_redirect default; + } + location = /view { + proxy_pass http://127.0.0.1:9999/view?show=mylos; + proxy_redirect default; + } + location = / { + proxy_pass http://127.0.0.1:9999/view?show=mylos; + proxy_redirect default; + } + + location ~* \.gif { + root /srv/http/feeds.bnewbold.net/temboz; + } + + # Let's Encrypt SSL Certs + location /.well-known/acme-challenge/ { + root /var/www/letsencrypt; + autoindex off; + } + +} + +server { + listen 443 ssl spdy; + listen [::]:443 ssl spdy; + server_name feeds.bnewbold.net; + + ssl_certificate /etc/letsencrypt/live/bnewbold.net/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/bnewbold.net/privkey.pem; + + #add_header Content-Security-Policy "default-src 'self'; style-src 'self' 'unsafe-inline'"; + add_header X-Frame-Options "SAMEORIGIN"; + add_header X-Content-Type-Options "nosniff"; + add_header X-Xss-Protection "1"; + # Enable STS with one year period (breaks http; optional) + #add_header Strict-Transport-Security "max-age=31557600; includeSubDomains"; + + access_log /var/log/nginx/feeds.access.log; + error_log /var/log/nginx/feeds.error.log; + + # Let's Encrypt SSL Certs + location /.well-known/acme-challenge/ { + root /var/www/letsencrypt; + autoindex off; + } + + location / { + proxy_pass http://127.0.0.1:9999; + proxy_redirect default; + auth_basic "Restricted"; + auth_basic_user_file /srv/http/feeds.bnewbold.net/htpasswd; + } + + location ~* \.gif { + root /srv/http/feeds.bnewbold.net/temboz; + } +} |