cmc/dotfiles

Using GNU Stow to manage my dotfiles.

clone: git clone https://gitbay.org/cmc/dotfiles.git

2b59dc285ebd31d3c7f7a93b4fd1583cdbdb4ac4

verified · cmc

author: Christian Cleberg <hello@cleberg.net> · 2026-03-22T13:26:37Z

add gramps and update cleberg.net security headers

 linux/nginx/etc/nginx/conf.d/cleberg.net.conf |  3 +++
 linux/nginx/etc/nginx/conf.d/gramps.conf      | 18 ++++++++++++++++++
 2 files changed, 21 insertions(+)

diff --git a/linux/nginx/etc/nginx/conf.d/cleberg.net.conf b/linux/nginx/etc/nginx/conf.d/cleberg.net.conf
index 27848fa..9d43457 100644
--- a/linux/nginx/etc/nginx/conf.d/cleberg.net.conf
+++ b/linux/nginx/etc/nginx/conf.d/cleberg.net.conf
@@ -18,6 +18,9 @@ server {
 	include custom.d/tls/certificate_files.conf;
 	include custom.d/tls/policy_strict.conf;
 	include custom.d/basic.conf;
+	include custom.d/security/strict-transport-security.conf;
+	include custom.d/security/content-security-policy.conf;
+	include custom.d/security/permissions-policy.conf;
 	root /var/www/cleberg.net/;
 
 	add_header Onion-Location "http://paske4urhs6nttrtlkuwa5cowum3fjkc6yv6kl4ncx3mjxcd77764nqd.onion$request_uri" always;
diff --git a/linux/nginx/etc/nginx/conf.d/gramps.conf b/linux/nginx/etc/nginx/conf.d/gramps.conf
new file mode 100644
index 0000000..c8188f7
--- /dev/null
+++ b/linux/nginx/etc/nginx/conf.d/gramps.conf
@@ -0,0 +1,18 @@
+server {
+	listen [::]:443 ssl;
+	listen 443 ssl;
+	http2 on;
+	server_name gramps.cleberg.net;
+	include custom.d/tls/ssl_engine.conf;
+	include custom.d/tls/certificate_files.conf;
+	include custom.d/tls/policy_strict.conf;
+	include custom.d/basic.conf;
+	location /authelia { include custom.d/reverse_proxy/authelia.conf; }
+	location / {
+		set $upstream http://127.0.0.1:5566;
+		proxy_pass $upstream;
+		include custom.d/reverse_proxy/authelia_request.conf;
+		include custom.d/reverse_proxy/basic.conf;
+	}
+	include custom.d/security/robots_index_only.conf;
+}