cmc/dotfiles

Using GNU Stow to manage my dotfiles. config dotfiles macos stow

Commit 0f11584bff

0f11584bff5fb485a929f60065c17a6b1639d0fd

parent: 99425e089f

Verified · cmc

cmc <hello@cleberg.net> · 2026-02-16 18:08 UTC 

slightly minify nginx files

Layout: unified · split

linux/nginx/etc/nginx/conf.d/ao.conf +2 −25
@@ -1,39 +1,16 @@
1# ----------------------------------------------------------------------
2# | Config file for host |
3# ----------------------------------------------------------------------
4server { 1server {
5 listen [::]:443 ssl; 2 listen [::]:443 ssl;
6 listen 443 ssl; 3 listen 443 ssl;
7 http2 on; 4 http2 on;
8
9 server_name ao.cleberg.net; 5 server_name ao.cleberg.net;
10
11 include custom.d/tls/ssl_engine.conf; 6 include custom.d/tls/ssl_engine.conf;
12 include custom.d/tls/certificate_files.conf; 7 include custom.d/tls/certificate_files.conf;
13 include custom.d/tls/policy_balanced.conf; 8 include custom.d/tls/policy_balanced.conf;
14 include custom.d/basic.conf; 9 include custom.d/basic.conf;
15
16 # ----------------------------------------------------------------------
17 # | Custom rules & config for specific website |
18 # ----------------------------------------------------------------------
19 location / { 10 location / {
20 set $upstream http://127.0.0.1:9380; 11 set $upstream http://127.0.0.1:9380;
21 proxy_pass $upstream; 12 proxy_pass $upstream;
22
23 include custom.d/reverse_proxy/basic.conf; 13 include custom.d/reverse_proxy/basic.conf;
24 } 14 }
25
26 include custom.d/security/robots_index_only.conf; 15 include custom.d/security/robots_index_only.conf;
27 # ----------------------------------------------------------------------
28}
29
30# ----------------------------------------------------------------------
31# | Config file for non-secure host |
32# ----------------------------------------------------------------------
33server {
34 listen [::]:80;
35 listen 80;
36 server_name ao.cleberg.net;
37
38 return 301 https://$host$request_uri;
39} 16}
linux/nginx/etc/nginx/conf.d/art.conf +3 −26
@@ -1,39 +1,16 @@
1# ----------------------------------------------------------------------
2# | Config file for host |
3# ----------------------------------------------------------------------
4server { 1server {
5 listen [::]:443 ssl; 2 listen [::]:443 ssl;
6 listen 443 ssl; 3 listen 443 ssl;
7 http2 on; 4 http2 on;
8
9 server_name art.cleberg.net; 5 server_name art.cleberg.net;
10
11 include custom.d/tls/ssl_engine.conf; 6 include custom.d/tls/ssl_engine.conf;
12 include custom.d/tls/certificate_files.conf; 7 include custom.d/tls/certificate_files.conf;
13 include custom.d/tls/policy_balanced.conf; 8 include custom.d/tls/policy_balanced.conf;
14 include custom.d/basic.conf; 9 include custom.d/basic.conf;
15
16 # ----------------------------------------------------------------------
17 # | Custom rules & config for specific website |
18 # ----------------------------------------------------------------------
19 location / { 10 location / {
20 set $upstream http://127.0.0.1:3003; 11 set $upstream http://127.0.0.1:3003;
21 proxy_pass $upstream; 12 proxy_pass $upstream;
22
23 include custom.d/reverse_proxy/basic.conf; 13 include custom.d/reverse_proxy/basic.conf;
24 } 14 }
25 15 include custom.d/security/robots_index_only.conf;
26 include custom.d/security/robots_index_only.conf;
27 # ----------------------------------------------------------------------
28}
29
30# ----------------------------------------------------------------------
31# | Config file for non-secure host |
32# ----------------------------------------------------------------------
33server {
34 listen [::]:80;
35 listen 80;
36 server_name art.cleberg.net;
37
38 return 301 https://$host$request_uri;
39} 16}
linux/nginx/etc/nginx/conf.d/auth.conf +3 −29
@@ -1,42 +1,16 @@
1# ----------------------------------------------------------------------
2# | Config file for host |
3# ----------------------------------------------------------------------
4server { 1server {
5 listen [::]:443 ssl; 2 listen [::]:443 ssl;
6 listen 443 ssl; 3 listen 443 ssl;
7 http2 on; 4 http2 on;
8
9 server_name auth.cleberg.net; 5 server_name auth.cleberg.net;
10
11 include custom.d/tls/ssl_engine.conf; 6 include custom.d/tls/ssl_engine.conf;
12 include custom.d/tls/certificate_files.conf; 7 include custom.d/tls/certificate_files.conf;
13 include custom.d/tls/policy_balanced.conf; 8 include custom.d/tls/policy_balanced.conf;
14 include custom.d/basic.conf; 9 include custom.d/basic.conf;
15 10 set $upstream http://127.0.0.1:9092;
16 # ----------------------------------------------------------------------
17 # | Custom rules & config for specific website |
18 # ----------------------------------------------------------------------
19 set $upstream http://127.0.0.1:9092;
20
21 location / { 11 location / {
22 proxy_pass $upstream; 12 proxy_pass $upstream;
23
24 include custom.d/reverse_proxy/basic.conf; 13 include custom.d/reverse_proxy/basic.conf;
25 } 14 }
26 15 location /api/verify { proxy_pass $upstream; }
27 location /api/verify {
28 proxy_pass $upstream;
29 }
30 # ----------------------------------------------------------------------
31}
32
33# ----------------------------------------------------------------------
34# | Config file for non-secure host |
35# ----------------------------------------------------------------------
36server {
37 listen [::]:80;
38 listen 80;
39 server_name auth.cleberg.net;
40
41 return 301 https://$host$request_uri;
42} 16}
linux/nginx/etc/nginx/conf.d/br.conf +5 −28
@@ -1,39 +1,16 @@
1# ----------------------------------------------------------------------
2# | Config file for host |
3# ----------------------------------------------------------------------
4server { 1server {
5 listen [::]:443 ssl; 2 listen [::]:443 ssl;
6 listen 443 ssl; 3 listen 443 ssl;
7 http2 on; 4 http2 on;
8
9 server_name br.cleberg.net; 5 server_name br.cleberg.net;
10
11 include custom.d/tls/ssl_engine.conf; 6 include custom.d/tls/ssl_engine.conf;
12 include custom.d/tls/certificate_files.conf; 7 include custom.d/tls/certificate_files.conf;
13 include custom.d/tls/policy_balanced.conf; 8 include custom.d/tls/policy_balanced.conf;
14 include custom.d/basic.conf; 9 include custom.d/basic.conf;
15 10 location / {
16 # ---------------------------------------------------------------------- 11 set $upstream http://127.0.0.1:3030;
17 # | Custom rules & config for specific website | 12 proxy_pass $upstream;
18 # ----------------------------------------------------------------------
19 location / {
20 set $upstream http://127.0.0.1:3030;
21 proxy_pass $upstream;
22
23 include custom.d/reverse_proxy/basic.conf; 13 include custom.d/reverse_proxy/basic.conf;
24 } 14 }
25 15 include custom.d/security/robots_index_only.conf;
26 include custom.d/security/robots_index_only.conf;
27 # ----------------------------------------------------------------------
28}
29
30# ----------------------------------------------------------------------
31# | Config file for non-secure host |
32# ----------------------------------------------------------------------
33server {
34 listen [::]:80;
35 listen 80;
36 server_name br.cleberg.net;
37
38 return 301 https://$host$request_uri;
39} 16}
linux/nginx/etc/nginx/conf.d/bt.conf +4 −32
@@ -1,46 +1,18 @@
1# ----------------------------------------------------------------------
2# | Config file for host |
3# ----------------------------------------------------------------------
4server { 1server {
5 listen [::]:443 ssl; 2 listen [::]:443 ssl;
6 listen 443 ssl; 3 listen 443 ssl;
7 http2 on; 4 http2 on;
8
9 server_name bt.cleberg.net; 5 server_name bt.cleberg.net;
10
11 include custom.d/tls/ssl_engine.conf; 6 include custom.d/tls/ssl_engine.conf;
12 include custom.d/tls/certificate_files.conf; 7 include custom.d/tls/certificate_files.conf;
13 include custom.d/tls/policy_balanced.conf; 8 include custom.d/tls/policy_balanced.conf;
14 include custom.d/basic.conf; 9 include custom.d/basic.conf;
15 10 set $upstream http://127.0.0.1:9091;
16 # ---------------------------------------------------------------------- 11 location /authelia { include custom.d/reverse_proxy/authelia.conf; }
17 # | Custom rules & config for specific website |
18 # ----------------------------------------------------------------------
19 set $upstream http://127.0.0.1:9091;
20
21 location /authelia {
22 include custom.d/reverse_proxy/authelia.conf;
23 }
24
25 location / { 12 location / {
26 proxy_pass $upstream; 13 proxy_pass $upstream;
27
28 include custom.d/reverse_proxy/authelia_request.conf; 14 include custom.d/reverse_proxy/authelia_request.conf;
29 # include custom.d/reverse_proxy/basic.conf;
30 proxy_pass_header X-bt-Session-Id; 15 proxy_pass_header X-bt-Session-Id;
31 } 16 }
32 17 include custom.d/security/robots_index_only.conf;
33 include custom.d/security/robots_index_only.conf;
34 # ----------------------------------------------------------------------
35}
36
37# ----------------------------------------------------------------------
38# | Config file for non-secure host |
39# ----------------------------------------------------------------------
40server {
41 listen [::]:80;
42 listen 80;
43 server_name bt.cleberg.net;
44
45 return 301 https://$host$request_uri;
46} 18}
linux/nginx/etc/nginx/conf.d/bw.conf +14 −37
@@ -1,39 +1,16 @@
1# ----------------------------------------------------------------------
2# | Config file for host |
3# ----------------------------------------------------------------------
4server { 1server {
5 listen [::]:443 ssl; 2 listen [::]:443 ssl;
6 listen 443 ssl; 3 listen 443 ssl;
7 http2 on; 4 http2 on;
8 5 server_name bw.cleberg.net;
9 server_name bw.cleberg.net; 6 include custom.d/tls/ssl_engine.conf;
10 7 include custom.d/tls/certificate_files.conf;
11 include custom.d/tls/ssl_engine.conf; 8 include custom.d/tls/policy_balanced.conf;
12 include custom.d/tls/certificate_files.conf; 9 include custom.d/basic.conf;
13 include custom.d/tls/policy_balanced.conf; 10 location / {
14 include custom.d/basic.conf; 11 set $upstream http://127.0.0.1:10416;
15 12 proxy_pass $upstream;
16 # ---------------------------------------------------------------------- 13 include custom.d/reverse_proxy/basic.conf;
17 # | Custom rules & config for specific website | 14 }
18 # ---------------------------------------------------------------------- 15 include custom.d/security/robots_index_only.conf;
19 location / {
20 set $upstream http://127.0.0.1:10416;
21 proxy_pass $upstream;
22
23 include custom.d/reverse_proxy/basic.conf;
24 }
25
26 include custom.d/security/robots_index_only.conf;
27 # ----------------------------------------------------------------------
28}
29
30# ----------------------------------------------------------------------
31# | Config file for non-secure host |
32# ----------------------------------------------------------------------
33server {
34 listen [::]:80;
35 listen 80;
36 server_name bw.cleberg.net;
37
38 return 301 https://$host$request_uri;
39} 16}
linux/nginx/etc/nginx/conf.d/cc.conf +3 −26
@@ -1,39 +1,16 @@
1# ----------------------------------------------------------------------
2# | Config file for host |
3# ----------------------------------------------------------------------
4server { 1server {
5 listen [::]:443 ssl; 2 listen [::]:443 ssl;
6 listen 443 ssl; 3 listen 443 ssl;
7 http2 on; 4 http2 on;
8
9 server_name cc.cleberg.net; 5 server_name cc.cleberg.net;
10
11 include custom.d/tls/ssl_engine.conf; 6 include custom.d/tls/ssl_engine.conf;
12 include custom.d/tls/certificate_files.conf; 7 include custom.d/tls/certificate_files.conf;
13 include custom.d/tls/policy_balanced.conf; 8 include custom.d/tls/policy_balanced.conf;
14 include custom.d/basic.conf; 9 include custom.d/basic.conf;
15
16 # ----------------------------------------------------------------------
17 # | Custom rules & config for specific website |
18 # ----------------------------------------------------------------------
19 location / { 10 location / {
20 set $upstream http://127.0.0.1:8111; 11 set $upstream http://127.0.0.1:8111;
21 proxy_pass $upstream; 12 proxy_pass $upstream;
22
23 include custom.d/reverse_proxy/basic.conf; 13 include custom.d/reverse_proxy/basic.conf;
24 } 14 }
25 15 include custom.d/security/robots_index_only.conf;
26 include custom.d/security/robots_index_only.conf;
27 # ----------------------------------------------------------------------
28}
29
30# ----------------------------------------------------------------------
31# | Config file for non-secure host |
32# ----------------------------------------------------------------------
33server {
34 listen [::]:80;
35 listen 80;
36 server_name cc.cleberg.net;
37
38 return 301 https://$host$request_uri;
39} 16}
linux/nginx/etc/nginx/conf.d/cleberg.io deleted −54
@@ -1,54 +0,0 @@
1# ----------------------------------------------------------------------
2# | Config file for host |
3# ----------------------------------------------------------------------
4server {
5 listen [::]:443 ssl;
6 listen 443 ssl;
7 http2 on;
8
9 server_name www.cleberg.io cleberg.io;
10
11 include custom.d/tls/ssl_engine.conf;
12 include custom.d/tls/policy_balanced.conf;
13# include custom.d/tls/certificate_files.conf;
14 ssl_certificate /etc/letsencrypt/live/cleberg.io/fullchain.pem;
15 ssl_certificate_key /etc/letsencrypt/live/cleberg.io/privkey.pem;
16 ssl_trusted_certificate /etc/letsencrypt/live/cleberg.io/chain.pem;
17
18 return 301 $scheme://cleberg.io$request_uri;
19}
20
21
22server {
23 listen [::]:443 ssl;
24 listen 443 ssl;
25 http2 on;
26
27 server_name cleberg.io;
28
29 include custom.d/tls/ssl_engine.conf;
30 include custom.d/tls/policy_balanced.conf;
31 include custom.d/basic.conf;
32
33# include custom.d/tls/certificate_files.conf;
34 ssl_certificate /etc/letsencrypt/live/cleberg.io/fullchain.pem;
35 ssl_certificate_key /etc/letsencrypt/live/cleberg.io/privkey.pem;
36 ssl_trusted_certificate /etc/letsencrypt/live/cleberg.io/chain.pem;
37
38 # ----------------------------------------------------------------------
39 # | Custom rules & config for specific website |
40 # ----------------------------------------------------------------------
41 return 301 https://cleberg.net;
42 # ----------------------------------------------------------------------
43}
44
45# ----------------------------------------------------------------------
46# | Config file for non-secure host |
47# ----------------------------------------------------------------------
48server {
49 listen [::]:80;
50 listen 80;
51 server_name www.cleberg.io cleberg.io;
52
53 return 301 https://cleberg.io$request_uri;
54}
linux/nginx/etc/nginx/conf.d/cleberg.io.conf added +20
@@ -0,0 +1,20 @@
1server {
2 listen [::]:443 ssl;
3 listen 443 ssl;
4 http2 on;
5 server_name cleberg.io;
6 include custom.d/tls/ssl_engine.conf;
7 include custom.d/tls/policy_balanced.conf;
8 include custom.d/basic.conf;
9 ssl_certificate /etc/letsencrypt/live/cleberg.io/fullchain.pem;
10 ssl_certificate_key /etc/letsencrypt/live/cleberg.io/privkey.pem;
11 ssl_trusted_certificate /etc/letsencrypt/live/cleberg.io/chain.pem;
12 return 301 https://cleberg.net;
13}
14
15server {
16 listen [::]:80;
17 listen 80;
18 server_name www.cleberg.io cleberg.io;
19 return 301 https://cleberg.io$request_uri;
20}
linux/nginx/etc/nginx/conf.d/cleberg.net.conf +5 −41
@@ -1,70 +1,34 @@
1# ----------------------------------------------------------------------
2# | Config file for host |
3# ----------------------------------------------------------------------
4server { 1server {
5 listen [::]:443 ssl; 2 listen [::]:443 ssl;
6 listen 443 ssl; 3 listen 443 ssl;
7 http2 on; 4 http2 on;
8
9 server_name www.cleberg.net; 5 server_name www.cleberg.net;
10
11 include custom.d/tls/ssl_engine.conf; 6 include custom.d/tls/ssl_engine.conf;
12 include custom.d/tls/certificate_files.conf; 7 include custom.d/tls/certificate_files.conf;
13 include custom.d/tls/policy_balanced.conf; 8 include custom.d/tls/policy_balanced.conf;
14
15 return 301 $scheme://cleberg.net$request_uri; 9 return 301 $scheme://cleberg.net$request_uri;
16} 10}
17 11
18
19server { 12server {
20 listen [::]:443 ssl; 13 listen [::]:443 ssl;
21 listen 443 ssl; 14 listen 443 ssl;
22 http2 on; 15 http2 on;
23
24 server_name cleberg.net; 16 server_name cleberg.net;
25
26 include custom.d/tls/ssl_engine.conf; 17 include custom.d/tls/ssl_engine.conf;
27 include custom.d/tls/certificate_files.conf; 18 include custom.d/tls/certificate_files.conf;
28 include custom.d/tls/policy_balanced.conf; 19 include custom.d/tls/policy_balanced.conf;
29 include custom.d/basic.conf; 20 include custom.d/basic.conf;
30
31 root /var/www/cleberg.net/; 21 root /var/www/cleberg.net/;
32 22 location / { try_files $uri $uri/ =404; }
33 # ---------------------------------------------------------------------- 23 location /blog/ { rewrite ^/blog/((?!index)[^/]+)/(.*)$ /blog/$1.html permanent; }
34 # | Custom rules & config for specific website | 24 location /wiki/ { rewrite ^/wiki/((?!index)[^/]+)/(.*)$ /wiki/$1.html permanent; }
35 # ---------------------------------------------------------------------- 25 location /atom.xml { return 301 $scheme://$host/feed.xml; }
36 location / { 26 location /blog/salary-transparency.html { return 301 $scheme://$host/salary/; }
37 try_files $uri $uri/ =404;
38 }
39
40 # fix: redirect blog & wiki posts from "/" to ".html"
41 location /blog/ {
42 rewrite ^/blog/((?!index)[^/]+)/(.*)$ /blog/$1.html permanent;
43 }
44
45 location /wiki/ {
46 rewrite ^/wiki/((?!index)[^/]+)/(.*)$ /wiki/$1.html permanent;
47 }
48
49 # fix: redirect atom.xml to feed.xml
50 location /atom.xml {
51 return 301 $scheme://$host/feed.xml;
52 }
53
54 # fix: redirect salary page
55 location /blog/salary-transparency.html {
56 return 301 $scheme://$host/salary/;
57 }
58 # ----------------------------------------------------------------------
59} 27}
60 28
61# ----------------------------------------------------------------------
62# | Config file for non-secure host |
63# ----------------------------------------------------------------------
64server { 29server {
65 listen [::]:80; 30 listen [::]:80;
66 listen 80; 31 listen 80;
67 server_name www.cleberg.net cleberg.net; 32 server_name www.cleberg.net cleberg.net;
68
69 return 301 https://cleberg.net$request_uri; 33 return 301 https://cleberg.net$request_uri;
70} 34}
linux/nginx/etc/nginx/conf.d/cleberg.net_wildcard.conf −24
@@ -4,27 +4,3 @@ server {
4 server_name .cleberg.net; 4 server_name .cleberg.net;
5 return 301 https://$host$request_uri; 5 return 301 https://$host$request_uri;
6} 6}
7
8server {
9 listen 443 ssl;
10 listen [::]:443 ssl;
11 http2 on;
12
13 server_name .cleberg.net;
14
15 include custom.d/tls/ssl_engine.conf;
16 include custom.d/tls/certificate_files.conf;
17 include custom.d/tls/policy_balanced.conf;
18 include custom.d/basic.conf;
19
20 location / {
21 if ($backend_address = "") {
22 return 404;
23 }
24
25 proxy_pass $backend_address;
26 include custom.d/reverse_proxy/basic.conf;
27 }
28
29 include custom.d/security/robots_index_only.conf;
30}
linux/nginx/etc/nginx/conf.d/cv.conf +1 −25
@@ -1,37 +1,13 @@
1# ----------------------------------------------------------------------
2# | Config file for host |
3# ----------------------------------------------------------------------
4server { 1server {
5 listen [::]:443 ssl; 2 listen [::]:443 ssl;
6 listen 443 ssl; 3 listen 443 ssl;
7 http2 on; 4 http2 on;
8
9 server_name cv.cleberg.net; 5 server_name cv.cleberg.net;
10
11 include custom.d/tls/ssl_engine.conf; 6 include custom.d/tls/ssl_engine.conf;
12 include custom.d/tls/certificate_files.conf; 7 include custom.d/tls/certificate_files.conf;
13 include custom.d/tls/policy_balanced.conf; 8 include custom.d/tls/policy_balanced.conf;
14 include custom.d/basic.conf; 9 include custom.d/basic.conf;
15
16 root /var/www/cv/; 10 root /var/www/cv/;
17 autoindex on; 11 autoindex on;
18 12 location / { try_files $uri $uri/ /index.html; }
19 # ----------------------------------------------------------------------
20 # | Custom rules & config for specific website |
21 # ----------------------------------------------------------------------
22 location / {
23 try_files $uri $uri/ /index.html;
24 }
25 # ----------------------------------------------------------------------
26}
27
28# ----------------------------------------------------------------------
29# | Config file for non-secure host |
30# ----------------------------------------------------------------------
31server {
32 listen [::]:80;
33 listen 80;
34 server_name cv.cleberg.net;
35
36 return 301 https://$host$request_uri;
37} 13}
linux/nginx/etc/nginx/conf.d/ddns.conf +4 −30
@@ -1,44 +1,18 @@
1# ----------------------------------------------------------------------
2# | Config file for host |
3# ----------------------------------------------------------------------
4server { 1server {
5 listen [::]:443 ssl; 2 listen [::]:443 ssl;
6 listen 443 ssl; 3 listen 443 ssl;
7 http2 on; 4 http2 on;
8
9 server_name ddns.cleberg.net; 5 server_name ddns.cleberg.net;
10
11 include custom.d/tls/ssl_engine.conf; 6 include custom.d/tls/ssl_engine.conf;
12 include custom.d/tls/certificate_files.conf; 7 include custom.d/tls/certificate_files.conf;
13 include custom.d/tls/policy_balanced.conf; 8 include custom.d/tls/policy_balanced.conf;
14 include custom.d/basic.conf; 9 include custom.d/basic.conf;
15 10 location /authelia { include custom.d/reverse_proxy/authelia.conf; }
16 # ----------------------------------------------------------------------
17 # | Custom rules & config for specific website |
18 # ----------------------------------------------------------------------
19 location /authelia {
20 include custom.d/reverse_proxy/authelia.conf;
21 }
22
23 location / { 11 location / {
24 set $upstream http://127.0.0.1:8097; 12 set $upstream http://127.0.0.1:8097;
25 proxy_pass $upstream; 13 proxy_pass $upstream;
26
27 include custom.d/reverse_proxy/authelia_request.conf; 14 include custom.d/reverse_proxy/authelia_request.conf;
28 include custom.d/reverse_proxy/basic.conf; 15 include custom.d/reverse_proxy/basic.conf;
29 } 16 }
30 17 include custom.d/security/robots_index_only.conf;
31 include custom.d/security/robots_index_only.conf;
32 # ----------------------------------------------------------------------
33}
34
35# ----------------------------------------------------------------------
36# | Config file for non-secure host |
37# ----------------------------------------------------------------------
38server {
39 listen [::]:80;
40 listen 80;
41 server_name ddns.cleberg.net;
42
43 return 301 https://$host$request_uri;
44} 18}
linux/nginx/etc/nginx/conf.d/default.conf +12 −28
@@ -1,33 +1,17 @@
1# ----------------------------------------------------------------------
2# | Default behavior for unknown hosts |
3# ----------------------------------------------------------------------
4#
5# Drop requests for unknown hosts.
6#
7# If no default server is defined, Nginx will use the first found server.
8# To prevent host header attacks, or other potential problems when an unknown
9# server name is used in a request, it's recommended to drop the request
10# returning 444 "No Response".
11
12server { 1server {
13 listen [::]:443 ssl default_server; 2 listen [::]:443 ssl default_server;
14 listen 443 ssl default_server; 3 listen 443 ssl default_server;
15 http2 on; 4 http2 on;
16 5 server_name _;
17 server_name _; 6 include custom.d/tls/ssl_engine.conf;
18 7 include custom.d/tls/certificate_files.conf;
19 include custom.d/tls/ssl_engine.conf; 8 include custom.d/tls/policy_balanced.conf;
20 include custom.d/tls/certificate_files.conf; 9 return 444;
21 include custom.d/tls/policy_balanced.conf;
22
23 return 444;
24} 10}
25 11
26server { 12server {
27 listen [::]:80; 13 listen [::]:80;
28 listen 80; 14 listen 80;
29 15 server_name _;
30 server_name _; 16 return 444;
31
32 return 444;
33} 17}
linux/nginx/etc/nginx/conf.d/docker.conf +4 −30
@@ -1,44 +1,18 @@
1# ----------------------------------------------------------------------
2# | Config file for host |
3# ----------------------------------------------------------------------
4server { 1server {
5 listen [::]:443 ssl; 2 listen [::]:443 ssl;
6 listen 443 ssl; 3 listen 443 ssl;
7 http2 on; 4 http2 on;
8
9 server_name docker.cleberg.net; 5 server_name docker.cleberg.net;
10
11 include custom.d/tls/ssl_engine.conf; 6 include custom.d/tls/ssl_engine.conf;
12 include custom.d/tls/certificate_files.conf; 7 include custom.d/tls/certificate_files.conf;
13 include custom.d/tls/policy_balanced.conf; 8 include custom.d/tls/policy_balanced.conf;
14 include custom.d/basic.conf; 9 include custom.d/basic.conf;
15 10 location /authelia { include custom.d/reverse_proxy/authelia.conf; }
16 # ----------------------------------------------------------------------
17 # | Custom rules & config for specific website |
18 # ----------------------------------------------------------------------
19 location /authelia {
20 include custom.d/reverse_proxy/authelia.conf;
21 }
22
23 location / { 11 location / {
24 set $upstream http://127.0.0.1:3777; 12 set $upstream http://127.0.0.1:3777;
25 proxy_pass $upstream; 13 proxy_pass $upstream;
26
27 include custom.d/reverse_proxy/authelia_request.conf; 14 include custom.d/reverse_proxy/authelia_request.conf;
28 include custom.d/reverse_proxy/basic.conf; 15 include custom.d/reverse_proxy/basic.conf;
29 } 16 }
30 17 include custom.d/security/robots_index_only.conf;
31 include custom.d/security/robots_index_only.conf;
32 # ----------------------------------------------------------------------
33}
34
35# ----------------------------------------------------------------------
36# | Config file for non-secure host |
37# ----------------------------------------------------------------------
38server {
39 listen [::]:80;
40 listen 80;
41 server_name docker.cleberg.net;
42
43 return 301 https://$host$request_uri;
44} 18}
linux/nginx/etc/nginx/conf.d/files.conf +1 −28
@@ -1,40 +1,13 @@
1# ----------------------------------------------------------------------
2# | Config file for files.cleberg.net host |
3# ----------------------------------------------------------------------
4server { 1server {
5 listen [::]:443 ssl; 2 listen [::]:443 ssl;
6 listen 443 ssl; 3 listen 443 ssl;
7 http2 on; 4 http2 on;
8
9 # The host name to respond to
10 server_name files.cleberg.net; 5 server_name files.cleberg.net;
11
12 include custom.d/tls/ssl_engine.conf; 6 include custom.d/tls/ssl_engine.conf;
13 include custom.d/tls/certificate_files.conf; 7 include custom.d/tls/certificate_files.conf;
14 include custom.d/tls/policy_balanced.conf; 8 include custom.d/tls/policy_balanced.conf;
15 include custom.d/basic.conf; 9 include custom.d/basic.conf;
16
17 root /var/www/files/; 10 root /var/www/files/;
18 autoindex on; 11 autoindex on;
19 12 location / { try_files $uri $uri/ /index.html; }
20 # Include the basic custom.d config set
21
22 # ----------------------------------------------------------------------
23 # | Custom rules & config for specific website |
24 # ----------------------------------------------------------------------
25 location / {
26 try_files $uri $uri/ /index.html;
27 }
28 # ----------------------------------------------------------------------
29}
30
31# ----------------------------------------------------------------------
32# | Config file for non-secure cleberg.net host |
33# ----------------------------------------------------------------------
34server {
35 listen [::]:80;
36 listen 80;
37 server_name files.cleberg.net;
38
39 return 301 https://$host$request_uri;
40} 13}
linux/nginx/etc/nginx/conf.d/gh.conf +2 −25
@@ -1,39 +1,16 @@
1# ----------------------------------------------------------------------
2# | Config file for host |
3# ----------------------------------------------------------------------
4server { 1server {
5 listen [::]:443 ssl; 2 listen [::]:443 ssl;
6 listen 443 ssl; 3 listen 443 ssl;
7 http2 on; 4 http2 on;
8
9 server_name gh.cleberg.net; 5 server_name gh.cleberg.net;
10
11 include custom.d/tls/ssl_engine.conf; 6 include custom.d/tls/ssl_engine.conf;
12 include custom.d/tls/certificate_files.conf; 7 include custom.d/tls/certificate_files.conf;
13 include custom.d/tls/policy_balanced.conf; 8 include custom.d/tls/policy_balanced.conf;
14 include custom.d/basic.conf; 9 include custom.d/basic.conf;
15
16 # ----------------------------------------------------------------------
17 # | Custom rules & config for specific website |
18 # ----------------------------------------------------------------------
19 location / { 10 location / {
20 set $upstream http://192.168.0.251:3039; 11 set $upstream http://192.168.0.251:3039;
21 proxy_pass $upstream; 12 proxy_pass $upstream;
22
23 include custom.d/reverse_proxy/basic.conf; 13 include custom.d/reverse_proxy/basic.conf;
24 } 14 }
25
26 include custom.d/security/robots_index_only.conf; 15 include custom.d/security/robots_index_only.conf;
27 # ----------------------------------------------------------------------
28}
29
30# ----------------------------------------------------------------------
31# | Config file for non-secure host |
32# ----------------------------------------------------------------------
33server {
34 listen [::]:80;
35 listen 80;
36 server_name gh.cleberg.net;
37
38 return 301 https://$host$request_uri;
39} 16}
linux/nginx/etc/nginx/conf.d/ha.conf +3 −27
@@ -1,46 +1,22 @@
1# ----------------------------------------------------------------------
2# | Config file for host |
3# ----------------------------------------------------------------------
4server { 1server {
5 listen [::]:443 ssl; 2 listen [::]:443 ssl;
6 listen 443 ssl; 3 listen 443 ssl;
7 http2 on; 4 http2 on;
8
9 server_name ha.cleberg.net; 5 server_name ha.cleberg.net;
10
11 include custom.d/tls/ssl_engine.conf; 6 include custom.d/tls/ssl_engine.conf;
12 include custom.d/tls/certificate_files.conf; 7 include custom.d/tls/certificate_files.conf;
13 include custom.d/tls/policy_balanced.conf; 8 include custom.d/tls/policy_balanced.conf;
14 include custom.d/basic.conf; 9 include custom.d/basic.conf;
15 10 set $upstream http://192.168.0.214:8123;
16 # ----------------------------------------------------------------------
17 # | Custom rules & config for specific website |
18 # ----------------------------------------------------------------------
19 set $upstream http://192.168.0.214:8123;
20
21 location / { 11 location / {
22 proxy_pass $upstream; 12 proxy_pass $upstream;
23 proxy_set_header X-Forwarded-For $remote_addr; 13 proxy_set_header X-Forwarded-For $remote_addr;
24 } 14 }
25
26 location /api/websocket { 15 location /api/websocket {
27 proxy_pass $upstream; 16 proxy_pass $upstream;
28 proxy_http_version 1.1; 17 proxy_http_version 1.1;
29 proxy_set_header Upgrade $http_upgrade; 18 proxy_set_header Upgrade $http_upgrade;
30 proxy_set_header Connection "upgrade"; 19 proxy_set_header Connection "upgrade";
31 } 20 }
32 21 include custom.d/security/robots_index_only.conf;
33 include custom.d/security/robots_index_only.conf;
34 # ----------------------------------------------------------------------
35}
36
37# ----------------------------------------------------------------------
38# | Config file for non-secure host |
39# ----------------------------------------------------------------------
40server {
41 listen [::]:80;
42 listen 80;
43 server_name ha.cleberg.net;
44
45 return 301 https://$host$request_uri;
46} 22}
linux/nginx/etc/nginx/conf.d/hat.conf +3 −26
@@ -1,39 +1,16 @@
1# ----------------------------------------------------------------------
2# | Config file for host |
3# ----------------------------------------------------------------------
4server { 1server {
5 listen [::]:443 ssl; 2 listen [::]:443 ssl;
6 listen 443 ssl; 3 listen 443 ssl;
7 http2 on; 4 http2 on;
8
9 server_name hat.cleberg.net; 5 server_name hat.cleberg.net;
10
11 include custom.d/tls/ssl_engine.conf; 6 include custom.d/tls/ssl_engine.conf;
12 include custom.d/tls/certificate_files.conf; 7 include custom.d/tls/certificate_files.conf;
13 include custom.d/tls/policy_balanced.conf; 8 include custom.d/tls/policy_balanced.conf;
14 include custom.d/basic.conf; 9 include custom.d/basic.conf;
15
16 # ----------------------------------------------------------------------
17 # | Custom rules & config for specific website |
18 # ----------------------------------------------------------------------
19 location / { 10 location / {
20 set $upstream http://192.168.0.251:3991; 11 set $upstream http://192.168.0.251:3991;
21 proxy_pass $upstream; 12 proxy_pass $upstream;
22
23 include custom.d/reverse_proxy/basic.conf; 13 include custom.d/reverse_proxy/basic.conf;
24 } 14 }
25 15 include custom.d/security/robots_index_only.conf;
26 include custom.d/security/robots_index_only.conf;
27 # ----------------------------------------------------------------------
28}
29
30# ----------------------------------------------------------------------
31# | Config file for non-secure host |
32# ----------------------------------------------------------------------
33server {
34 listen [::]:80;
35 listen 80;
36 server_name hat.cleberg.net;
37
38 return 301 https://$host$request_uri;
39} 16}
linux/nginx/etc/nginx/conf.d/hn.conf +12 −25
@@ -1,27 +1,14 @@
1server { 1server {
2 listen [::]:443 ssl; 2 listen [::]:443 ssl;
3 listen 443 ssl; 3 listen 443 ssl;
4 http2 on; 4 http2 on;
5 5 server_name hn.cleberg.net r3yfeffyj7ornpikojmw75u3sn2la7tqnmcmwgv2ov7if24sm5czqeid.onion;
6 server_name hn.cleberg.net r3yfeffyj7ornpikojmw75u3sn2la7tqnmcmwgv2ov7if24sm5czqeid.onion; 6 root /var/www/hn/output/;
7 root /var/www/hn/output/; 7 autoindex on;
8 autoindex on; 8 add_header Onion-Location http://r3yfeffyj7ornpikojmw75u3sn2la7tqnmcmwgv2ov7if24sm5czqeid.onion;
9 add_header Onion-Location http://r3yfeffyj7ornpikojmw75u3sn2la7tqnmcmwgv2ov7if24sm5czqeid.onion; 9 include custom.d/tls/ssl_engine.conf;
10 10 include custom.d/tls/certificate_files.conf;
11 include custom.d/tls/ssl_engine.conf; 11 include custom.d/tls/policy_balanced.conf;
12 include custom.d/tls/certificate_files.conf; 12 include custom.d/basic.conf;
13 include custom.d/tls/policy_balanced.conf; 13 location / { try_files $uri $uri/ /index.html; }
14 include custom.d/basic.conf;
15
16 location / {
17 try_files $uri $uri/ /index.html;
18 }
19}
20
21server {
22 listen [::]:80;
23 listen 80;
24 server_name hn.cleberg.net;
25
26 return 301 https://$host$request_uri;
27} 14}
linux/nginx/etc/nginx/conf.d/img.conf +1 −25
@@ -1,37 +1,13 @@
1# ----------------------------------------------------------------------
2# | Config file for host |
3# ----------------------------------------------------------------------
4server { 1server {
5 listen [::]:443 ssl; 2 listen [::]:443 ssl;
6 listen 443 ssl; 3 listen 443 ssl;
7 http2 on; 4 http2 on;
8
9 server_name img.cleberg.net; 5 server_name img.cleberg.net;
10
11 include custom.d/tls/ssl_engine.conf; 6 include custom.d/tls/ssl_engine.conf;
12 include custom.d/tls/certificate_files.conf; 7 include custom.d/tls/certificate_files.conf;
13 include custom.d/tls/policy_balanced.conf; 8 include custom.d/tls/policy_balanced.conf;
14 include custom.d/basic.conf; 9 include custom.d/basic.conf;
15
16 root /var/www/img/; 10 root /var/www/img/;
17 autoindex on; 11 autoindex on;
18 12 location / { try_files $uri $uri/ =404; }
19 # ----------------------------------------------------------------------
20 # | Custom rules & config for specific website |
21 # ----------------------------------------------------------------------
22 location / {
23 try_files $uri $uri/ =404;
24 }
25 # ----------------------------------------------------------------------
26}
27
28# ----------------------------------------------------------------------
29# | Config file for non-secure host |
30# ----------------------------------------------------------------------
31server {
32 listen [::]:80;
33 listen 80;
34 server_name img.cleberg.net;
35
36 return 301 https://img.cleberg.net$request_uri;
37} 13}
linux/nginx/etc/nginx/conf.d/irc.conf +4 −30
@@ -1,44 +1,18 @@
1# ----------------------------------------------------------------------
2# | Config file for host |
3# ----------------------------------------------------------------------
4server { 1server {
5 listen [::]:443 ssl; 2 listen [::]:443 ssl;
6 listen 443 ssl; 3 listen 443 ssl;
7 http2 on; 4 http2 on;
8
9 server_name irc.cleberg.net; 5 server_name irc.cleberg.net;
10
11 include custom.d/tls/ssl_engine.conf; 6 include custom.d/tls/ssl_engine.conf;
12 include custom.d/tls/certificate_files.conf; 7 include custom.d/tls/certificate_files.conf;
13 include custom.d/tls/policy_balanced.conf; 8 include custom.d/tls/policy_balanced.conf;
14 include custom.d/basic.conf; 9 include custom.d/basic.conf;
15 10 location /authelia { include custom.d/reverse_proxy/authelia.conf; }
16 # ----------------------------------------------------------------------
17 # | Custom rules & config for specific website |
18 # ----------------------------------------------------------------------
19 location /authelia {
20 include custom.d/reverse_proxy/authelia.conf;
21 }
22
23 location / { 11 location / {
24 set $upstream http://192.168.0.251:9900; 12 set $upstream http://192.168.0.251:9900;
25 proxy_pass $upstream; 13 proxy_pass $upstream;
26
27 include custom.d/reverse_proxy/authelia_request.conf; 14 include custom.d/reverse_proxy/authelia_request.conf;
28 include custom.d/reverse_proxy/basic.conf; 15 include custom.d/reverse_proxy/basic.conf;
29 } 16 }
30 17 include custom.d/security/robots_index_only.conf;
31 include custom.d/security/robots_index_only.conf;
32 # ----------------------------------------------------------------------
33}
34
35# ----------------------------------------------------------------------
36# | Config file for non-secure host |
37# ----------------------------------------------------------------------
38server {
39 listen [::]:80;
40 listen 80;
41 server_name irc.cleberg.net;
42
43 return 301 https://$host$request_uri;
44} 18}
linux/nginx/etc/nginx/conf.d/ld.conf +3 −26
@@ -1,39 +1,16 @@
1# ----------------------------------------------------------------------
2# | Config file for host |
3# ----------------------------------------------------------------------
4server { 1server {
5 listen [::]:443 ssl; 2 listen [::]:443 ssl;
6 listen 443 ssl; 3 listen 443 ssl;
7 http2 on; 4 http2 on;
8
9 server_name ld.cleberg.net; 5 server_name ld.cleberg.net;
10
11 include custom.d/tls/ssl_engine.conf; 6 include custom.d/tls/ssl_engine.conf;
12 include custom.d/tls/certificate_files.conf; 7 include custom.d/tls/certificate_files.conf;
13 include custom.d/tls/policy_balanced.conf; 8 include custom.d/tls/policy_balanced.conf;
14 include custom.d/basic.conf; 9 include custom.d/basic.conf;
15
16 # ----------------------------------------------------------------------
17 # | Custom rules & config for specific website |
18 # ----------------------------------------------------------------------
19 location / { 10 location / {
20 set $upstream http://127.0.0.1:3004; 11 set $upstream http://127.0.0.1:3004;
21 proxy_pass $upstream; 12 proxy_pass $upstream;
22
23 include custom.d/reverse_proxy/basic.conf; 13 include custom.d/reverse_proxy/basic.conf;
24 } 14 }
25 15 include custom.d/security/robots_index_only.conf;
26 include custom.d/security/robots_index_only.conf;
27 # ----------------------------------------------------------------------
28}
29
30# ----------------------------------------------------------------------
31# | Config file for non-secure host |
32# ----------------------------------------------------------------------
33server {
34 listen [::]:80;
35 listen 80;
36 server_name ld.cleberg.net;
37
38 return 301 https://$host$request_uri;
39} 16}
linux/nginx/etc/nginx/conf.d/lemmy.conf +3 −26
@@ -1,39 +1,16 @@
1# ----------------------------------------------------------------------
2# | Config file for host |
3# ----------------------------------------------------------------------
4server { 1server {
5 listen [::]:443 ssl; 2 listen [::]:443 ssl;
6 listen 443 ssl; 3 listen 443 ssl;
7 http2 on; 4 http2 on;
8
9 server_name lemmy.cleberg.net; 5 server_name lemmy.cleberg.net;
10
11 include custom.d/tls/ssl_engine.conf; 6 include custom.d/tls/ssl_engine.conf;
12 include custom.d/tls/certificate_files.conf; 7 include custom.d/tls/certificate_files.conf;
13 include custom.d/tls/policy_balanced.conf; 8 include custom.d/tls/policy_balanced.conf;
14 include custom.d/basic.conf; 9 include custom.d/basic.conf;
15
16 # ----------------------------------------------------------------------
17 # | Custom rules & config for specific website |
18 # ----------------------------------------------------------------------
19 location / { 10 location / {
20 set $upstream http://127.0.0.1:10633; 11 set $upstream http://127.0.0.1:10633;
21 proxy_pass $upstream; 12 proxy_pass $upstream;
22
23 include custom.d/reverse_proxy/basic.conf; 13 include custom.d/reverse_proxy/basic.conf;
24 } 14 }
25 15 include custom.d/security/robots_index_only.conf;
26 include custom.d/security/robots_index_only.conf;
27 # ----------------------------------------------------------------------
28}
29
30# ----------------------------------------------------------------------
31# | Config file for non-secure host |
32# ----------------------------------------------------------------------
33server {
34 listen [::]:80;
35 listen 80;
36 server_name lemmy.cleberg.net;
37
38 return 301 https://$host$request_uri;
39} 16}
linux/nginx/etc/nginx/conf.d/lt.conf +4 −27
@@ -1,39 +1,16 @@
1# ----------------------------------------------------------------------
2# | Config file for host |
3# ----------------------------------------------------------------------
4server { 1server {
5 listen [::]:443 ssl; 2 listen [::]:443 ssl;
6 listen 443 ssl; 3 listen 443 ssl;
7 http2 on; 4 http2 on;
8
9 server_name lt.cleberg.net; 5 server_name lt.cleberg.net;
10
11 include custom.d/tls/ssl_engine.conf; 6 include custom.d/tls/ssl_engine.conf;
12 include custom.d/tls/certificate_files.conf; 7 include custom.d/tls/certificate_files.conf;
13 include custom.d/tls/policy_balanced.conf; 8 include custom.d/tls/policy_balanced.conf;
14 include custom.d/basic.conf; 9 include custom.d/basic.conf;
15
16 # ----------------------------------------------------------------------
17 # | Custom rules & config for specific website |
18 # ----------------------------------------------------------------------
19 location / { 10 location / {
20 set $upstream http://127.0.0.1:5000; 11 set $upstream http://127.0.0.1:5000;
21 proxy_pass $upstream; 12 proxy_pass $upstream;
22
23 include custom.d/reverse_proxy/basic.conf; 13 include custom.d/reverse_proxy/basic.conf;
24 } 14 }
25 15 include custom.d/security/robots_index_only.conf;
26 include custom.d/security/robots_index_only.conf; 16}\ No newline at end of file
27 # ----------------------------------------------------------------------
28}
29
30# ----------------------------------------------------------------------
31# | Config file for non-secure host |
32# ----------------------------------------------------------------------
33server {
34 listen [::]:80;
35 listen 80;
36 server_name lt.cleberg.net;
37
38 return 301 https://$host$request_uri;
39}
linux/nginx/etc/nginx/conf.d/mz.conf +4 −27
@@ -1,39 +1,16 @@
1# ----------------------------------------------------------------------
2# | Config file for host |
3# ----------------------------------------------------------------------
4server { 1server {
5 listen [::]:443 ssl; 2 listen [::]:443 ssl;
6 listen 443 ssl; 3 listen 443 ssl;
7 http2 on; 4 http2 on;
8
9 server_name mz.cleberg.net; 5 server_name mz.cleberg.net;
10
11 include custom.d/tls/ssl_engine.conf; 6 include custom.d/tls/ssl_engine.conf;
12 include custom.d/tls/certificate_files.conf; 7 include custom.d/tls/certificate_files.conf;
13 include custom.d/tls/policy_balanced.conf; 8 include custom.d/tls/policy_balanced.conf;
14 include custom.d/basic.conf; 9 include custom.d/basic.conf;
15
16 # ----------------------------------------------------------------------
17 # | Custom rules & config for specific website |
18 # ----------------------------------------------------------------------
19 location / { 10 location / {
20 set $upstream http://127.0.0.1:3474; 11 set $upstream http://127.0.0.1:3474;
21 proxy_pass $upstream; 12 proxy_pass $upstream;
22
23 include custom.d/reverse_proxy/basic.conf; 13 include custom.d/reverse_proxy/basic.conf;
24 } 14 }
25 15 include custom.d/security/robots_index_only.conf;
26 include custom.d/security/robots_index_only.conf; 16}\ No newline at end of file
27 # ----------------------------------------------------------------------
28}
29
30# ----------------------------------------------------------------------
31# | Config file for non-secure host |
32# ----------------------------------------------------------------------
33server {
34 listen [::]:80;
35 listen 80;
36 server_name mz.cleberg.net;
37
38 return 301 https://$host$request_uri;
39}
linux/nginx/etc/nginx/conf.d/no-ssl.default.conf +4 −25
@@ -1,27 +1,6 @@
1# ----------------------------------------------------------------------
2# | Default behavior for unknown hosts |
3# ----------------------------------------------------------------------
4#
5# Drop requests for unknown hosts.
6#
7# If no default server is defined, Nginx will use the first found server.
8# To prevent host header attacks, or other potential problems when an unknown
9# server name is used in a request, it's recommended to drop the request
10# returning 444 "No Response".
11#
12# (1) In production, only secure hosts should be used (all `no-ssl` disabled).
13# If so, redirect first ANY request to a secure connection before handling
14# it, even if the host is unknown.
15#
16# https://observatory.mozilla.org/faq/
17
18server { 1server {
19 listen [::]:80 default_server deferred; 2 listen [::]:80 default_server deferred;
20 listen 80 default_server deferred; 3 listen 80 default_server deferred;
21 4 server_name _;
22 server_name _; 5 return 301 https://$host$request_uri;
23
24 # (1)
25 return 301 https://$host$request_uri;
26 # return 444;
27} 6}
linux/nginx/etc/nginx/conf.d/office.conf +2 −25
@@ -1,35 +1,12 @@
1# ----------------------------------------------------------------------
2# | Config file for host |
3# ----------------------------------------------------------------------
4server { 1server {
5 listen [::]:443 ssl; 2 listen [::]:443 ssl;
6 listen 443 ssl; 3 listen 443 ssl;
7 http2 on; 4 http2 on;
8
9 server_name office.cleberg.net; 5 server_name office.cleberg.net;
10 root /var/www/office/; 6 root /var/www/office/;
11
12 include custom.d/tls/ssl_engine.conf; 7 include custom.d/tls/ssl_engine.conf;
13 include custom.d/tls/certificate_files.conf; 8 include custom.d/tls/certificate_files.conf;
14 include custom.d/tls/policy_balanced.conf; 9 include custom.d/tls/policy_balanced.conf;
15 include custom.d/basic.conf; 10 include custom.d/basic.conf;
16 11 location / { try_files $uri $uri/ /index.html; }
17 # ---------------------------------------------------------------------- 12}\ No newline at end of file
18 # | Custom rules & config for specific website |
19 # ----------------------------------------------------------------------
20 location / {
21 try_files $uri $uri/ /index.html;
22 }
23 # ----------------------------------------------------------------------
24}
25
26# ----------------------------------------------------------------------
27# | Config file for non-secure host |
28# ----------------------------------------------------------------------
29server {
30 listen [::]:80;
31 listen 80;
32 server_name office.cleberg.net;
33
34 return 301 https://$host$request_uri;
35}
linux/nginx/etc/nginx/conf.d/org.conf +2 −25
@@ -1,35 +1,12 @@
1# ----------------------------------------------------------------------
2# | Config file for host |
3# ----------------------------------------------------------------------
4server { 1server {
5 listen [::]:443 ssl; 2 listen [::]:443 ssl;
6 listen 443 ssl; 3 listen 443 ssl;
7 http2 on; 4 http2 on;
8
9 server_name org.cleberg.net; 5 server_name org.cleberg.net;
10 root /var/www/org/; 6 root /var/www/org/;
11
12 include custom.d/tls/ssl_engine.conf; 7 include custom.d/tls/ssl_engine.conf;
13 include custom.d/tls/certificate_files.conf; 8 include custom.d/tls/certificate_files.conf;
14 include custom.d/tls/policy_balanced.conf; 9 include custom.d/tls/policy_balanced.conf;
15 include custom.d/basic.conf; 10 include custom.d/basic.conf;
16 11 location / { try_files $uri $uri/ /index.html; }
17 # ---------------------------------------------------------------------- 12}\ No newline at end of file
18 # | Custom rules & config for specific website |
19 # ----------------------------------------------------------------------
20 location / {
21 try_files $uri $uri/ /index.html;
22 }
23 # ----------------------------------------------------------------------
24}
25
26# ----------------------------------------------------------------------
27# | Config file for non-secure host |
28# ----------------------------------------------------------------------
29server {
30 listen [::]:80;
31 listen 80;
32 server_name org.cleberg.net;
33
34 return 301 https://$host$request_uri;
35}
linux/nginx/etc/nginx/conf.d/paste.conf +4 −27
@@ -1,39 +1,16 @@
1# ----------------------------------------------------------------------
2# | Config file for host |
3# ----------------------------------------------------------------------
4server { 1server {
5 listen [::]:443 ssl; 2 listen [::]:443 ssl;
6 listen 443 ssl; 3 listen 443 ssl;
7 http2 on; 4 http2 on;
8
9 server_name paste.cleberg.net; 5 server_name paste.cleberg.net;
10
11 include custom.d/tls/ssl_engine.conf; 6 include custom.d/tls/ssl_engine.conf;
12 include custom.d/tls/certificate_files.conf; 7 include custom.d/tls/certificate_files.conf;
13 include custom.d/tls/policy_balanced.conf; 8 include custom.d/tls/policy_balanced.conf;
14 include custom.d/basic.conf; 9 include custom.d/basic.conf;
15
16 # ----------------------------------------------------------------------
17 # | Custom rules & config for specific website |
18 # ----------------------------------------------------------------------
19 location / { 10 location / {
20 set $upstream http://127.0.0.1:8084; 11 set $upstream http://127.0.0.1:8084;
21 proxy_pass $upstream; 12 proxy_pass $upstream;
22
23 include custom.d/reverse_proxy/basic.conf; 13 include custom.d/reverse_proxy/basic.conf;
24 } 14 }
25 15 include custom.d/security/robots_index_only.conf;
26 include custom.d/security/robots_index_only.conf; 16}\ No newline at end of file
27 # ----------------------------------------------------------------------
28}
29
30# ----------------------------------------------------------------------
31# | Config file for non-secure host |
32# ----------------------------------------------------------------------
33server {
34 listen [::]:80;
35 listen 80;
36 server_name paste.cleberg.net;
37
38 return 301 https://$host$request_uri;
39}
linux/nginx/etc/nginx/conf.d/pb.conf +3 −27
@@ -1,39 +1,15 @@
1# ----------------------------------------------------------------------
2# | Config file for host |
3# ----------------------------------------------------------------------
4server { 1server {
5 listen [::]:443 ssl; 2 listen [::]:443 ssl;
6 listen 443 ssl; 3 listen 443 ssl;
7 http2 on; 4 http2 on;
8
9 server_name pb.cleberg.net; 5 server_name pb.cleberg.net;
10
11 include custom.d/tls/ssl_engine.conf; 6 include custom.d/tls/ssl_engine.conf;
12 include custom.d/tls/certificate_files.conf; 7 include custom.d/tls/certificate_files.conf;
13 include custom.d/tls/policy_balanced.conf; 8 include custom.d/tls/policy_balanced.conf;
14 include custom.d/basic.conf; 9 include custom.d/basic.conf;
15
16 # ----------------------------------------------------------------------
17 # | Custom rules & config for specific website |
18 # ----------------------------------------------------------------------
19 location / { 10 location / {
20 set $upstream http://127.0.0.1:8745; 11 set $upstream http://127.0.0.1:8745;
21 proxy_pass $upstream; 12 proxy_pass $upstream;
22
23 include custom.d/reverse_proxy/basic.conf; 13 include custom.d/reverse_proxy/basic.conf;
24 } 14 }
25 15}\ No newline at end of file
26 # include custom.d/security/robots_index_only.conf;
27 # ----------------------------------------------------------------------
28}
29
30# ----------------------------------------------------------------------
31# | Config file for non-secure host |
32# ----------------------------------------------------------------------
33server {
34 listen [::]:80;
35 listen 80;
36 server_name pb.cleberg.net;
37
38 return 301 https://$host$request_uri;
39}
linux/nginx/etc/nginx/conf.d/pgp.conf +2 −26
@@ -1,37 +1,13 @@
1# ----------------------------------------------------------------------
2# | Config file for host |
3# ----------------------------------------------------------------------
4server { 1server {
5 listen [::]:443 ssl; 2 listen [::]:443 ssl;
6 listen 443 ssl; 3 listen 443 ssl;
7 http2 on; 4 http2 on;
8
9 server_name pgp.cleberg.net; 5 server_name pgp.cleberg.net;
10 root /var/www/pgp/; 6 root /var/www/pgp/;
11
12 include custom.d/tls/ssl_engine.conf; 7 include custom.d/tls/ssl_engine.conf;
13 include custom.d/tls/certificate_files.conf; 8 include custom.d/tls/certificate_files.conf;
14 include custom.d/tls/policy_balanced.conf; 9 include custom.d/tls/policy_balanced.conf;
15 include custom.d/basic.conf; 10 include custom.d/basic.conf;
16 11 location / { try_files $uri $uri/ /index.html; }
17 # ---------------------------------------------------------------------- 12 include custom.d/security/robots_index_only.conf;
18 # | Custom rules & config for specific website |
19 # ----------------------------------------------------------------------
20 location / {
21 try_files $uri $uri/ /index.html;
22 }
23
24 include custom.d/security/robots_index_only.conf;
25 # ----------------------------------------------------------------------
26}
27
28# ----------------------------------------------------------------------
29# | Config file for non-secure host |
30# ----------------------------------------------------------------------
31server {
32 listen [::]:80;
33 listen 80;
34 server_name pgp.cleberg.net;
35
36 return 301 https://$host$request_uri;
37} 13}
linux/nginx/etc/nginx/conf.d/photos.conf +2 −33
@@ -1,54 +1,23 @@
1# ----------------------------------------------------------------------
2# | Config file for host |
3# ----------------------------------------------------------------------
4server { 1server {
5 listen [::]:443 ssl; 2 listen [::]:443 ssl;
6 listen 443 ssl; 3 listen 443 ssl;
7 http2 on; 4 http2 on;
8
9 server_name photos.cleberg.net; 5 server_name photos.cleberg.net;
10
11 include custom.d/tls/ssl_engine.conf; 6 include custom.d/tls/ssl_engine.conf;
12 include custom.d/tls/certificate_files.conf; 7 include custom.d/tls/certificate_files.conf;
13 include custom.d/tls/policy_balanced.conf; 8 include custom.d/tls/policy_balanced.conf;
14 include custom.d/basic.conf; 9 include custom.d/basic.conf;
15
16 # ----------------------------------------------------------------------
17 # | Custom rules & config for specific website |
18 # ----------------------------------------------------------------------
19 # allow large file uploads
20 client_max_body_size 50000M; 10 client_max_body_size 50000M;
21
22 # Set headers
23 proxy_set_header Host $host; 11 proxy_set_header Host $host;
24 proxy_set_header X-Real-IP $remote_addr; 12 proxy_set_header X-Real-IP $remote_addr;
25 proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; 13 proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
26 proxy_set_header X-Forwarded-Proto $scheme; 14 proxy_set_header X-Forwarded-Proto $scheme;
27
28 # enable websockets: http://nginx.org/en/docs/http/websocket.html
29 proxy_http_version 1.1; 15 proxy_http_version 1.1;
30 proxy_set_header Upgrade $http_upgrade; 16 proxy_set_header Upgrade $http_upgrade;
31 proxy_set_header Connection "upgrade"; 17 proxy_set_header Connection "upgrade";
32 proxy_redirect off; 18 proxy_redirect off;
33
34 # set timeout
35 proxy_read_timeout 600s; 19 proxy_read_timeout 600s;
36 proxy_send_timeout 600s; 20 proxy_send_timeout 600s;
37 send_timeout 600s; 21 send_timeout 600s;
38 22 location / { proxy_pass http://127.0.0.1:2283; }
39 location / { 23}\ No newline at end of file
40 proxy_pass http://127.0.0.1:2283;
41 }
42 # ----------------------------------------------------------------------
43}
44
45# ----------------------------------------------------------------------
46# | Config file for non-secure host |
47# ----------------------------------------------------------------------
48server {
49 listen [::]:80;
50 listen 80;
51 server_name photos.cleberg.net;
52
53 return 301 https://$host$request_uri;
54}
linux/nginx/etc/nginx/conf.d/pin.conf +3 −26
@@ -1,39 +1,16 @@
1# ----------------------------------------------------------------------
2# | Config file for host |
3# ----------------------------------------------------------------------
4server { 1server {
5 listen [::]:443 ssl; 2 listen [::]:443 ssl;
6 listen 443 ssl; 3 listen 443 ssl;
7 http2 on; 4 http2 on;
8
9 server_name pin.cleberg.net; 5 server_name pin.cleberg.net;
10
11 include custom.d/tls/ssl_engine.conf; 6 include custom.d/tls/ssl_engine.conf;
12 include custom.d/tls/certificate_files.conf; 7 include custom.d/tls/certificate_files.conf;
13 include custom.d/tls/policy_balanced.conf; 8 include custom.d/tls/policy_balanced.conf;
14 include custom.d/basic.conf; 9 include custom.d/basic.conf;
15
16 # ----------------------------------------------------------------------
17 # | Custom rules & config for specific website |
18 # ----------------------------------------------------------------------
19 location / { 10 location / {
20 set $upstream http://127.0.0.1:8086; 11 set $upstream http://127.0.0.1:8086;
21 proxy_pass $upstream; 12 proxy_pass $upstream;
22
23 include custom.d/reverse_proxy/basic.conf; 13 include custom.d/reverse_proxy/basic.conf;
24 } 14 }
25 15 include custom.d/security/robots_index_only.conf;
26 include custom.d/security/robots_index_only.conf;
27 # ----------------------------------------------------------------------
28}
29
30# ----------------------------------------------------------------------
31# | Config file for non-secure host |
32# ----------------------------------------------------------------------
33server {
34 listen [::]:80;
35 listen 80;
36 server_name pin.cleberg.net;
37
38 return 301 https://$host$request_uri;
39} 16}
linux/nginx/etc/nginx/conf.d/piped.conf +4 −28
@@ -1,40 +1,16 @@
1# ----------------------------------------------------------------------
2# | Config file for host |
3# ----------------------------------------------------------------------
4server { 1server {
5 listen [::]:443 ssl; 2 listen [::]:443 ssl;
6 listen 443 ssl; 3 listen 443 ssl;
7 http2 on; 4 http2 on;
8
9 server_name piped.cleberg.net pipedapi.cleberg.net pipedproxy.cleberg.net; 5 server_name piped.cleberg.net pipedapi.cleberg.net pipedproxy.cleberg.net;
10
11 include custom.d/tls/ssl_engine.conf; 6 include custom.d/tls/ssl_engine.conf;
12 include custom.d/tls/certificate_files.conf; 7 include custom.d/tls/certificate_files.conf;
13 include custom.d/tls/policy_balanced.conf; 8 include custom.d/tls/policy_balanced.conf;
14 include custom.d/basic.conf; 9 include custom.d/basic.conf;
15
16 # ----------------------------------------------------------------------
17 # | Custom rules & config for specific website |
18 # ----------------------------------------------------------------------
19 location / { 10 location / {
20 set $upstream http://127.0.0.1:8077; 11 set $upstream http://127.0.0.1:8077;
21 proxy_pass $upstream; 12 proxy_pass $upstream;
22
23 proxy_set_header Host $host; 13 proxy_set_header Host $host;
24 # include custom.d/reverse_proxy/basic.conf;
25 } 14 }
26 15 include custom.d/security/robots_index_only.conf;
27 include custom.d/security/robots_index_only.conf; 16}\ No newline at end of file
28 # ----------------------------------------------------------------------
29}
30
31# ----------------------------------------------------------------------
32# | Config file for non-secure host |
33# ----------------------------------------------------------------------
34server {
35 listen [::]:80;
36 listen 80;
37 server_name piped.cleberg.net pipedapi.cleberg.net pipedproxy.cleberg.net;
38
39 return 301 https://$host$request_uri;
40}
linux/nginx/etc/nginx/conf.d/projects.conf +1 −24
@@ -1,36 +1,13 @@
1# ----------------------------------------------------------------------
2# | Config file for host |
3# ----------------------------------------------------------------------
4server { 1server {
5 listen [::]:443 ssl; 2 listen [::]:443 ssl;
6 listen 443 ssl; 3 listen 443 ssl;
7 http2 on; 4 http2 on;
8
9 server_name projects.cleberg.net; 5 server_name projects.cleberg.net;
10 root /var/www/projects/; 6 root /var/www/projects/;
11 autoindex on; 7 autoindex on;
12
13 include custom.d/tls/ssl_engine.conf; 8 include custom.d/tls/ssl_engine.conf;
14 include custom.d/tls/certificate_files.conf; 9 include custom.d/tls/certificate_files.conf;
15 include custom.d/tls/policy_balanced.conf; 10 include custom.d/tls/policy_balanced.conf;
16 include custom.d/basic.conf; 11 include custom.d/basic.conf;
17 12 location / { try_files $uri $uri/ /index.html; }
18 # ----------------------------------------------------------------------
19 # | Custom rules & config for specific website |
20 # ----------------------------------------------------------------------
21 location / {
22 try_files $uri $uri/ /index.html;
23 }
24 # ----------------------------------------------------------------------
25}
26
27# ----------------------------------------------------------------------
28# | Config file for non-secure host |
29# ----------------------------------------------------------------------
30server {
31 listen [::]:80;
32 listen 80;
33 server_name projects.cleberg.net;
34
35 return 301 https://$host$request_uri;
36} 13}
linux/nginx/etc/nginx/conf.d/rd.conf +4 −27
@@ -1,39 +1,16 @@
1# ----------------------------------------------------------------------
2# | Config file for host |
3# ----------------------------------------------------------------------
4server { 1server {
5 listen [::]:443 ssl; 2 listen [::]:443 ssl;
6 listen 443 ssl; 3 listen 443 ssl;
7 http2 on; 4 http2 on;
8
9 server_name rd.cleberg.net; 5 server_name rd.cleberg.net;
10
11 include custom.d/tls/ssl_engine.conf; 6 include custom.d/tls/ssl_engine.conf;
12 include custom.d/tls/certificate_files.conf; 7 include custom.d/tls/certificate_files.conf;
13 include custom.d/tls/policy_balanced.conf; 8 include custom.d/tls/policy_balanced.conf;
14 include custom.d/basic.conf; 9 include custom.d/basic.conf;
15
16 # ----------------------------------------------------------------------
17 # | Custom rules & config for specific website |
18 # ----------------------------------------------------------------------
19 location / { 10 location / {
20 set $upstream http://127.0.0.1:5758; 11 set $upstream http://127.0.0.1:5758;
21 proxy_pass $upstream; 12 proxy_pass $upstream;
22
23 include custom.d/reverse_proxy/basic.conf; 13 include custom.d/reverse_proxy/basic.conf;
24 } 14 }
25 15 include custom.d/security/robots_index_only.conf;
26 include custom.d/security/robots_index_only.conf; 16}\ No newline at end of file
27 # ----------------------------------------------------------------------
28}
29
30# ----------------------------------------------------------------------
31# | Config file for non-secure host |
32# ----------------------------------------------------------------------
33server {
34 listen [::]:80;
35 listen 80;
36 server_name rd.cleberg.net;
37
38 return 301 https://$host$request_uri;
39}
linux/nginx/etc/nginx/conf.d/reminiscecleberg.com.conf +1 −22
@@ -1,20 +1,13 @@
1# ----------------------------------------------------------------------
2# | Config file for host |
3# ----------------------------------------------------------------------
4server { 1server {
5 listen [::]:443 ssl; 2 listen [::]:443 ssl;
6 listen 443 ssl; 3 listen 443 ssl;
7 http2 on; 4 http2 on;
8
9 server_name www.reminiscecleberg.com; 5 server_name www.reminiscecleberg.com;
10
11 include custom.d/tls/ssl_engine.conf; 6 include custom.d/tls/ssl_engine.conf;
12 include custom.d/tls/policy_balanced.conf; 7 include custom.d/tls/policy_balanced.conf;
13 # include custom.d/tls/certificate_files.conf;
14 ssl_certificate /etc/letsencrypt/live/reminiscecleberg.com/fullchain.pem; 8 ssl_certificate /etc/letsencrypt/live/reminiscecleberg.com/fullchain.pem;
15 ssl_certificate_key /etc/letsencrypt/live/reminiscecleberg.com/privkey.pem; 9 ssl_certificate_key /etc/letsencrypt/live/reminiscecleberg.com/privkey.pem;
16 ssl_trusted_certificate /etc/letsencrypt/live/reminiscecleberg.com/chain.pem; 10 ssl_trusted_certificate /etc/letsencrypt/live/reminiscecleberg.com/chain.pem;
17
18 return 301 $scheme://reminiscecleberg.com$request_uri; 11 return 301 $scheme://reminiscecleberg.com$request_uri;
19} 12}
20 13
@@ -23,34 +16,20 @@ server {
23 listen [::]:443 ssl; 16 listen [::]:443 ssl;
24 listen 443 ssl; 17 listen 443 ssl;
25 http2 on; 18 http2 on;
26
27 server_name reminiscecleberg.com; 19 server_name reminiscecleberg.com;
28 root /var/www/reminiscecleberg.com/; 20 root /var/www/reminiscecleberg.com/;
29
30 include custom.d/tls/ssl_engine.conf; 21 include custom.d/tls/ssl_engine.conf;
31 include custom.d/tls/policy_balanced.conf; 22 include custom.d/tls/policy_balanced.conf;
32 include custom.d/basic.conf; 23 include custom.d/basic.conf;
33 # include custom.d/tls/certificate_files.conf;
34 ssl_certificate /etc/letsencrypt/live/reminiscecleberg.com/fullchain.pem; 24 ssl_certificate /etc/letsencrypt/live/reminiscecleberg.com/fullchain.pem;
35 ssl_certificate_key /etc/letsencrypt/live/reminiscecleberg.com/privkey.pem; 25 ssl_certificate_key /etc/letsencrypt/live/reminiscecleberg.com/privkey.pem;
36 ssl_trusted_certificate /etc/letsencrypt/live/reminiscecleberg.com/chain.pem; 26 ssl_trusted_certificate /etc/letsencrypt/live/reminiscecleberg.com/chain.pem;
37 27 location / { try_files $uri $uri/ =404; }
38 # ----------------------------------------------------------------------
39 # | Custom rules & config for specific website |
40 # ----------------------------------------------------------------------
41 location / {
42 try_files $uri $uri/ =404;
43 }
44 # ----------------------------------------------------------------------
45} 28}
46 29
47# ----------------------------------------------------------------------
48# | Config file for non-secure host |
49# ----------------------------------------------------------------------
50server { 30server {
51 listen [::]:80; 31 listen [::]:80;
52 listen 80; 32 listen 80;
53 server_name www.reminiscecleberg.com reminiscecleberg.com; 33 server_name www.reminiscecleberg.com reminiscecleberg.com;
54
55 return 301 https://reminiscecleberg.com$request_uri; 34 return 301 https://reminiscecleberg.com$request_uri;
56} 35}
linux/nginx/etc/nginx/conf.d/rimgo.conf +3 −26
@@ -1,39 +1,16 @@
1# ----------------------------------------------------------------------
2# | Config file for host |
3# ----------------------------------------------------------------------
4server { 1server {
5 listen [::]:443 ssl; 2 listen [::]:443 ssl;
6 listen 443 ssl; 3 listen 443 ssl;
7 http2 on; 4 http2 on;
8
9 server_name rimgo.cleberg.net; 5 server_name rimgo.cleberg.net;
10
11 include custom.d/tls/ssl_engine.conf; 6 include custom.d/tls/ssl_engine.conf;
12 include custom.d/tls/certificate_files.conf; 7 include custom.d/tls/certificate_files.conf;
13 include custom.d/tls/policy_balanced.conf; 8 include custom.d/tls/policy_balanced.conf;
14 include custom.d/basic.conf; 9 include custom.d/basic.conf;
15
16 # ----------------------------------------------------------------------
17 # | Custom rules & config for specific website |
18 # ----------------------------------------------------------------------
19 location / { 10 location / {
20 set $upstream http://127.0.0.1:3869; 11 set $upstream http://127.0.0.1:3869;
21 proxy_pass $upstream; 12 proxy_pass $upstream;
22
23 include custom.d/reverse_proxy/basic.conf; 13 include custom.d/reverse_proxy/basic.conf;
24 } 14 }
25 15 include custom.d/security/robots_index_only.conf;
26 include custom.d/security/robots_index_only.conf;
27 # ----------------------------------------------------------------------
28}
29
30# ----------------------------------------------------------------------
31# | Config file for non-secure host |
32# ----------------------------------------------------------------------
33server {
34 listen [::]:80;
35 listen 80;
36 server_name rimgo.cleberg.net;
37
38 return 301 https://$host$request_uri;
39} 16}
linux/nginx/etc/nginx/conf.d/rl.conf +4 −30
@@ -1,44 +1,18 @@
1# ----------------------------------------------------------------------
2# | Config file for host |
3# ----------------------------------------------------------------------
4server { 1server {
5 listen [::]:443 ssl; 2 listen [::]:443 ssl;
6 listen 443 ssl; 3 listen 443 ssl;
7 http2 on; 4 http2 on;
8
9 server_name rl.cleberg.net; 5 server_name rl.cleberg.net;
10
11 include custom.d/tls/ssl_engine.conf; 6 include custom.d/tls/ssl_engine.conf;
12 include custom.d/tls/certificate_files.conf; 7 include custom.d/tls/certificate_files.conf;
13 include custom.d/tls/policy_balanced.conf; 8 include custom.d/tls/policy_balanced.conf;
14 include custom.d/basic.conf; 9 include custom.d/basic.conf;
15 10 location /authelia { include custom.d/reverse_proxy/authelia.conf; }
16 # ----------------------------------------------------------------------
17 # | Custom rules & config for specific website |
18 # ----------------------------------------------------------------------
19 location /authelia {
20 include custom.d/reverse_proxy/authelia.conf;
21 }
22
23 location / { 11 location / {
24 set $upstream http://192.168.0.251:8983; 12 set $upstream http://192.168.0.251:8983;
25 proxy_pass $upstream; 13 proxy_pass $upstream;
26
27 include custom.d/reverse_proxy/authelia_request.conf; 14 include custom.d/reverse_proxy/authelia_request.conf;
28 include custom.d/reverse_proxy/basic.conf; 15 include custom.d/reverse_proxy/basic.conf;
29 } 16 }
30 17 include custom.d/security/robots_index_only.conf;
31 include custom.d/security/robots_index_only.conf;
32 # ----------------------------------------------------------------------
33}
34
35# ----------------------------------------------------------------------
36# | Config file for non-secure host |
37# ----------------------------------------------------------------------
38server {
39 listen [::]:80;
40 listen 80;
41 server_name rl.cleberg.net;
42
43 return 301 https://$host$request_uri;
44} 18}
linux/nginx/etc/nginx/conf.d/rss.conf +4 −35
@@ -1,31 +1,15 @@
1# ---------------------------------------------------------------------- 1upstream freshrss { server 192.168.0.251:8081; keepalive 64; }
2# | Config file for host |
3# ----------------------------------------------------------------------
4upstream freshrss {
5 server 192.168.0.251:8081;
6 keepalive 64;
7}
8
9server { 2server {
10 listen [::]:443 ssl; 3 listen [::]:443 ssl;
11 listen 443 ssl; 4 listen 443 ssl;
12 http2 on; 5 http2 on;
13
14 server_name rss.cleberg.net; 6 server_name rss.cleberg.net;
15
16 include custom.d/tls/ssl_engine.conf; 7 include custom.d/tls/ssl_engine.conf;
17 include custom.d/tls/certificate_files.conf; 8 include custom.d/tls/certificate_files.conf;
18 include custom.d/tls/policy_balanced.conf; 9 include custom.d/tls/policy_balanced.conf;
19 include custom.d/basic.conf; 10 include custom.d/basic.conf;
20
21 # ----------------------------------------------------------------------
22 # | Custom rules & config for specific website |
23 # ----------------------------------------------------------------------
24 location / { 11 location / {
25 proxy_pass http://freshrss/; 12 proxy_pass http://freshrss/;
26
27 # include custom.d/reverse_proxy/basic.conf;
28
29 add_header X-Frame-Options SAMEORIGIN; 13 add_header X-Frame-Options SAMEORIGIN;
30 add_header X-XSS-Protection "1; mode=block"; 14 add_header X-XSS-Protection "1; mode=block";
31 proxy_redirect off; 15 proxy_redirect off;
@@ -36,23 +20,8 @@ server {
36 proxy_set_header X-Forwarded-Proto $scheme; 20 proxy_set_header X-Forwarded-Proto $scheme;
37 proxy_set_header X-Forwarded-Port $server_port; 21 proxy_set_header X-Forwarded-Port $server_port;
38 proxy_read_timeout 90; 22 proxy_read_timeout 90;
39
40 # Forward the Authorization header for the Google Reader API.
41 proxy_set_header Authorization $http_authorization; 23 proxy_set_header Authorization $http_authorization;
42 proxy_pass_header Authorization; 24 proxy_pass_header Authorization;
43 } 25 }
44 26 include custom.d/security/robots_index_only.conf;
45 include custom.d/security/robots_index_only.conf; 27}\ No newline at end of file
46 # ----------------------------------------------------------------------
47}
48
49# ----------------------------------------------------------------------
50# | Config file for non-secure host |
51# ----------------------------------------------------------------------
52server {
53 listen [::]:80;
54 listen 80;
55 server_name rss.cleberg.net;
56
57 return 301 https://$host$request_uri;
58}
linux/nginx/etc/nginx/conf.d/search.conf +3 −27
@@ -1,44 +1,20 @@
1# ----------------------------------------------------------------------
2# | Config file for host |
3# ----------------------------------------------------------------------
4server { 1server {
5 listen [::]:443 ssl; 2 listen [::]:443 ssl;
6 listen 443 ssl; 3 listen 443 ssl;
7 http2 on; 4 http2 on;
8
9 server_name search.cleberg.net; 5 server_name search.cleberg.net;
10
11 include custom.d/tls/ssl_engine.conf; 6 include custom.d/tls/ssl_engine.conf;
12 include custom.d/tls/certificate_files.conf; 7 include custom.d/tls/certificate_files.conf;
13 include custom.d/tls/policy_balanced.conf; 8 include custom.d/tls/policy_balanced.conf;
14 include custom.d/basic.conf; 9 include custom.d/basic.conf;
15
16 # ----------------------------------------------------------------------
17 # | Custom rules & config for specific website |
18 # ----------------------------------------------------------------------
19 location / { 10 location / {
20 set $upstream http://127.0.0.1:9191; 11 set $upstream http://127.0.0.1:9191;
21 proxy_pass $upstream; 12 proxy_pass $upstream;
22
23 # include custom.d/reverse_proxy/basic.conf;
24 proxy_set_header Host $host; 13 proxy_set_header Host $host;
25 proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; 14 proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
26 proxy_set_header Upgrade $http_upgrade; 15 proxy_set_header Upgrade $http_upgrade;
27 proxy_set_header Connection "upgrade"; 16 proxy_set_header Connection "upgrade";
28 proxy_http_version 1.1; 17 proxy_http_version 1.1;
29 } 18 }
30 19 include custom.d/security/robots_index_only.conf;
31 include custom.d/security/robots_index_only.conf;
32 # ----------------------------------------------------------------------
33}
34
35# ----------------------------------------------------------------------
36# | Config file for non-secure host |
37# ----------------------------------------------------------------------
38server {
39 listen [::]:80;
40 listen 80;
41 server_name search.cleberg.net;
42
43 return 301 https://$host$request_uri;
44} 20}
linux/nginx/etc/nginx/conf.d/send.conf +3 −26
@@ -1,39 +1,16 @@
1# ----------------------------------------------------------------------
2# | Config file for host |
3# ----------------------------------------------------------------------
4server { 1server {
5 listen [::]:443 ssl; 2 listen [::]:443 ssl;
6 listen 443 ssl; 3 listen 443 ssl;
7 http2 on; 4 http2 on;
8
9 server_name send.cleberg.net; 5 server_name send.cleberg.net;
10
11 include custom.d/tls/ssl_engine.conf; 6 include custom.d/tls/ssl_engine.conf;
12 include custom.d/tls/certificate_files.conf; 7 include custom.d/tls/certificate_files.conf;
13 include custom.d/tls/policy_balanced.conf; 8 include custom.d/tls/policy_balanced.conf;
14 include custom.d/basic.conf; 9 include custom.d/basic.conf;
15
16 # ----------------------------------------------------------------------
17 # | Custom rules & config for specific website |
18 # ----------------------------------------------------------------------
19 location / { 10 location / {
20 set $upstream http://192.168.0.251:1443; 11 set $upstream http://192.168.0.251:1443;
21 proxy_pass $upstream; 12 proxy_pass $upstream;
22
23 include custom.d/reverse_proxy/basic.conf; 13 include custom.d/reverse_proxy/basic.conf;
24 } 14 }
25 15 include custom.d/security/robots_index_only.conf;
26 include custom.d/security/robots_index_only.conf;
27 # ----------------------------------------------------------------------
28}
29
30# ----------------------------------------------------------------------
31# | Config file for non-secure host |
32# ----------------------------------------------------------------------
33server {
34 listen [::]:80;
35 listen 80;
36 server_name send.cleberg.net;
37
38 return 301 https://$host$request_uri;
39} 16}
linux/nginx/etc/nginx/conf.d/slash.conf +4 −27
@@ -1,39 +1,16 @@
1# ----------------------------------------------------------------------
2# | Config file for host |
3# ----------------------------------------------------------------------
4server { 1server {
5 listen [::]:443 ssl; 2 listen [::]:443 ssl;
6 listen 443 ssl; 3 listen 443 ssl;
7 http2 on; 4 http2 on;
8
9 server_name slash.cleberg.net; 5 server_name slash.cleberg.net;
10
11 include custom.d/tls/ssl_engine.conf; 6 include custom.d/tls/ssl_engine.conf;
12 include custom.d/tls/certificate_files.conf; 7 include custom.d/tls/certificate_files.conf;
13 include custom.d/tls/policy_balanced.conf; 8 include custom.d/tls/policy_balanced.conf;
14 include custom.d/basic.conf; 9 include custom.d/basic.conf;
15
16 # ----------------------------------------------------------------------
17 # | Custom rules & config for specific website |
18 # ----------------------------------------------------------------------
19 location / { 10 location / {
20 set $upstream http://192.168.0.251:5231; 11 set $upstream http://192.168.0.251:5231;
21 proxy_pass $upstream; 12 proxy_pass $upstream;
22
23 include custom.d/reverse_proxy/basic.conf; 13 include custom.d/reverse_proxy/basic.conf;
24 } 14 }
25 15 include custom.d/security/robots_index_only.conf;
26 include custom.d/security/robots_index_only.conf; 16}\ No newline at end of file
27 # ----------------------------------------------------------------------
28}
29
30# ----------------------------------------------------------------------
31# | Config file for non-secure host |
32# ----------------------------------------------------------------------
33server {
34 listen [::]:80;
35 listen 80;
36 server_name slash.cleberg.net;
37
38 return 301 https://$host$request_uri;
39}
linux/nginx/etc/nginx/conf.d/small.conf +4 −27
@@ -1,39 +1,16 @@
1# ----------------------------------------------------------------------
2# | Config file for host |
3# ----------------------------------------------------------------------
4server { 1server {
5 listen [::]:443 ssl; 2 listen [::]:443 ssl;
6 listen 443 ssl; 3 listen 443 ssl;
7 http2 on; 4 http2 on;
8
9 server_name small.cleberg.net; 5 server_name small.cleberg.net;
10
11 include custom.d/tls/ssl_engine.conf; 6 include custom.d/tls/ssl_engine.conf;
12 include custom.d/tls/certificate_files.conf; 7 include custom.d/tls/certificate_files.conf;
13 include custom.d/tls/policy_balanced.conf; 8 include custom.d/tls/policy_balanced.conf;
14 include custom.d/basic.conf; 9 include custom.d/basic.conf;
15
16 # ----------------------------------------------------------------------
17 # | Custom rules & config for specific website |
18 # ----------------------------------------------------------------------
19 location / { 10 location / {
20 set $upstream http://127.0.0.1:8002; 11 set $upstream http://127.0.0.1:8002;
21 proxy_pass $upstream; 12 proxy_pass $upstream;
22
23 include custom.d/reverse_proxy/basic.conf; 13 include custom.d/reverse_proxy/basic.conf;
24 } 14 }
25 15 include custom.d/security/robots_index_only.conf;
26 include custom.d/security/robots_index_only.conf; 16}\ No newline at end of file
27 # ----------------------------------------------------------------------
28}
29
30# ----------------------------------------------------------------------
31# | Config file for non-secure host |
32# ----------------------------------------------------------------------
33server {
34 listen [::]:80;
35 listen 80;
36 server_name small.cleberg.net;
37
38 return 301 https://$host$request_uri;
39}
linux/nginx/etc/nginx/conf.d/ssh.conf +5 −31
@@ -1,44 +1,18 @@
1# ----------------------------------------------------------------------
2# | Config file for host |
3# ----------------------------------------------------------------------
4server { 1server {
5 listen [::]:443 ssl; 2 listen [::]:443 ssl;
6 listen 443 ssl; 3 listen 443 ssl;
7 http2 on; 4 http2 on;
8
9 server_name ssh.cleberg.net; 5 server_name ssh.cleberg.net;
10
11 include custom.d/tls/ssl_engine.conf; 6 include custom.d/tls/ssl_engine.conf;
12 include custom.d/tls/certificate_files.conf; 7 include custom.d/tls/certificate_files.conf;
13 include custom.d/tls/policy_balanced.conf; 8 include custom.d/tls/policy_balanced.conf;
14 include custom.d/basic.conf; 9 include custom.d/basic.conf;
15 10 location /authelia { include custom.d/reverse_proxy/authelia.conf; }
16 # ----------------------------------------------------------------------
17 # | Custom rules & config for specific website |
18 # ----------------------------------------------------------------------
19 location /authelia {
20 include custom.d/reverse_proxy/authelia.conf;
21 }
22
23 location / { 11 location / {
24 set $upstream http://127.0.0.1:8169; 12 set $upstream http://127.0.0.1:8169;
25 proxy_pass $upstream; 13 proxy_pass $upstream;
26
27 include custom.d/reverse_proxy/authelia_request.conf; 14 include custom.d/reverse_proxy/authelia_request.conf;
28 include custom.d/reverse_proxy/basic.conf; 15 include custom.d/reverse_proxy/basic.conf;
29 } 16 }
30 17 include custom.d/security/robots_index_only.conf;
31 include custom.d/security/robots_index_only.conf; 18}\ No newline at end of file
32 # ----------------------------------------------------------------------
33}
34
35# ----------------------------------------------------------------------
36# | Config file for non-secure host |
37# ----------------------------------------------------------------------
38server {
39 listen [::]:80;
40 listen 80;
41 server_name ssh.cleberg.net;
42
43 return 301 https://$host$request_uri;
44}
linux/nginx/etc/nginx/conf.d/teddit.conf +5 −31
@@ -1,44 +1,18 @@
1# ----------------------------------------------------------------------
2# | Config file for host |
3# ----------------------------------------------------------------------
4server { 1server {
5 listen [::]:443 ssl; 2 listen [::]:443 ssl;
6 listen 443 ssl; 3 listen 443 ssl;
7 http2 on; 4 http2 on;
8
9 server_name teddit.cleberg.net; 5 server_name teddit.cleberg.net;
10
11 include custom.d/tls/ssl_engine.conf; 6 include custom.d/tls/ssl_engine.conf;
12 include custom.d/tls/certificate_files.conf; 7 include custom.d/tls/certificate_files.conf;
13 include custom.d/tls/policy_balanced.conf; 8 include custom.d/tls/policy_balanced.conf;
14 include custom.d/basic.conf; 9 include custom.d/basic.conf;
15 10 location /authelia { include custom.d/reverse_proxy/authelia.conf; }
16 # ----------------------------------------------------------------------
17 # | Custom rules & config for specific website |
18 # ----------------------------------------------------------------------
19 location /authelia {
20 include custom.d/reverse_proxy/authelia.conf;
21 }
22
23 location / { 11 location / {
24 set $upstream http://192.168.0.251:8181; 12 set $upstream http://192.168.0.251:8181;
25 proxy_pass $upstream; 13 proxy_pass $upstream;
26
27 include custom.d/reverse_proxy/authelia_request.conf; 14 include custom.d/reverse_proxy/authelia_request.conf;
28 include custom.d/reverse_proxy/basic.conf; 15 include custom.d/reverse_proxy/basic.conf;
29 } 16 }
30 17 include custom.d/security/robots_index_only.conf;
31 include custom.d/security/robots_index_only.conf; 18}\ No newline at end of file
32 # ----------------------------------------------------------------------
33}
34
35# ----------------------------------------------------------------------
36# | Config file for non-secure host |
37# ----------------------------------------------------------------------
38server {
39 listen [::]:80;
40 listen 80;
41 server_name teddit.cleberg.net;
42
43 return 301 https://$host$request_uri;
44}
linux/nginx/etc/nginx/conf.d/wyl.conf +4 −30
@@ -1,44 +1,18 @@
1# ----------------------------------------------------------------------
2# | Config file for host |
3# ----------------------------------------------------------------------
4server { 1server {
5 listen [::]:443 ssl; 2 listen [::]:443 ssl;
6 listen 443 ssl; 3 listen 443 ssl;
7 http2 on; 4 http2 on;
8
9 server_name wyl.cleberg.net; 5 server_name wyl.cleberg.net;
10
11 include custom.d/tls/ssl_engine.conf; 6 include custom.d/tls/ssl_engine.conf;
12 include custom.d/tls/certificate_files.conf; 7 include custom.d/tls/certificate_files.conf;
13 include custom.d/tls/policy_balanced.conf; 8 include custom.d/tls/policy_balanced.conf;
14 include custom.d/basic.conf; 9 include custom.d/basic.conf;
15 10 location /authelia { include custom.d/reverse_proxy/authelia.conf; }
16 # ----------------------------------------------------------------------
17 # | Custom rules & config for specific website |
18 # ----------------------------------------------------------------------
19 location /authelia {
20 include custom.d/reverse_proxy/authelia.conf;
21 }
22
23 location / { 11 location / {
24 set $upstream http://192.168.0.251:8840; 12 set $upstream http://192.168.0.251:8840;
25 proxy_pass $upstream; 13 proxy_pass $upstream;
26
27 include custom.d/reverse_proxy/authelia_request.conf; 14 include custom.d/reverse_proxy/authelia_request.conf;
28 include custom.d/reverse_proxy/basic.conf; 15 include custom.d/reverse_proxy/basic.conf;
29 } 16 }
30 17 include custom.d/security/robots_index_only.conf;
31 include custom.d/security/robots_index_only.conf;
32 # ----------------------------------------------------------------------
33}
34
35# ----------------------------------------------------------------------
36# | Config file for non-secure host |
37# ----------------------------------------------------------------------
38server {
39 listen [::]:80;
40 listen 80;
41 server_name wyl.cleberg.net;
42
43 return 301 https://$host$request_uri;
44} 18}