cmc/dotfiles

Using GNU Stow to manage my dotfiles. config dotfiles macos stow

Commit 2b59dc285e

2b59dc285ebd31d3c7f7a93b4fd1583cdbdb4ac4

parent: 1bdcd7a487

Verified · cmc

cmc <hello@cleberg.net> · 2026-03-22 13:26 UTC 

add gramps and update cleberg.net security headers

Layout: unified · split

linux/nginx/etc/nginx/conf.d/cleberg.net.conf +3
@@ -18,6 +18,9 @@ server {
18 include custom.d/tls/certificate_files.conf; 18 include custom.d/tls/certificate_files.conf;
19 include custom.d/tls/policy_strict.conf; 19 include custom.d/tls/policy_strict.conf;
20 include custom.d/basic.conf; 20 include custom.d/basic.conf;
21 include custom.d/security/strict-transport-security.conf;
22 include custom.d/security/content-security-policy.conf;
23 include custom.d/security/permissions-policy.conf;
21 root /var/www/cleberg.net/; 24 root /var/www/cleberg.net/;
22 25
23 add_header Onion-Location "http://paske4urhs6nttrtlkuwa5cowum3fjkc6yv6kl4ncx3mjxcd77764nqd.onion$request_uri" always; 26 add_header Onion-Location "http://paske4urhs6nttrtlkuwa5cowum3fjkc6yv6kl4ncx3mjxcd77764nqd.onion$request_uri" always;
linux/nginx/etc/nginx/conf.d/gramps.conf added +18
@@ -0,0 +1,18 @@
1server {
2 listen [::]:443 ssl;
3 listen 443 ssl;
4 http2 on;
5 server_name gramps.cleberg.net;
6 include custom.d/tls/ssl_engine.conf;
7 include custom.d/tls/certificate_files.conf;
8 include custom.d/tls/policy_strict.conf;
9 include custom.d/basic.conf;
10 location /authelia { include custom.d/reverse_proxy/authelia.conf; }
11 location / {
12 set $upstream http://127.0.0.1:5566;
13 proxy_pass $upstream;
14 include custom.d/reverse_proxy/authelia_request.conf;
15 include custom.d/reverse_proxy/basic.conf;
16 }
17 include custom.d/security/robots_index_only.conf;
18}