cmc/dotfiles
Using GNU Stow to manage my dotfiles.
clone: git clone https://gitbay.org/cmc/dotfiles.git
cf610d008610505e9338aedf6904d4495914433b
verified · cmc
author: Christian Cleberg <hello@cleberg.net> · 2026-04-09T18:59:24Z
linux/nginx/etc/nginx/conf.d/1kb.conf | 22 +++++++++++++- linux/nginx/etc/nginx/conf.d/ao.conf | 22 +++++++++++++- linux/nginx/etc/nginx/conf.d/art.conf | 22 +++++++++++++- linux/nginx/etc/nginx/conf.d/auth.conf | 22 +++++++++++++- linux/nginx/etc/nginx/conf.d/br.conf | 22 +++++++++++++- linux/nginx/etc/nginx/conf.d/bt.conf | 22 +++++++++++++- linux/nginx/etc/nginx/conf.d/bw.conf | 22 +++++++++++++- linux/nginx/etc/nginx/conf.d/cc.conf | 22 +++++++++++++- linux/nginx/etc/nginx/conf.d/cleberg.dev.conf | 35 ++++++++++++++++++++++ linux/nginx/etc/nginx/conf.d/cleberg.net.conf | 24 +++++++++++++-- linux/nginx/etc/nginx/conf.d/ddns.conf | 22 +++++++++++++- linux/nginx/etc/nginx/conf.d/files.conf | 22 +++++++++++++- linux/nginx/etc/nginx/conf.d/gh.conf | 22 +++++++++++++- linux/nginx/etc/nginx/conf.d/gramps.conf | 22 +++++++++++++- linux/nginx/etc/nginx/conf.d/ha.conf | 22 +++++++++++++- linux/nginx/etc/nginx/conf.d/hat.conf | 22 +++++++++++++- linux/nginx/etc/nginx/conf.d/hn.conf | 22 +++++++++++++- linux/nginx/etc/nginx/conf.d/irc.conf | 22 +++++++++++++- linux/nginx/etc/nginx/conf.d/ld.conf | 22 +++++++++++++- linux/nginx/etc/nginx/conf.d/lt.conf | 24 +++++++++++++-- linux/nginx/etc/nginx/conf.d/mz.conf | 24 +++++++++++++-- linux/nginx/etc/nginx/conf.d/office.conf | 22 +++++++++++++- linux/nginx/etc/nginx/conf.d/org.conf | 22 +++++++++++++- linux/nginx/etc/nginx/conf.d/paste.conf | 24 +++++++++++++-- linux/nginx/etc/nginx/conf.d/pb.conf | 22 +++++++++++++- linux/nginx/etc/nginx/conf.d/photos.conf | 24 +++++++++++++-- linux/nginx/etc/nginx/conf.d/pin.conf | 22 +++++++++++++- linux/nginx/etc/nginx/conf.d/piped.conf | 24 +++++++++++++-- linux/nginx/etc/nginx/conf.d/projects.conf | 22 +++++++++++++- linux/nginx/etc/nginx/conf.d/rd.conf | 22 +++++++++++++- linux/nginx/etc/nginx/conf.d/rimgo.conf | 22 +++++++++++++- linux/nginx/etc/nginx/conf.d/rl.conf | 22 +++++++++++++- linux/nginx/etc/nginx/conf.d/rss.conf | 22 +++++++++++++- linux/nginx/etc/nginx/conf.d/search.conf | 22 +++++++++++++- linux/nginx/etc/nginx/conf.d/send.conf | 22 +++++++++++++- linux/nginx/etc/nginx/conf.d/slash.conf | 22 +++++++++++++- linux/nginx/etc/nginx/conf.d/small.conf | 24 +++++++++++++-- linux/nginx/etc/nginx/conf.d/ssh.conf | 24 +++++++++++++-- linux/nginx/etc/nginx/conf.d/zerolabs.sh.conf | 35 ++++++++++++++++++++++ .../custom.d/reverse_proxy/authelia_request.conf | 2 +- 40 files changed, 856 insertions(+), 46 deletions(-) @@ -1,7 +1,7 @@ server { listen 443; http2 on; - server_name 1kb.cleberg.net; + server_name 1kb.zerolabs.sh; root /var/www/1kb; index index.html; @@ -22,3 +22,23 @@ server { try_files /index.html =404; } } + +server { + listen 80; + listen [::]:80; + server_name 1kb.cleberg.net; + return 301 https://1kb.zerolabs.sh$request_uri; +} + +server { + listen 443 ssl; + listen [::]:443 ssl; + http2 on; + server_name 1kb.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_strict.conf; + + return 301 https://1kb.zerolabs.sh$request_uri; +} @@ -2,7 +2,7 @@ server { listen [::]:443 ssl; listen 443 ssl; http2 on; - server_name ao.cleberg.net; + server_name ao.zerolabs.sh; add_header Onion-Location "http://7lyqrn4ofxdq7lfporviu44zpc42wooh2bqazfhvpscgwby2vcwldzad.onion$request_uri" always; include custom.d/tls/ssl_engine.conf; include custom.d/tls/certificate_files.conf; @@ -15,3 +15,23 @@ server { } include custom.d/security/robots_index_only.conf; } + +server { + listen 80; + listen [::]:80; + server_name ao.cleberg.net; + return 301 https://ao.zerolabs.sh$request_uri; +} + +server { + listen 443 ssl; + listen [::]:443 ssl; + http2 on; + server_name ao.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_strict.conf; + + return 301 https://ao.zerolabs.sh$request_uri; +} @@ -1,7 +1,7 @@ server { listen 443 ssl; http2 on; - server_name art.cleberg.net mplqs2jxkjd5wxak3zjv55oxyadf4vwzx6ksgj4ztftndjl6elgsf4qd.onion; + server_name art.zerolabs.sh mplqs2jxkjd5wxak3zjv55oxyadf4vwzx6ksgj4ztftndjl6elgsf4qd.onion; add_header Onion-Location "http://mplqs2jxkjd5wxak3zjv55oxyadf4vwzx6ksgj4ztftndjl6elgsf4qd.onion$request_uri" always; include custom.d/tls/ssl_engine.conf; include custom.d/tls/certificate_files.conf; @@ -14,3 +14,23 @@ server { } include custom.d/security/robots_index_only.conf; } + +server { + listen 80; + listen [::]:80; + server_name art.cleberg.net; + return 301 https://art.zerolabs.sh$request_uri; +} + +server { + listen 443 ssl; + listen [::]:443 ssl; + http2 on; + server_name art.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_strict.conf; + + return 301 https://art.zerolabs.sh$request_uri; +} @@ -2,7 +2,7 @@ server { listen [::]:443 ssl; listen 443 ssl; http2 on; - server_name auth.cleberg.net; + server_name auth.zerolabs.sh; include custom.d/tls/ssl_engine.conf; include custom.d/tls/certificate_files.conf; include custom.d/tls/policy_strict.conf; @@ -14,3 +14,23 @@ server { } location /api/verify { proxy_pass $upstream; } } + +server { + listen 80; + listen [::]:80; + server_name auth.cleberg.net; + return 301 https://auth.zerolabs.sh$request_uri; +} + +server { + listen 443 ssl; + listen [::]:443 ssl; + http2 on; + server_name auth.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_strict.conf; + + return 301 https://auth.zerolabs.sh$request_uri; +} @@ -2,7 +2,7 @@ server { listen [::]:443 ssl; listen 443 ssl; http2 on; - server_name br.cleberg.net pkft6saqbmn6he5g626fphvlijmkdf4rzckjw6r57zsmuqm4ukd6i5ad.onion; + server_name br.zerolabs.sh pkft6saqbmn6he5g626fphvlijmkdf4rzckjw6r57zsmuqm4ukd6i5ad.onion; add_header Onion-Location "http://pkft6saqbmn6he5g626fphvlijmkdf4rzckjw6r57zsmuqm4ukd6i5ad.onion$request_uri" always; include custom.d/tls/ssl_engine.conf; include custom.d/tls/certificate_files.conf; @@ -15,3 +15,23 @@ server { } include custom.d/security/robots_index_only.conf; } + +server { + listen 80; + listen [::]:80; + server_name br.cleberg.net; + return 301 https://br.zerolabs.sh$request_uri; +} + +server { + listen 443 ssl; + listen [::]:443 ssl; + http2 on; + server_name br.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_strict.conf; + + return 301 https://br.zerolabs.sh$request_uri; +} @@ -1,7 +1,7 @@ server { listen 443 ssl; http2 on; - server_name bt.cleberg.net; + server_name bt.zerolabs.sh; include custom.d/tls/ssl_engine.conf; include custom.d/tls/certificate_files.conf; @@ -33,3 +33,23 @@ server { proxy_pass http://127.0.0.1:9091; } } + +server { + listen 80; + listen [::]:80; + server_name bt.cleberg.net; + return 301 https://bt.zerolabs.sh$request_uri; +} + +server { + listen 443 ssl; + listen [::]:443 ssl; + http2 on; + server_name bt.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_strict.conf; + + return 301 https://bt.zerolabs.sh$request_uri; +} @@ -2,7 +2,7 @@ server { listen [::]:443 ssl; listen 443 ssl; http2 on; - server_name bw.cleberg.net z7kc27ceokwgddrcspxx4eb7b6xqmtjj26nohg3wgt6hsnnlfmk4apqd.onion; + server_name bw.zerolabs.sh z7kc27ceokwgddrcspxx4eb7b6xqmtjj26nohg3wgt6hsnnlfmk4apqd.onion; add_header Onion-Location "http://z7kc27ceokwgddrcspxx4eb7b6xqmtjj26nohg3wgt6hsnnlfmk4apqd.onion$request_uri" always; include custom.d/tls/ssl_engine.conf; include custom.d/tls/certificate_files.conf; @@ -15,3 +15,23 @@ server { } include custom.d/security/robots_index_only.conf; } + +server { + listen 80; + listen [::]:80; + server_name bw.cleberg.net; + return 301 https://bw.zerolabs.sh$request_uri; +} + +server { + listen 443 ssl; + listen [::]:443 ssl; + http2 on; + server_name bw.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_strict.conf; + + return 301 https://bw.zerolabs.sh$request_uri; +} @@ -2,7 +2,7 @@ server { listen [::]:443 ssl; listen 443 ssl; http2 on; - server_name cc.cleberg.net gipsohqqcehn4n6smyg5j5aap7ln6lwugyjm2lxyx4vfiwayjhpnodyd.onion; + server_name cc.zerolabs.sh gipsohqqcehn4n6smyg5j5aap7ln6lwugyjm2lxyx4vfiwayjhpnodyd.onion; add_header Onion-Location "http://gipsohqqcehn4n6smyg5j5aap7ln6lwugyjm2lxyx4vfiwayjhpnodyd.onion$request_uri" always; include custom.d/tls/ssl_engine.conf; include custom.d/tls/certificate_files.conf; @@ -15,3 +15,23 @@ server { } include custom.d/security/robots_index_only.conf; } + +server { + listen 80; + listen [::]:80; + server_name cc.cleberg.net; + return 301 https://cc.zerolabs.sh$request_uri; +} + +server { + listen 443 ssl; + listen [::]:443 ssl; + http2 on; + server_name cc.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_strict.conf; + + return 301 https://cc.zerolabs.sh$request_uri; +} new file mode 100644 @@ -0,0 +1,35 @@ +server { + listen [::]:443 ssl; + listen 443 ssl; + http2 on; + server_name www.cleberg.dev; + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/policy_strict.conf; + ssl_certificate /etc/letsencrypt/live/cleberg.dev/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/cleberg.dev/privkey.pem; + ssl_trusted_certificate /etc/letsencrypt/live/cleberg.dev/chain.pem; + return 301 $scheme://cleberg.dev$request_uri; +} + + +server { + listen [::]:443 ssl; + listen 443 ssl; + http2 on; + server_name cleberg.dev; + root /var/www/cleberg.dev/; + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/policy_strict.conf; + include custom.d/basic.conf; + ssl_certificate /etc/letsencrypt/live/cleberg.dev/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/cleberg.dev/privkey.pem; + ssl_trusted_certificate /etc/letsencrypt/live/cleberg.dev/chain.pem; + location / { try_files $uri $uri/ =404; } +} + +server { + listen [::]:80; + listen 80; + server_name www.cleberg.dev cleberg.dev; + return 301 https://cleberg.dev$request_uri; +} @@ -2,7 +2,7 @@ server { listen [::]:443 ssl; listen 443 ssl; http2 on; - server_name www.cleberg.net; + server_name www.zerolabs.sh; include custom.d/tls/ssl_engine.conf; include custom.d/tls/certificate_files.conf; include custom.d/tls/policy_strict.conf; @@ -57,7 +57,7 @@ server { server { listen [::]:80; listen 80; - server_name www.cleberg.net cleberg.net; + server_name www.zerolabs.sh cleberg.net; return 301 https://cleberg.net$request_uri; } @@ -95,3 +95,23 @@ server { location /atom.xml { return 301 $scheme://$host/feed.xml; } location /blog/salary-transparency.html { return 301 $scheme://$host/salary/; } } + +server { + listen 80; + listen [::]:80; + server_name www.cleberg.net; + return 301 https://www.zerolabs.sh$request_uri; +} + +server { + listen 443 ssl; + listen [::]:443 ssl; + http2 on; + server_name www.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_strict.conf; + + return 301 https://www.zerolabs.sh$request_uri; +} @@ -2,7 +2,7 @@ server { listen [::]:443 ssl; listen 443 ssl; http2 on; - server_name ddns.cleberg.net; + server_name ddns.zerolabs.sh; include custom.d/tls/ssl_engine.conf; include custom.d/tls/certificate_files.conf; include custom.d/tls/policy_strict.conf; @@ -16,3 +16,23 @@ server { } include custom.d/security/robots_index_only.conf; } + +server { + listen 80; + listen [::]:80; + server_name ddns.cleberg.net; + return 301 https://ddns.zerolabs.sh$request_uri; +} + +server { + listen 443 ssl; + listen [::]:443 ssl; + http2 on; + server_name ddns.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_strict.conf; + + return 301 https://ddns.zerolabs.sh$request_uri; +} @@ -2,7 +2,7 @@ server { listen [::]:443 ssl; listen 443 ssl; http2 on; - server_name files.cleberg.net; + server_name files.zerolabs.sh; add_header Onion-Location "http://yt2y635dc6zyxziy5ytkfz36bmkgcxuccq3meom6qp44gjdat54wt5id.onion$request_uri" always; include custom.d/tls/ssl_engine.conf; include custom.d/tls/certificate_files.conf; @@ -21,3 +21,23 @@ server { autoindex on; location / { try_files $uri $uri/ /index.html; } } + +server { + listen 80; + listen [::]:80; + server_name files.cleberg.net; + return 301 https://files.zerolabs.sh$request_uri; +} + +server { + listen 443 ssl; + listen [::]:443 ssl; + http2 on; + server_name files.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_strict.conf; + + return 301 https://files.zerolabs.sh$request_uri; +} @@ -2,7 +2,7 @@ server { listen [::]:443 ssl; listen 443 ssl; http2 on; - server_name gh.cleberg.net; + server_name gh.zerolabs.sh; include custom.d/tls/ssl_engine.conf; include custom.d/tls/certificate_files.conf; include custom.d/tls/policy_strict.conf; @@ -14,3 +14,23 @@ server { } include custom.d/security/robots_index_only.conf; } + +server { + listen 80; + listen [::]:80; + server_name gh.cleberg.net; + return 301 https://gh.zerolabs.sh$request_uri; +} + +server { + listen 443 ssl; + listen [::]:443 ssl; + http2 on; + server_name gh.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_strict.conf; + + return 301 https://gh.zerolabs.sh$request_uri; +} @@ -2,7 +2,7 @@ server { listen [::]:443 ssl; listen 443 ssl; http2 on; - server_name gramps.cleberg.net; + server_name gramps.zerolabs.sh; include custom.d/tls/ssl_engine.conf; include custom.d/tls/certificate_files.conf; include custom.d/tls/policy_strict.conf; @@ -16,3 +16,23 @@ server { } include custom.d/security/robots_index_only.conf; } + +server { + listen 80; + listen [::]:80; + server_name gramps.cleberg.net; + return 301 https://gramps.zerolabs.sh$request_uri; +} + +server { + listen 443 ssl; + listen [::]:443 ssl; + http2 on; + server_name gramps.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_strict.conf; + + return 301 https://gramps.zerolabs.sh$request_uri; +} @@ -2,7 +2,7 @@ server { listen [::]:443 ssl; listen 443 ssl; http2 on; - server_name ha.cleberg.net; + server_name ha.zerolabs.sh; include custom.d/tls/ssl_engine.conf; include custom.d/tls/certificate_files.conf; include custom.d/tls/policy_strict.conf; @@ -20,3 +20,23 @@ server { } include custom.d/security/robots_index_only.conf; } + +server { + listen 80; + listen [::]:80; + server_name ha.cleberg.net; + return 301 https://ha.zerolabs.sh$request_uri; +} + +server { + listen 443 ssl; + listen [::]:443 ssl; + http2 on; + server_name ha.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_strict.conf; + + return 301 https://ha.zerolabs.sh$request_uri; +} @@ -2,7 +2,7 @@ server { listen [::]:443 ssl; listen 443 ssl; http2 on; - server_name hat.cleberg.net jfrkztgin2ngoj2fnssc2m2j2ycpchmrhzhudaucgvaib5iqwgfxexyd.onion; + server_name hat.zerolabs.sh jfrkztgin2ngoj2fnssc2m2j2ycpchmrhzhudaucgvaib5iqwgfxexyd.onion; add_header Onion-Location "http://jfrkztgin2ngoj2fnssc2m2j2ycpchmrhzhudaucgvaib5iqwgfxexyd.onion$request_uri" always; include custom.d/tls/ssl_engine.conf; include custom.d/tls/certificate_files.conf; @@ -15,3 +15,23 @@ server { } include custom.d/security/robots_index_only.conf; } + +server { + listen 80; + listen [::]:80; + server_name hat.cleberg.net; + return 301 https://hat.zerolabs.sh$request_uri; +} + +server { + listen 443 ssl; + listen [::]:443 ssl; + http2 on; + server_name hat.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_strict.conf; + + return 301 https://hat.zerolabs.sh$request_uri; +} @@ -3,7 +3,7 @@ server { listen 443 ssl; http2 on; listen 127.0.0.1:8093; - server_name hn.cleberg.net r3yfeffyj7ornpikojmw75u3sn2la7tqnmcmwgv2ov7if24sm5czqeid.onion; + server_name hn.zerolabs.sh r3yfeffyj7ornpikojmw75u3sn2la7tqnmcmwgv2ov7if24sm5czqeid.onion; root /var/www/hn/output/; autoindex on; add_header Onion-Location "http://r3yfeffyj7ornpikojmw75u3sn2la7tqnmcmwgv2ov7if24sm5czqeid.onion$request_uri" always; @@ -13,3 +13,23 @@ server { include custom.d/basic.conf; location / { try_files $uri $uri/ /index.html; } } + +server { + listen 80; + listen [::]:80; + server_name hn.cleberg.net; + return 301 https://hn.zerolabs.sh$request_uri; +} + +server { + listen 443 ssl; + listen [::]:443 ssl; + http2 on; + server_name hn.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_strict.conf; + + return 301 https://hn.zerolabs.sh$request_uri; +} @@ -2,7 +2,7 @@ server { listen [::]:443 ssl; listen 443 ssl; http2 on; - server_name irc.cleberg.net; + server_name irc.zerolabs.sh; include custom.d/tls/ssl_engine.conf; include custom.d/tls/certificate_files.conf; include custom.d/tls/policy_strict.conf; @@ -16,3 +16,23 @@ server { } include custom.d/security/robots_index_only.conf; } + +server { + listen 80; + listen [::]:80; + server_name irc.cleberg.net; + return 301 https://irc.zerolabs.sh$request_uri; +} + +server { + listen 443 ssl; + listen [::]:443 ssl; + http2 on; + server_name irc.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_strict.conf; + + return 301 https://irc.zerolabs.sh$request_uri; +} @@ -2,7 +2,7 @@ server { listen [::]:443 ssl; listen 443 ssl; http2 on; - server_name ld.cleberg.net u3tyzuhs7o4hkizpbcxbm5yqzj74bjqb3phfqfszrx4u75dua7lpf7ad.onion; + server_name ld.zerolabs.sh u3tyzuhs7o4hkizpbcxbm5yqzj74bjqb3phfqfszrx4u75dua7lpf7ad.onion; add_header Onion-Location "http://u3tyzuhs7o4hkizpbcxbm5yqzj74bjqb3phfqfszrx4u75dua7lpf7ad.onion$request_uri" always; include custom.d/tls/ssl_engine.conf; include custom.d/tls/certificate_files.conf; @@ -15,3 +15,23 @@ server { } include custom.d/security/robots_index_only.conf; } + +server { + listen 80; + listen [::]:80; + server_name ld.cleberg.net; + return 301 https://ld.zerolabs.sh$request_uri; +} + +server { + listen 443 ssl; + listen [::]:443 ssl; + http2 on; + server_name ld.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_strict.conf; + + return 301 https://ld.zerolabs.sh$request_uri; +} @@ -2,7 +2,7 @@ server { listen [::]:443 ssl; listen 443 ssl; http2 on; - server_name lt.cleberg.net nxw6545qeepw2s2kngowsxbcizjcxyimn7dq2bpvr3sqabsu2juj6gyd.onion; + server_name lt.zerolabs.sh nxw6545qeepw2s2kngowsxbcizjcxyimn7dq2bpvr3sqabsu2juj6gyd.onion; add_header Onion-Location "http://nxw6545qeepw2s2kngowsxbcizjcxyimn7dq2bpvr3sqabsu2juj6gyd.onion$request_uri" always; include custom.d/tls/ssl_engine.conf; include custom.d/tls/certificate_files.conf; @@ -14,4 +14,24 @@ server { include custom.d/reverse_proxy/basic.conf; } include custom.d/security/robots_index_only.conf; -} \ No newline at end of file +} + +server { + listen 80; + listen [::]:80; + server_name lt.cleberg.net; + return 301 https://lt.zerolabs.sh$request_uri; +} + +server { + listen 443 ssl; + listen [::]:443 ssl; + http2 on; + server_name lt.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_strict.conf; + + return 301 https://lt.zerolabs.sh$request_uri; +} @@ -2,7 +2,7 @@ server { listen [::]:443 ssl; listen 443 ssl; http2 on; - server_name mz.cleberg.net ltawlmsk6vhrig2awwshnduiv45anelx3thepkd6xh4n2s4jxu7wyrid.onion; + server_name mz.zerolabs.sh ltawlmsk6vhrig2awwshnduiv45anelx3thepkd6xh4n2s4jxu7wyrid.onion; add_header Onion-Location "http://ltawlmsk6vhrig2awwshnduiv45anelx3thepkd6xh4n2s4jxu7wyrid.onion$request_uri" always; include custom.d/tls/ssl_engine.conf; include custom.d/tls/certificate_files.conf; @@ -14,4 +14,24 @@ server { include custom.d/reverse_proxy/basic.conf; } include custom.d/security/robots_index_only.conf; -} \ No newline at end of file +} + +server { + listen 80; + listen [::]:80; + server_name mz.cleberg.net; + return 301 https://mz.zerolabs.sh$request_uri; +} + +server { + listen 443 ssl; + listen [::]:443 ssl; + http2 on; + server_name mz.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_strict.conf; + + return 301 https://mz.zerolabs.sh$request_uri; +} @@ -2,7 +2,7 @@ server { listen [::]:443 ssl; listen 443 ssl; http2 on; - server_name office.cleberg.net; + server_name office.zerolabs.sh; add_header Onion-Location "http://uwtjz6pof52bzdkj242mub77ls2ji3qiznbsuoir235rxynqxadpghid.onion$request_uri" always; root /var/www/office/; include custom.d/tls/ssl_engine.conf; @@ -18,3 +18,23 @@ server { root /var/www/office/; location / { try_files $uri $uri/ /index.html; } } + +server { + listen 80; + listen [::]:80; + server_name office.cleberg.net; + return 301 https://office.zerolabs.sh$request_uri; +} + +server { + listen 443 ssl; + listen [::]:443 ssl; + http2 on; + server_name office.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_strict.conf; + + return 301 https://office.zerolabs.sh$request_uri; +} @@ -2,7 +2,7 @@ server { listen [::]:443 ssl; listen 443 ssl; http2 on; - server_name org.cleberg.net; + server_name org.zerolabs.sh; add_header Onion-Location "http://7vsifofpucgi3wva52nbwhwglrmbyxgdapbkkmgniqlsskspux5zocyd.onion$request_uri" always; root /var/www/org/; include custom.d/tls/ssl_engine.conf; @@ -18,3 +18,23 @@ server { root /var/www/org/; location / { try_files $uri $uri/ /index.html; } } + +server { + listen 80; + listen [::]:80; + server_name org.cleberg.net; + return 301 https://org.zerolabs.sh$request_uri; +} + +server { + listen 443 ssl; + listen [::]:443 ssl; + http2 on; + server_name org.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_strict.conf; + + return 301 https://org.zerolabs.sh$request_uri; +} @@ -2,7 +2,7 @@ server { listen [::]:443 ssl; listen 443 ssl; http2 on; - server_name paste.cleberg.net ciserod7fbncypo762qcqtowldl3qjhlojfnmguiuvcj3rcyrhqs6ead.onion; + server_name paste.zerolabs.sh ciserod7fbncypo762qcqtowldl3qjhlojfnmguiuvcj3rcyrhqs6ead.onion; add_header Onion-Location "http://ciserod7fbncypo762qcqtowldl3qjhlojfnmguiuvcj3rcyrhqs6ead.onion$request_uri" always; include custom.d/tls/ssl_engine.conf; include custom.d/tls/certificate_files.conf; @@ -14,4 +14,24 @@ server { include custom.d/reverse_proxy/basic.conf; } include custom.d/security/robots_index_only.conf; -} \ No newline at end of file +} + +server { + listen 80; + listen [::]:80; + server_name paste.cleberg.net; + return 301 https://paste.zerolabs.sh$request_uri; +} + +server { + listen 443 ssl; + listen [::]:443 ssl; + http2 on; + server_name paste.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_strict.conf; + + return 301 https://paste.zerolabs.sh$request_uri; +} @@ -2,7 +2,7 @@ server { listen [::]:443 ssl; listen 443 ssl; http2 on; - server_name pb.cleberg.net; + server_name pb.zerolabs.sh; error_log /var/log/nginx/pb.log; @@ -19,3 +19,23 @@ server { } include custom.d/security/robots_index_only.conf; } + +server { + listen 80; + listen [::]:80; + server_name pb.cleberg.net; + return 301 https://pb.zerolabs.sh$request_uri; +} + +server { + listen 443 ssl; + listen [::]:443 ssl; + http2 on; + server_name pb.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_strict.conf; + + return 301 https://pb.zerolabs.sh$request_uri; +} @@ -2,7 +2,7 @@ server { listen [::]:443 ssl; listen 443 ssl; http2 on; - server_name photos.cleberg.net; + server_name photos.zerolabs.sh; include custom.d/tls/ssl_engine.conf; include custom.d/tls/certificate_files.conf; include custom.d/tls/policy_strict.conf; @@ -20,4 +20,24 @@ server { proxy_send_timeout 600s; send_timeout 600s; location / { proxy_pass http://127.0.0.1:2283; } -} \ No newline at end of file +} + +server { + listen 80; + listen [::]:80; + server_name photos.cleberg.net; + return 301 https://photos.zerolabs.sh$request_uri; +} + +server { + listen 443 ssl; + listen [::]:443 ssl; + http2 on; + server_name photos.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_strict.conf; + + return 301 https://photos.zerolabs.sh$request_uri; +} @@ -2,7 +2,7 @@ server { listen [::]:443 ssl; listen 443 ssl; http2 on; - server_name pin.cleberg.net 3rtmxu6slammicquf5cpgiptjpzht3n342vh62utoyxchds5r76tadad.onion; + server_name pin.zerolabs.sh 3rtmxu6slammicquf5cpgiptjpzht3n342vh62utoyxchds5r76tadad.onion; add_header Onion-Location "http://3rtmxu6slammicquf5cpgiptjpzht3n342vh62utoyxchds5r76tadad.onion$request_uri" always; include custom.d/tls/ssl_engine.conf; include custom.d/tls/certificate_files.conf; @@ -15,3 +15,23 @@ server { } include custom.d/security/robots_index_only.conf; } + +server { + listen 80; + listen [::]:80; + server_name pin.cleberg.net; + return 301 https://pin.zerolabs.sh$request_uri; +} + +server { + listen 443 ssl; + listen [::]:443 ssl; + http2 on; + server_name pin.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_strict.conf; + + return 301 https://pin.zerolabs.sh$request_uri; +} @@ -2,7 +2,7 @@ server { listen [::]:443 ssl; listen 443 ssl; http2 on; - server_name piped.cleberg.net pipedapi.cleberg.net pipedproxy.cleberg.net 5ttqjwhhcxh7apxrge5b5cjqceiibrjlqv2hhtmukwfsitbzqk5hh4id.onion; + server_name piped.zerolabs.sh pipedapi.zerolabs.sh pipedproxy.zerolabs.sh 5ttqjwhhcxh7apxrge5b5cjqceiibrjlqv2hhtmukwfsitbzqk5hh4id.onion; add_header Onion-Location "http://5ttqjwhhcxh7apxrge5b5cjqceiibrjlqv2hhtmukwfsitbzqk5hh4id.onion$request_uri" always; include custom.d/tls/ssl_engine.conf; include custom.d/tls/certificate_files.conf; @@ -14,4 +14,24 @@ server { proxy_set_header Host $host; } include custom.d/security/robots_index_only.conf; -} \ No newline at end of file +} + +server { + listen 80; + listen [::]:80; + server_name pipedapi.cleberg.net; + return 301 https://pipedapi.zerolabs.sh$request_uri; +} + +server { + listen 443 ssl; + listen [::]:443 ssl; + http2 on; + server_name pipedapi.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_strict.conf; + + return 301 https://pipedapi.zerolabs.sh$request_uri; +} @@ -2,7 +2,7 @@ server { listen [::]:443 ssl; listen 443 ssl; http2 on; - server_name projects.cleberg.net; + server_name projects.zerolabs.sh; add_header Onion-Location "http://krednuajd2wpt67ozmkollddpbdphpeyh74hbenagzoxqjncrtrgxkid.onion$request_uri" always; root /var/www/projects/; autoindex on; @@ -21,3 +21,23 @@ server { autoindex on; location / { try_files $uri $uri/ /index.html; } } + +server { + listen 80; + listen [::]:80; + server_name projects.cleberg.net; + return 301 https://projects.zerolabs.sh$request_uri; +} + +server { + listen 443 ssl; + listen [::]:443 ssl; + http2 on; + server_name projects.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_strict.conf; + + return 301 https://projects.zerolabs.sh$request_uri; +} @@ -2,7 +2,7 @@ server { listen [::]:443 ssl; listen 443 ssl; http2 on; - server_name rd.cleberg.net voyxxivcoupelvedthpbjqsrdhkn4ty7qjurvsif4qbjejnldisqs5ad.onion; + server_name rd.zerolabs.sh voyxxivcoupelvedthpbjqsrdhkn4ty7qjurvsif4qbjejnldisqs5ad.onion; add_header Onion-Location "http://voyxxivcoupelvedthpbjqsrdhkn4ty7qjurvsif4qbjejnldisqs5ad.onion$request_uri" always; include custom.d/tls/ssl_engine.conf; include custom.d/tls/certificate_files.conf; @@ -15,3 +15,23 @@ server { } include custom.d/security/robots_index_only.conf; } + +server { + listen 80; + listen [::]:80; + server_name rd.cleberg.net; + return 301 https://rd.zerolabs.sh$request_uri; +} + +server { + listen 443 ssl; + listen [::]:443 ssl; + http2 on; + server_name rd.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_strict.conf; + + return 301 https://rd.zerolabs.sh$request_uri; +} @@ -2,7 +2,7 @@ server { listen [::]:443 ssl; listen 443 ssl; http2 on; - server_name rimgo.cleberg.net hcj62a4s6ok23oaa4xjnnvabj2aunod3464iuufh2wtehg2th3rwn3yd.onion; + server_name rimgo.zerolabs.sh hcj62a4s6ok23oaa4xjnnvabj2aunod3464iuufh2wtehg2th3rwn3yd.onion; add_header Onion-Location "http://hcj62a4s6ok23oaa4xjnnvabj2aunod3464iuufh2wtehg2th3rwn3yd.onion$request_uri" always; include custom.d/tls/ssl_engine.conf; include custom.d/tls/certificate_files.conf; @@ -15,3 +15,23 @@ server { } include custom.d/security/robots_index_only.conf; } + +server { + listen 80; + listen [::]:80; + server_name rimgo.cleberg.net; + return 301 https://rimgo.zerolabs.sh$request_uri; +} + +server { + listen 443 ssl; + listen [::]:443 ssl; + http2 on; + server_name rimgo.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_strict.conf; + + return 301 https://rimgo.zerolabs.sh$request_uri; +} @@ -2,7 +2,7 @@ server { listen [::]:443 ssl; listen 443 ssl; http2 on; - server_name rl.cleberg.net s5wpjol4xe2mszhz4hoqobv4pqmoihb65dz2lbibujjjvhbpjvu45lad.onion; + server_name rl.zerolabs.sh s5wpjol4xe2mszhz4hoqobv4pqmoihb65dz2lbibujjjvhbpjvu45lad.onion; add_header Onion-Location "http://s5wpjol4xe2mszhz4hoqobv4pqmoihb65dz2lbibujjjvhbpjvu45lad.onion$request_uri" always; include custom.d/tls/ssl_engine.conf; include custom.d/tls/certificate_files.conf; @@ -17,3 +17,23 @@ server { } include custom.d/security/robots_index_only.conf; } + +server { + listen 80; + listen [::]:80; + server_name rl.cleberg.net; + return 301 https://rl.zerolabs.sh$request_uri; +} + +server { + listen 443 ssl; + listen [::]:443 ssl; + http2 on; + server_name rl.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_strict.conf; + + return 301 https://rl.zerolabs.sh$request_uri; +} @@ -3,7 +3,7 @@ server { listen [::]:443 ssl; listen 443 ssl; http2 on; - server_name rss.cleberg.net; + server_name rss.zerolabs.sh; include custom.d/tls/ssl_engine.conf; include custom.d/tls/certificate_files.conf; include custom.d/tls/policy_strict.conf; @@ -24,3 +24,23 @@ server { } include custom.d/security/robots_index_only.conf; } + +server { + listen 80; + listen [::]:80; + server_name rss.cleberg.net; + return 301 https://rss.zerolabs.sh$request_uri; +} + +server { + listen 443 ssl; + listen [::]:443 ssl; + http2 on; + server_name rss.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_strict.conf; + + return 301 https://rss.zerolabs.sh$request_uri; +} @@ -2,7 +2,7 @@ server { listen [::]:443 ssl; listen 443 ssl; http2 on; - server_name search.cleberg.net txwk667ks3vh76r2mfqiot2wdptentsne64nu6qam63zbpzbmhtkvnid.onion; + server_name search.zerolabs.sh txwk667ks3vh76r2mfqiot2wdptentsne64nu6qam63zbpzbmhtkvnid.onion; add_header Onion-Location "http://txwk667ks3vh76r2mfqiot2wdptentsne64nu6qam63zbpzbmhtkvnid.onion$request_uri" always; include custom.d/tls/ssl_engine.conf; include custom.d/tls/certificate_files.conf; @@ -19,3 +19,23 @@ server { } include custom.d/security/robots_index_only.conf; } + +server { + listen 80; + listen [::]:80; + server_name search.cleberg.net; + return 301 https://search.zerolabs.sh$request_uri; +} + +server { + listen 443 ssl; + listen [::]:443 ssl; + http2 on; + server_name search.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_strict.conf; + + return 301 https://search.zerolabs.sh$request_uri; +} @@ -2,7 +2,7 @@ server { listen [::]:443 ssl; listen 443 ssl; http2 on; - server_name send.cleberg.net 6jcf5qh2yg4axi42nbbcijglvoag74z7oq7xikqueebeb5vykj22miqd.onion; + server_name send.zerolabs.sh 6jcf5qh2yg4axi42nbbcijglvoag74z7oq7xikqueebeb5vykj22miqd.onion; add_header Onion-Location "http://6jcf5qh2yg4axi42nbbcijglvoag74z7oq7xikqueebeb5vykj22miqd.onion$request_uri" always; include custom.d/tls/ssl_engine.conf; include custom.d/tls/certificate_files.conf; @@ -15,3 +15,23 @@ server { } include custom.d/security/robots_index_only.conf; } + +server { + listen 80; + listen [::]:80; + server_name send.cleberg.net; + return 301 https://send.zerolabs.sh$request_uri; +} + +server { + listen 443 ssl; + listen [::]:443 ssl; + http2 on; + server_name send.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_strict.conf; + + return 301 https://send.zerolabs.sh$request_uri; +} @@ -2,7 +2,7 @@ server { listen [::]:443 ssl; listen 443 ssl; http2 on; - server_name slash.cleberg.net svfj2zs33g572utlou6kx7uamhwen4nxdzvfetnhwjqs4mmdgoayc7qd.onion; + server_name slash.zerolabs.sh svfj2zs33g572utlou6kx7uamhwen4nxdzvfetnhwjqs4mmdgoayc7qd.onion; add_header Onion-Location "http://svfj2zs33g572utlou6kx7uamhwen4nxdzvfetnhwjqs4mmdgoayc7qd.onion$request_uri" always; include custom.d/tls/ssl_engine.conf; include custom.d/tls/certificate_files.conf; @@ -15,3 +15,23 @@ server { } include custom.d/security/robots_index_only.conf; } + +server { + listen 80; + listen [::]:80; + server_name slash.cleberg.net; + return 301 https://slash.zerolabs.sh$request_uri; +} + +server { + listen 443 ssl; + listen [::]:443 ssl; + http2 on; + server_name slash.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_strict.conf; + + return 301 https://slash.zerolabs.sh$request_uri; +} @@ -2,7 +2,7 @@ server { listen [::]:443 ssl; listen 443 ssl; http2 on; - server_name small.cleberg.net w2qsrbzjmlikhwvbhno3qfdjod53iyzlvzjamcvgkcmtbclmdkqerbqd.onion; + server_name small.zerolabs.sh w2qsrbzjmlikhwvbhno3qfdjod53iyzlvzjamcvgkcmtbclmdkqerbqd.onion; add_header Onion-Location "http://w2qsrbzjmlikhwvbhno3qfdjod53iyzlvzjamcvgkcmtbclmdkqerbqd.onion$request_uri" always; include custom.d/tls/ssl_engine.conf; include custom.d/tls/certificate_files.conf; @@ -14,4 +14,24 @@ server { include custom.d/reverse_proxy/basic.conf; } include custom.d/security/robots_index_only.conf; -} \ No newline at end of file +} + +server { + listen 80; + listen [::]:80; + server_name small.cleberg.net; + return 301 https://small.zerolabs.sh$request_uri; +} + +server { + listen 443 ssl; + listen [::]:443 ssl; + http2 on; + server_name small.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_strict.conf; + + return 301 https://small.zerolabs.sh$request_uri; +} @@ -2,7 +2,7 @@ server { listen [::]:443 ssl; listen 443 ssl; http2 on; - server_name ssh.cleberg.net; + server_name ssh.zerolabs.sh; include custom.d/tls/ssl_engine.conf; include custom.d/tls/certificate_files.conf; include custom.d/tls/policy_strict.conf; @@ -15,4 +15,24 @@ server { include custom.d/reverse_proxy/basic.conf; } include custom.d/security/robots_index_only.conf; -} \ No newline at end of file +} + +server { + listen 80; + listen [::]:80; + server_name ssh.cleberg.net; + return 301 https://ssh.zerolabs.sh$request_uri; +} + +server { + listen 443 ssl; + listen [::]:443 ssl; + http2 on; + server_name ssh.cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_strict.conf; + + return 301 https://ssh.zerolabs.sh$request_uri; +} new file mode 100644 @@ -0,0 +1,35 @@ +server { + listen [::]:443 ssl; + listen 443 ssl; + http2 on; + server_name www.zerolabs.sh; + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/policy_strict.conf; + ssl_certificate /etc/letsencrypt/live/zerolabs.sh/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/zerolabs.sh/privkey.pem; + ssl_trusted_certificate /etc/letsencrypt/live/zerolabs.sh/chain.pem; + return 301 $scheme://zerolabs.sh$request_uri; +} + + +server { + listen [::]:443 ssl; + listen 443 ssl; + http2 on; + server_name zerolabs.sh; + root /var/www/zerolabs.sh/; + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/policy_strict.conf; + include custom.d/basic.conf; + ssl_certificate /etc/letsencrypt/live/zerolabs.sh/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/zerolabs.sh/privkey.pem; + ssl_trusted_certificate /etc/letsencrypt/live/zerolabs.sh/chain.pem; + location / { try_files $uri $uri/ =404; } +} + +server { + listen [::]:80; + listen 80; + server_name www.zerolabs.sh zerolabs.sh; + return 301 https://zerolabs.sh$request_uri; +} @@ -7,4 +7,4 @@ proxy_set_header Remote-User $user; proxy_set_header Remote-Email $email; proxy_set_header Remote-Groups $groups; -error_page 401 =302 https://auth.cleberg.net/?rd=$target_url; +error_page 401 =302 https://auth.zerolabs.sh/?rd=$target_url;