Commit f4318a3e39
f4318a3e399d60ef93e9fe08d50aa3fa44794730
parent: 2ccdcfbbd7
Verified · cmc
cmc <hello@cleberg.net> · 2026-03-04 06:14 UTC
update nginx with security fixes
Layout: unified · split
linux/nginx/etc/nginx/conf.d/ao.conf
+1 −1
| @@ -5,7 +5,7 @@ server { |
| 5 | server_name ao.cleberg.net; |
5 | server_name ao.cleberg.net; |
| 6 | include custom.d/tls/ssl_engine.conf; |
6 | include custom.d/tls/ssl_engine.conf; |
| 7 | include custom.d/tls/certificate_files.conf; |
7 | include custom.d/tls/certificate_files.conf; |
| 8 | include custom.d/tls/policy_balanced.conf; |
8 | include custom.d/tls/policy_strict.conf; |
| 9 | include custom.d/basic.conf; |
9 | include custom.d/basic.conf; |
| 10 | location / { |
10 | location / { |
| 11 | set $upstream http://127.0.0.1:9380; |
11 | set $upstream http://127.0.0.1:9380; |
linux/nginx/etc/nginx/conf.d/art.conf
+1 −1
| @@ -5,7 +5,7 @@ server { |
| 5 | server_name art.cleberg.net; |
5 | server_name art.cleberg.net; |
| 6 | include custom.d/tls/ssl_engine.conf; |
6 | include custom.d/tls/ssl_engine.conf; |
| 7 | include custom.d/tls/certificate_files.conf; |
7 | include custom.d/tls/certificate_files.conf; |
| 8 | include custom.d/tls/policy_balanced.conf; |
8 | include custom.d/tls/policy_strict.conf; |
| 9 | include custom.d/basic.conf; |
9 | include custom.d/basic.conf; |
| 10 | location / { |
10 | location / { |
| 11 | set $upstream http://127.0.0.1:3003; |
11 | set $upstream http://127.0.0.1:3003; |
linux/nginx/etc/nginx/conf.d/auth.conf
+1 −1
| @@ -5,7 +5,7 @@ server { |
| 5 | server_name auth.cleberg.net; |
5 | server_name auth.cleberg.net; |
| 6 | include custom.d/tls/ssl_engine.conf; |
6 | include custom.d/tls/ssl_engine.conf; |
| 7 | include custom.d/tls/certificate_files.conf; |
7 | include custom.d/tls/certificate_files.conf; |
| 8 | include custom.d/tls/policy_balanced.conf; |
8 | include custom.d/tls/policy_strict.conf; |
| 9 | include custom.d/basic.conf; |
9 | include custom.d/basic.conf; |
| 10 | set $upstream http://127.0.0.1:9092; |
10 | set $upstream http://127.0.0.1:9092; |
| 11 | location / { |
11 | location / { |
linux/nginx/etc/nginx/conf.d/br.conf
+1 −1
| @@ -5,7 +5,7 @@ server { |
| 5 | server_name br.cleberg.net; |
5 | server_name br.cleberg.net; |
| 6 | include custom.d/tls/ssl_engine.conf; |
6 | include custom.d/tls/ssl_engine.conf; |
| 7 | include custom.d/tls/certificate_files.conf; |
7 | include custom.d/tls/certificate_files.conf; |
| 8 | include custom.d/tls/policy_balanced.conf; |
8 | include custom.d/tls/policy_strict.conf; |
| 9 | include custom.d/basic.conf; |
9 | include custom.d/basic.conf; |
| 10 | location / { |
10 | location / { |
| 11 | set $upstream http://127.0.0.1:3030; |
11 | set $upstream http://127.0.0.1:3030; |
linux/nginx/etc/nginx/conf.d/bt.conf
+1 −1
| @@ -5,7 +5,7 @@ server { |
| 5 | server_name bt.cleberg.net; |
5 | server_name bt.cleberg.net; |
| 6 | include custom.d/tls/ssl_engine.conf; |
6 | include custom.d/tls/ssl_engine.conf; |
| 7 | include custom.d/tls/certificate_files.conf; |
7 | include custom.d/tls/certificate_files.conf; |
| 8 | include custom.d/tls/policy_balanced.conf; |
8 | include custom.d/tls/policy_strict.conf; |
| 9 | include custom.d/basic.conf; |
9 | include custom.d/basic.conf; |
| 10 | set $upstream http://127.0.0.1:9091; |
10 | set $upstream http://127.0.0.1:9091; |
| 11 | location /authelia { include custom.d/reverse_proxy/authelia.conf; } |
11 | location /authelia { include custom.d/reverse_proxy/authelia.conf; } |
linux/nginx/etc/nginx/conf.d/bw.conf
+1 −1
| @@ -5,7 +5,7 @@ server { |
| 5 | server_name bw.cleberg.net; |
5 | server_name bw.cleberg.net; |
| 6 | include custom.d/tls/ssl_engine.conf; |
6 | include custom.d/tls/ssl_engine.conf; |
| 7 | include custom.d/tls/certificate_files.conf; |
7 | include custom.d/tls/certificate_files.conf; |
| 8 | include custom.d/tls/policy_balanced.conf; |
8 | include custom.d/tls/policy_strict.conf; |
| 9 | include custom.d/basic.conf; |
9 | include custom.d/basic.conf; |
| 10 | location / { |
10 | location / { |
| 11 | set $upstream http://127.0.0.1:10416; |
11 | set $upstream http://127.0.0.1:10416; |
linux/nginx/etc/nginx/conf.d/cc.conf
+1 −1
| @@ -5,7 +5,7 @@ server { |
| 5 | server_name cc.cleberg.net; |
5 | server_name cc.cleberg.net; |
| 6 | include custom.d/tls/ssl_engine.conf; |
6 | include custom.d/tls/ssl_engine.conf; |
| 7 | include custom.d/tls/certificate_files.conf; |
7 | include custom.d/tls/certificate_files.conf; |
| 8 | include custom.d/tls/policy_balanced.conf; |
8 | include custom.d/tls/policy_strict.conf; |
| 9 | include custom.d/basic.conf; |
9 | include custom.d/basic.conf; |
| 10 | location / { |
10 | location / { |
| 11 | set $upstream http://127.0.0.1:8111; |
11 | set $upstream http://127.0.0.1:8111; |
linux/nginx/etc/nginx/conf.d/cleberg.io.conf
+1 −1
| @@ -4,7 +4,7 @@ server { |
| 4 | http2 on; |
4 | http2 on; |
| 5 | server_name cleberg.io; |
5 | server_name cleberg.io; |
| 6 | include custom.d/tls/ssl_engine.conf; |
6 | include custom.d/tls/ssl_engine.conf; |
| 7 | include custom.d/tls/policy_balanced.conf; |
7 | include custom.d/tls/policy_strict.conf; |
| 8 | include custom.d/basic.conf; |
8 | include custom.d/basic.conf; |
| 9 | ssl_certificate /etc/letsencrypt/live/cleberg.io/fullchain.pem; |
9 | ssl_certificate /etc/letsencrypt/live/cleberg.io/fullchain.pem; |
| 10 | ssl_certificate_key /etc/letsencrypt/live/cleberg.io/privkey.pem; |
10 | ssl_certificate_key /etc/letsencrypt/live/cleberg.io/privkey.pem; |
linux/nginx/etc/nginx/conf.d/cleberg.net.conf
+2 −2
| @@ -5,7 +5,7 @@ server { |
| 5 | server_name www.cleberg.net; |
5 | server_name www.cleberg.net; |
| 6 | include custom.d/tls/ssl_engine.conf; |
6 | include custom.d/tls/ssl_engine.conf; |
| 7 | include custom.d/tls/certificate_files.conf; |
7 | include custom.d/tls/certificate_files.conf; |
| 8 | include custom.d/tls/policy_balanced.conf; |
8 | include custom.d/tls/policy_strict.conf; |
| 9 | return 301 $scheme://cleberg.net$request_uri; |
9 | return 301 $scheme://cleberg.net$request_uri; |
| 10 | } |
10 | } |
| 11 | |
11 | |
| @@ -16,7 +16,7 @@ server { |
| 16 | server_name cleberg.net; |
16 | server_name cleberg.net; |
| 17 | include custom.d/tls/ssl_engine.conf; |
17 | include custom.d/tls/ssl_engine.conf; |
| 18 | include custom.d/tls/certificate_files.conf; |
18 | include custom.d/tls/certificate_files.conf; |
| 19 | include custom.d/tls/policy_balanced.conf; |
19 | include custom.d/tls/policy_strict.conf; |
| 20 | include custom.d/basic.conf; |
20 | include custom.d/basic.conf; |
| 21 | root /var/www/cleberg.net/; |
21 | root /var/www/cleberg.net/; |
| 22 | |
22 | |
linux/nginx/etc/nginx/conf.d/cv.conf
+1 −1
| @@ -5,7 +5,7 @@ server { |
| 5 | server_name cv.cleberg.net; |
5 | server_name cv.cleberg.net; |
| 6 | include custom.d/tls/ssl_engine.conf; |
6 | include custom.d/tls/ssl_engine.conf; |
| 7 | include custom.d/tls/certificate_files.conf; |
7 | include custom.d/tls/certificate_files.conf; |
| 8 | include custom.d/tls/policy_balanced.conf; |
8 | include custom.d/tls/policy_strict.conf; |
| 9 | include custom.d/basic.conf; |
9 | include custom.d/basic.conf; |
| 10 | root /var/www/cv/; |
10 | root /var/www/cv/; |
| 11 | autoindex on; |
11 | autoindex on; |
linux/nginx/etc/nginx/conf.d/ddns.conf
+1 −1
| @@ -5,7 +5,7 @@ server { |
| 5 | server_name ddns.cleberg.net; |
5 | server_name ddns.cleberg.net; |
| 6 | include custom.d/tls/ssl_engine.conf; |
6 | include custom.d/tls/ssl_engine.conf; |
| 7 | include custom.d/tls/certificate_files.conf; |
7 | include custom.d/tls/certificate_files.conf; |
| 8 | include custom.d/tls/policy_balanced.conf; |
8 | include custom.d/tls/policy_strict.conf; |
| 9 | include custom.d/basic.conf; |
9 | include custom.d/basic.conf; |
| 10 | location /authelia { include custom.d/reverse_proxy/authelia.conf; } |
10 | location /authelia { include custom.d/reverse_proxy/authelia.conf; } |
| 11 | location / { |
11 | location / { |
linux/nginx/etc/nginx/conf.d/default.conf
+1 −1
| @@ -5,7 +5,7 @@ server { |
| 5 | server_name _; |
5 | server_name _; |
| 6 | include custom.d/tls/ssl_engine.conf; |
6 | include custom.d/tls/ssl_engine.conf; |
| 7 | include custom.d/tls/certificate_files.conf; |
7 | include custom.d/tls/certificate_files.conf; |
| 8 | include custom.d/tls/policy_balanced.conf; |
8 | include custom.d/tls/policy_strict.conf; |
| 9 | return 444; |
9 | return 444; |
| 10 | } |
10 | } |
| 11 | |
11 | |
linux/nginx/etc/nginx/conf.d/docker.conf
+1 −1
| @@ -5,7 +5,7 @@ server { |
| 5 | server_name docker.cleberg.net; |
5 | server_name docker.cleberg.net; |
| 6 | include custom.d/tls/ssl_engine.conf; |
6 | include custom.d/tls/ssl_engine.conf; |
| 7 | include custom.d/tls/certificate_files.conf; |
7 | include custom.d/tls/certificate_files.conf; |
| 8 | include custom.d/tls/policy_balanced.conf; |
8 | include custom.d/tls/policy_strict.conf; |
| 9 | include custom.d/basic.conf; |
9 | include custom.d/basic.conf; |
| 10 | location /authelia { include custom.d/reverse_proxy/authelia.conf; } |
10 | location /authelia { include custom.d/reverse_proxy/authelia.conf; } |
| 11 | location / { |
11 | location / { |
linux/nginx/etc/nginx/conf.d/files.conf
+1 −1
| @@ -5,7 +5,7 @@ server { |
| 5 | server_name files.cleberg.net; |
5 | server_name files.cleberg.net; |
| 6 | include custom.d/tls/ssl_engine.conf; |
6 | include custom.d/tls/ssl_engine.conf; |
| 7 | include custom.d/tls/certificate_files.conf; |
7 | include custom.d/tls/certificate_files.conf; |
| 8 | include custom.d/tls/policy_balanced.conf; |
8 | include custom.d/tls/policy_strict.conf; |
| 9 | include custom.d/basic.conf; |
9 | include custom.d/basic.conf; |
| 10 | root /var/www/files/; |
10 | root /var/www/files/; |
| 11 | autoindex on; |
11 | autoindex on; |
linux/nginx/etc/nginx/conf.d/gh.conf
+1 −1
| @@ -5,7 +5,7 @@ server { |
| 5 | server_name gh.cleberg.net; |
5 | server_name gh.cleberg.net; |
| 6 | include custom.d/tls/ssl_engine.conf; |
6 | include custom.d/tls/ssl_engine.conf; |
| 7 | include custom.d/tls/certificate_files.conf; |
7 | include custom.d/tls/certificate_files.conf; |
| 8 | include custom.d/tls/policy_balanced.conf; |
8 | include custom.d/tls/policy_strict.conf; |
| 9 | include custom.d/basic.conf; |
9 | include custom.d/basic.conf; |
| 10 | location / { |
10 | location / { |
| 11 | set $upstream http://192.168.0.251:3039; |
11 | set $upstream http://192.168.0.251:3039; |
linux/nginx/etc/nginx/conf.d/ha.conf
+1 −1
| @@ -5,7 +5,7 @@ server { |
| 5 | server_name ha.cleberg.net; |
5 | server_name ha.cleberg.net; |
| 6 | include custom.d/tls/ssl_engine.conf; |
6 | include custom.d/tls/ssl_engine.conf; |
| 7 | include custom.d/tls/certificate_files.conf; |
7 | include custom.d/tls/certificate_files.conf; |
| 8 | include custom.d/tls/policy_balanced.conf; |
8 | include custom.d/tls/policy_strict.conf; |
| 9 | include custom.d/basic.conf; |
9 | include custom.d/basic.conf; |
| 10 | set $upstream http://192.168.0.214:8123; |
10 | set $upstream http://192.168.0.214:8123; |
| 11 | location / { |
11 | location / { |
linux/nginx/etc/nginx/conf.d/hat.conf
+1 −1
| @@ -5,7 +5,7 @@ server { |
| 5 | server_name hat.cleberg.net; |
5 | server_name hat.cleberg.net; |
| 6 | include custom.d/tls/ssl_engine.conf; |
6 | include custom.d/tls/ssl_engine.conf; |
| 7 | include custom.d/tls/certificate_files.conf; |
7 | include custom.d/tls/certificate_files.conf; |
| 8 | include custom.d/tls/policy_balanced.conf; |
8 | include custom.d/tls/policy_strict.conf; |
| 9 | include custom.d/basic.conf; |
9 | include custom.d/basic.conf; |
| 10 | location / { |
10 | location / { |
| 11 | set $upstream http://192.168.0.251:3991; |
11 | set $upstream http://192.168.0.251:3991; |
linux/nginx/etc/nginx/conf.d/hn.conf
+1 −1
| @@ -8,7 +8,7 @@ server { |
| 8 | add_header Onion-Location http://r3yfeffyj7ornpikojmw75u3sn2la7tqnmcmwgv2ov7if24sm5czqeid.onion; |
8 | add_header Onion-Location http://r3yfeffyj7ornpikojmw75u3sn2la7tqnmcmwgv2ov7if24sm5czqeid.onion; |
| 9 | include custom.d/tls/ssl_engine.conf; |
9 | include custom.d/tls/ssl_engine.conf; |
| 10 | include custom.d/tls/certificate_files.conf; |
10 | include custom.d/tls/certificate_files.conf; |
| 11 | include custom.d/tls/policy_balanced.conf; |
11 | include custom.d/tls/policy_strict.conf; |
| 12 | include custom.d/basic.conf; |
12 | include custom.d/basic.conf; |
| 13 | location / { try_files $uri $uri/ /index.html; } |
13 | location / { try_files $uri $uri/ /index.html; } |
| 14 | } |
14 | } |
linux/nginx/etc/nginx/conf.d/img.conf
+1 −1
| @@ -5,7 +5,7 @@ server { |
| 5 | server_name img.cleberg.net; |
5 | server_name img.cleberg.net; |
| 6 | include custom.d/tls/ssl_engine.conf; |
6 | include custom.d/tls/ssl_engine.conf; |
| 7 | include custom.d/tls/certificate_files.conf; |
7 | include custom.d/tls/certificate_files.conf; |
| 8 | include custom.d/tls/policy_balanced.conf; |
8 | include custom.d/tls/policy_strict.conf; |
| 9 | include custom.d/basic.conf; |
9 | include custom.d/basic.conf; |
| 10 | root /var/www/img/; |
10 | root /var/www/img/; |
| 11 | autoindex on; |
11 | autoindex on; |
linux/nginx/etc/nginx/conf.d/irc.conf
+1 −1
| @@ -5,7 +5,7 @@ server { |
| 5 | server_name irc.cleberg.net; |
5 | server_name irc.cleberg.net; |
| 6 | include custom.d/tls/ssl_engine.conf; |
6 | include custom.d/tls/ssl_engine.conf; |
| 7 | include custom.d/tls/certificate_files.conf; |
7 | include custom.d/tls/certificate_files.conf; |
| 8 | include custom.d/tls/policy_balanced.conf; |
8 | include custom.d/tls/policy_strict.conf; |
| 9 | include custom.d/basic.conf; |
9 | include custom.d/basic.conf; |
| 10 | location /authelia { include custom.d/reverse_proxy/authelia.conf; } |
10 | location /authelia { include custom.d/reverse_proxy/authelia.conf; } |
| 11 | location / { |
11 | location / { |
linux/nginx/etc/nginx/conf.d/ld.conf
+1 −1
| @@ -5,7 +5,7 @@ server { |
| 5 | server_name ld.cleberg.net; |
5 | server_name ld.cleberg.net; |
| 6 | include custom.d/tls/ssl_engine.conf; |
6 | include custom.d/tls/ssl_engine.conf; |
| 7 | include custom.d/tls/certificate_files.conf; |
7 | include custom.d/tls/certificate_files.conf; |
| 8 | include custom.d/tls/policy_balanced.conf; |
8 | include custom.d/tls/policy_strict.conf; |
| 9 | include custom.d/basic.conf; |
9 | include custom.d/basic.conf; |
| 10 | location / { |
10 | location / { |
| 11 | set $upstream http://127.0.0.1:3004; |
11 | set $upstream http://127.0.0.1:3004; |
linux/nginx/etc/nginx/conf.d/lemmy.conf
+1 −1
| @@ -5,7 +5,7 @@ server { |
| 5 | server_name lemmy.cleberg.net; |
5 | server_name lemmy.cleberg.net; |
| 6 | include custom.d/tls/ssl_engine.conf; |
6 | include custom.d/tls/ssl_engine.conf; |
| 7 | include custom.d/tls/certificate_files.conf; |
7 | include custom.d/tls/certificate_files.conf; |
| 8 | include custom.d/tls/policy_balanced.conf; |
8 | include custom.d/tls/policy_strict.conf; |
| 9 | include custom.d/basic.conf; |
9 | include custom.d/basic.conf; |
| 10 | location / { |
10 | location / { |
| 11 | set $upstream http://127.0.0.1:10633; |
11 | set $upstream http://127.0.0.1:10633; |
linux/nginx/etc/nginx/conf.d/lt.conf
+1 −1
| @@ -5,7 +5,7 @@ server { |
| 5 | server_name lt.cleberg.net; |
5 | server_name lt.cleberg.net; |
| 6 | include custom.d/tls/ssl_engine.conf; |
6 | include custom.d/tls/ssl_engine.conf; |
| 7 | include custom.d/tls/certificate_files.conf; |
7 | include custom.d/tls/certificate_files.conf; |
| 8 | include custom.d/tls/policy_balanced.conf; |
8 | include custom.d/tls/policy_strict.conf; |
| 9 | include custom.d/basic.conf; |
9 | include custom.d/basic.conf; |
| 10 | location / { |
10 | location / { |
| 11 | set $upstream http://127.0.0.1:5000; |
11 | set $upstream http://127.0.0.1:5000; |
linux/nginx/etc/nginx/conf.d/michelangelo.conf
+1 −1
| @@ -4,7 +4,7 @@ server { |
| 4 | server_name michelangelo.cleberg.net; |
4 | server_name michelangelo.cleberg.net; |
| 5 | include custom.d/tls/ssl_engine.conf; |
5 | include custom.d/tls/ssl_engine.conf; |
| 6 | include custom.d/tls/certificate_files.conf; |
6 | include custom.d/tls/certificate_files.conf; |
| 7 | include custom.d/tls/policy_balanced.conf; |
7 | include custom.d/tls/policy_strict.conf; |
| 8 | include custom.d/basic.conf; |
8 | include custom.d/basic.conf; |
| 9 | |
9 | |
| 10 | location / { |
10 | location / { |
linux/nginx/etc/nginx/conf.d/mz.conf
+1 −1
| @@ -5,7 +5,7 @@ server { |
| 5 | server_name mz.cleberg.net; |
5 | server_name mz.cleberg.net; |
| 6 | include custom.d/tls/ssl_engine.conf; |
6 | include custom.d/tls/ssl_engine.conf; |
| 7 | include custom.d/tls/certificate_files.conf; |
7 | include custom.d/tls/certificate_files.conf; |
| 8 | include custom.d/tls/policy_balanced.conf; |
8 | include custom.d/tls/policy_strict.conf; |
| 9 | include custom.d/basic.conf; |
9 | include custom.d/basic.conf; |
| 10 | location / { |
10 | location / { |
| 11 | set $upstream http://127.0.0.1:3474; |
11 | set $upstream http://127.0.0.1:3474; |
linux/nginx/etc/nginx/conf.d/office.conf
+1 −1
| @@ -6,7 +6,7 @@ server { |
| 6 | root /var/www/office/; |
6 | root /var/www/office/; |
| 7 | include custom.d/tls/ssl_engine.conf; |
7 | include custom.d/tls/ssl_engine.conf; |
| 8 | include custom.d/tls/certificate_files.conf; |
8 | include custom.d/tls/certificate_files.conf; |
| 9 | include custom.d/tls/policy_balanced.conf; |
9 | include custom.d/tls/policy_strict.conf; |
| 10 | include custom.d/basic.conf; |
10 | include custom.d/basic.conf; |
| 11 | location / { try_files $uri $uri/ /index.html; } |
11 | location / { try_files $uri $uri/ /index.html; } |
| 12 | }\ No newline at end of file |
12 | }\ No newline at end of file |
linux/nginx/etc/nginx/conf.d/org.conf
+1 −1
| @@ -6,7 +6,7 @@ server { |
| 6 | root /var/www/org/; |
6 | root /var/www/org/; |
| 7 | include custom.d/tls/ssl_engine.conf; |
7 | include custom.d/tls/ssl_engine.conf; |
| 8 | include custom.d/tls/certificate_files.conf; |
8 | include custom.d/tls/certificate_files.conf; |
| 9 | include custom.d/tls/policy_balanced.conf; |
9 | include custom.d/tls/policy_strict.conf; |
| 10 | include custom.d/basic.conf; |
10 | include custom.d/basic.conf; |
| 11 | location / { try_files $uri $uri/ /index.html; } |
11 | location / { try_files $uri $uri/ /index.html; } |
| 12 | }\ No newline at end of file |
12 | }\ No newline at end of file |
linux/nginx/etc/nginx/conf.d/paste.conf
+1 −1
| @@ -5,7 +5,7 @@ server { |
| 5 | server_name paste.cleberg.net; |
5 | server_name paste.cleberg.net; |
| 6 | include custom.d/tls/ssl_engine.conf; |
6 | include custom.d/tls/ssl_engine.conf; |
| 7 | include custom.d/tls/certificate_files.conf; |
7 | include custom.d/tls/certificate_files.conf; |
| 8 | include custom.d/tls/policy_balanced.conf; |
8 | include custom.d/tls/policy_strict.conf; |
| 9 | include custom.d/basic.conf; |
9 | include custom.d/basic.conf; |
| 10 | location / { |
10 | location / { |
| 11 | set $upstream http://127.0.0.1:8084; |
11 | set $upstream http://127.0.0.1:8084; |
linux/nginx/etc/nginx/conf.d/pb.conf
+1 −1
| @@ -5,7 +5,7 @@ server { |
| 5 | server_name pb.cleberg.net; |
5 | server_name pb.cleberg.net; |
| 6 | include custom.d/tls/ssl_engine.conf; |
6 | include custom.d/tls/ssl_engine.conf; |
| 7 | include custom.d/tls/certificate_files.conf; |
7 | include custom.d/tls/certificate_files.conf; |
| 8 | include custom.d/tls/policy_balanced.conf; |
8 | include custom.d/tls/policy_strict.conf; |
| 9 | include custom.d/basic.conf; |
9 | include custom.d/basic.conf; |
| 10 | location / { |
10 | location / { |
| 11 | set $upstream http://127.0.0.1:8745; |
11 | set $upstream http://127.0.0.1:8745; |
linux/nginx/etc/nginx/conf.d/photos.conf
+1 −1
| @@ -5,7 +5,7 @@ server { |
| 5 | server_name photos.cleberg.net; |
5 | server_name photos.cleberg.net; |
| 6 | include custom.d/tls/ssl_engine.conf; |
6 | include custom.d/tls/ssl_engine.conf; |
| 7 | include custom.d/tls/certificate_files.conf; |
7 | include custom.d/tls/certificate_files.conf; |
| 8 | include custom.d/tls/policy_balanced.conf; |
8 | include custom.d/tls/policy_strict.conf; |
| 9 | include custom.d/basic.conf; |
9 | include custom.d/basic.conf; |
| 10 | client_max_body_size 50000M; |
10 | client_max_body_size 50000M; |
| 11 | proxy_set_header Host $host; |
11 | proxy_set_header Host $host; |
linux/nginx/etc/nginx/conf.d/pin.conf
+1 −1
| @@ -5,7 +5,7 @@ server { |
| 5 | server_name pin.cleberg.net; |
5 | server_name pin.cleberg.net; |
| 6 | include custom.d/tls/ssl_engine.conf; |
6 | include custom.d/tls/ssl_engine.conf; |
| 7 | include custom.d/tls/certificate_files.conf; |
7 | include custom.d/tls/certificate_files.conf; |
| 8 | include custom.d/tls/policy_balanced.conf; |
8 | include custom.d/tls/policy_strict.conf; |
| 9 | include custom.d/basic.conf; |
9 | include custom.d/basic.conf; |
| 10 | location / { |
10 | location / { |
| 11 | set $upstream http://127.0.0.1:8086; |
11 | set $upstream http://127.0.0.1:8086; |
linux/nginx/etc/nginx/conf.d/piped.conf
+1 −1
| @@ -5,7 +5,7 @@ server { |
| 5 | server_name piped.cleberg.net pipedapi.cleberg.net pipedproxy.cleberg.net; |
5 | server_name piped.cleberg.net pipedapi.cleberg.net pipedproxy.cleberg.net; |
| 6 | include custom.d/tls/ssl_engine.conf; |
6 | include custom.d/tls/ssl_engine.conf; |
| 7 | include custom.d/tls/certificate_files.conf; |
7 | include custom.d/tls/certificate_files.conf; |
| 8 | include custom.d/tls/policy_balanced.conf; |
8 | include custom.d/tls/policy_strict.conf; |
| 9 | include custom.d/basic.conf; |
9 | include custom.d/basic.conf; |
| 10 | location / { |
10 | location / { |
| 11 | set $upstream http://127.0.0.1:8077; |
11 | set $upstream http://127.0.0.1:8077; |
linux/nginx/etc/nginx/conf.d/projects.conf
+1 −1
| @@ -7,7 +7,7 @@ server { |
| 7 | autoindex on; |
7 | autoindex on; |
| 8 | include custom.d/tls/ssl_engine.conf; |
8 | include custom.d/tls/ssl_engine.conf; |
| 9 | include custom.d/tls/certificate_files.conf; |
9 | include custom.d/tls/certificate_files.conf; |
| 10 | include custom.d/tls/policy_balanced.conf; |
10 | include custom.d/tls/policy_strict.conf; |
| 11 | include custom.d/basic.conf; |
11 | include custom.d/basic.conf; |
| 12 | location / { try_files $uri $uri/ /index.html; } |
12 | location / { try_files $uri $uri/ /index.html; } |
| 13 | } |
13 | } |
linux/nginx/etc/nginx/conf.d/rd.conf
+1 −1
| @@ -5,7 +5,7 @@ server { |
| 5 | server_name rd.cleberg.net; |
5 | server_name rd.cleberg.net; |
| 6 | include custom.d/tls/ssl_engine.conf; |
6 | include custom.d/tls/ssl_engine.conf; |
| 7 | include custom.d/tls/certificate_files.conf; |
7 | include custom.d/tls/certificate_files.conf; |
| 8 | include custom.d/tls/policy_balanced.conf; |
8 | include custom.d/tls/policy_strict.conf; |
| 9 | include custom.d/basic.conf; |
9 | include custom.d/basic.conf; |
| 10 | location / { |
10 | location / { |
| 11 | set $upstream http://127.0.0.1:2944; |
11 | set $upstream http://127.0.0.1:2944; |
linux/nginx/etc/nginx/conf.d/reminiscecleberg.com.conf
+2 −2
| @@ -4,7 +4,7 @@ server { |
| 4 | http2 on; |
4 | http2 on; |
| 5 | server_name www.reminiscecleberg.com; |
5 | server_name www.reminiscecleberg.com; |
| 6 | include custom.d/tls/ssl_engine.conf; |
6 | include custom.d/tls/ssl_engine.conf; |
| 7 | include custom.d/tls/policy_balanced.conf; |
7 | include custom.d/tls/policy_strict.conf; |
| 8 | ssl_certificate /etc/letsencrypt/live/reminiscecleberg.com/fullchain.pem; |
8 | ssl_certificate /etc/letsencrypt/live/reminiscecleberg.com/fullchain.pem; |
| 9 | ssl_certificate_key /etc/letsencrypt/live/reminiscecleberg.com/privkey.pem; |
9 | ssl_certificate_key /etc/letsencrypt/live/reminiscecleberg.com/privkey.pem; |
| 10 | ssl_trusted_certificate /etc/letsencrypt/live/reminiscecleberg.com/chain.pem; |
10 | ssl_trusted_certificate /etc/letsencrypt/live/reminiscecleberg.com/chain.pem; |
| @@ -19,7 +19,7 @@ server { |
| 19 | server_name reminiscecleberg.com; |
19 | server_name reminiscecleberg.com; |
| 20 | root /var/www/reminiscecleberg.com/; |
20 | root /var/www/reminiscecleberg.com/; |
| 21 | include custom.d/tls/ssl_engine.conf; |
21 | include custom.d/tls/ssl_engine.conf; |
| 22 | include custom.d/tls/policy_balanced.conf; |
22 | include custom.d/tls/policy_strict.conf; |
| 23 | include custom.d/basic.conf; |
23 | include custom.d/basic.conf; |
| 24 | ssl_certificate /etc/letsencrypt/live/reminiscecleberg.com/fullchain.pem; |
24 | ssl_certificate /etc/letsencrypt/live/reminiscecleberg.com/fullchain.pem; |
| 25 | ssl_certificate_key /etc/letsencrypt/live/reminiscecleberg.com/privkey.pem; |
25 | ssl_certificate_key /etc/letsencrypt/live/reminiscecleberg.com/privkey.pem; |
linux/nginx/etc/nginx/conf.d/rimgo.conf
+1 −1
| @@ -5,7 +5,7 @@ server { |
| 5 | server_name rimgo.cleberg.net; |
5 | server_name rimgo.cleberg.net; |
| 6 | include custom.d/tls/ssl_engine.conf; |
6 | include custom.d/tls/ssl_engine.conf; |
| 7 | include custom.d/tls/certificate_files.conf; |
7 | include custom.d/tls/certificate_files.conf; |
| 8 | include custom.d/tls/policy_balanced.conf; |
8 | include custom.d/tls/policy_strict.conf; |
| 9 | include custom.d/basic.conf; |
9 | include custom.d/basic.conf; |
| 10 | location / { |
10 | location / { |
| 11 | set $upstream http://127.0.0.1:3869; |
11 | set $upstream http://127.0.0.1:3869; |
linux/nginx/etc/nginx/conf.d/rl.conf
+1 −1
| @@ -5,7 +5,7 @@ server { |
| 5 | server_name rl.cleberg.net; |
5 | server_name rl.cleberg.net; |
| 6 | include custom.d/tls/ssl_engine.conf; |
6 | include custom.d/tls/ssl_engine.conf; |
| 7 | include custom.d/tls/certificate_files.conf; |
7 | include custom.d/tls/certificate_files.conf; |
| 8 | include custom.d/tls/policy_balanced.conf; |
8 | include custom.d/tls/policy_strict.conf; |
| 9 | include custom.d/basic.conf; |
9 | include custom.d/basic.conf; |
| 10 | location /authelia { include custom.d/reverse_proxy/authelia.conf; } |
10 | location /authelia { include custom.d/reverse_proxy/authelia.conf; } |
| 11 | location / { |
11 | location / { |
linux/nginx/etc/nginx/conf.d/rss.conf
+1 −2
| @@ -6,12 +6,11 @@ server { |
| 6 | server_name rss.cleberg.net; |
6 | server_name rss.cleberg.net; |
| 7 | include custom.d/tls/ssl_engine.conf; |
7 | include custom.d/tls/ssl_engine.conf; |
| 8 | include custom.d/tls/certificate_files.conf; |
8 | include custom.d/tls/certificate_files.conf; |
| 9 | include custom.d/tls/policy_balanced.conf; |
9 | include custom.d/tls/policy_strict.conf; |
| 10 | include custom.d/basic.conf; |
10 | include custom.d/basic.conf; |
| 11 | location / { |
11 | location / { |
| 12 | proxy_pass http://freshrss/; |
12 | proxy_pass http://freshrss/; |
| 13 | add_header X-Frame-Options SAMEORIGIN; |
13 | add_header X-Frame-Options SAMEORIGIN; |
| 14 | add_header X-XSS-Protection "1; mode=block"; |
| |
| 15 | proxy_redirect off; |
14 | proxy_redirect off; |
| 16 | proxy_buffering off; |
15 | proxy_buffering off; |
| 17 | proxy_set_header Host $host; |
16 | proxy_set_header Host $host; |
linux/nginx/etc/nginx/conf.d/search.conf
+1 −1
| @@ -5,7 +5,7 @@ server { |
| 5 | server_name search.cleberg.net; |
5 | server_name search.cleberg.net; |
| 6 | include custom.d/tls/ssl_engine.conf; |
6 | include custom.d/tls/ssl_engine.conf; |
| 7 | include custom.d/tls/certificate_files.conf; |
7 | include custom.d/tls/certificate_files.conf; |
| 8 | include custom.d/tls/policy_balanced.conf; |
8 | include custom.d/tls/policy_strict.conf; |
| 9 | include custom.d/basic.conf; |
9 | include custom.d/basic.conf; |
| 10 | location / { |
10 | location / { |
| 11 | set $upstream http://127.0.0.1:9191; |
11 | set $upstream http://127.0.0.1:9191; |
linux/nginx/etc/nginx/conf.d/send.conf
+1 −1
| @@ -5,7 +5,7 @@ server { |
| 5 | server_name send.cleberg.net; |
5 | server_name send.cleberg.net; |
| 6 | include custom.d/tls/ssl_engine.conf; |
6 | include custom.d/tls/ssl_engine.conf; |
| 7 | include custom.d/tls/certificate_files.conf; |
7 | include custom.d/tls/certificate_files.conf; |
| 8 | include custom.d/tls/policy_balanced.conf; |
8 | include custom.d/tls/policy_strict.conf; |
| 9 | include custom.d/basic.conf; |
9 | include custom.d/basic.conf; |
| 10 | location / { |
10 | location / { |
| 11 | set $upstream http://192.168.0.251:1443; |
11 | set $upstream http://192.168.0.251:1443; |
linux/nginx/etc/nginx/conf.d/slash.conf
+1 −1
| @@ -5,7 +5,7 @@ server { |
| 5 | server_name slash.cleberg.net; |
5 | server_name slash.cleberg.net; |
| 6 | include custom.d/tls/ssl_engine.conf; |
6 | include custom.d/tls/ssl_engine.conf; |
| 7 | include custom.d/tls/certificate_files.conf; |
7 | include custom.d/tls/certificate_files.conf; |
| 8 | include custom.d/tls/policy_balanced.conf; |
8 | include custom.d/tls/policy_strict.conf; |
| 9 | include custom.d/basic.conf; |
9 | include custom.d/basic.conf; |
| 10 | location / { |
10 | location / { |
| 11 | set $upstream http://192.168.0.251:5231; |
11 | set $upstream http://192.168.0.251:5231; |
linux/nginx/etc/nginx/conf.d/small.conf
+1 −1
| @@ -5,7 +5,7 @@ server { |
| 5 | server_name small.cleberg.net; |
5 | server_name small.cleberg.net; |
| 6 | include custom.d/tls/ssl_engine.conf; |
6 | include custom.d/tls/ssl_engine.conf; |
| 7 | include custom.d/tls/certificate_files.conf; |
7 | include custom.d/tls/certificate_files.conf; |
| 8 | include custom.d/tls/policy_balanced.conf; |
8 | include custom.d/tls/policy_strict.conf; |
| 9 | include custom.d/basic.conf; |
9 | include custom.d/basic.conf; |
| 10 | location / { |
10 | location / { |
| 11 | set $upstream http://127.0.0.1:8002; |
11 | set $upstream http://127.0.0.1:8002; |
linux/nginx/etc/nginx/conf.d/ssh.conf
+1 −1
| @@ -5,7 +5,7 @@ server { |
| 5 | server_name ssh.cleberg.net; |
5 | server_name ssh.cleberg.net; |
| 6 | include custom.d/tls/ssl_engine.conf; |
6 | include custom.d/tls/ssl_engine.conf; |
| 7 | include custom.d/tls/certificate_files.conf; |
7 | include custom.d/tls/certificate_files.conf; |
| 8 | include custom.d/tls/policy_balanced.conf; |
8 | include custom.d/tls/policy_strict.conf; |
| 9 | include custom.d/basic.conf; |
9 | include custom.d/basic.conf; |
| 10 | location /authelia { include custom.d/reverse_proxy/authelia.conf; } |
10 | location /authelia { include custom.d/reverse_proxy/authelia.conf; } |
| 11 | location / { |
11 | location / { |
linux/nginx/etc/nginx/conf.d/teddit.conf
+1 −1
| @@ -5,7 +5,7 @@ server { |
| 5 | server_name teddit.cleberg.net; |
5 | server_name teddit.cleberg.net; |
| 6 | include custom.d/tls/ssl_engine.conf; |
6 | include custom.d/tls/ssl_engine.conf; |
| 7 | include custom.d/tls/certificate_files.conf; |
7 | include custom.d/tls/certificate_files.conf; |
| 8 | include custom.d/tls/policy_balanced.conf; |
8 | include custom.d/tls/policy_strict.conf; |
| 9 | include custom.d/basic.conf; |
9 | include custom.d/basic.conf; |
| 10 | location /authelia { include custom.d/reverse_proxy/authelia.conf; } |
10 | location /authelia { include custom.d/reverse_proxy/authelia.conf; } |
| 11 | location / { |
11 | location / { |
linux/nginx/etc/nginx/conf.d/wyl.conf
+1 −1
| @@ -5,7 +5,7 @@ server { |
| 5 | server_name wyl.cleberg.net; |
5 | server_name wyl.cleberg.net; |
| 6 | include custom.d/tls/ssl_engine.conf; |
6 | include custom.d/tls/ssl_engine.conf; |
| 7 | include custom.d/tls/certificate_files.conf; |
7 | include custom.d/tls/certificate_files.conf; |
| 8 | include custom.d/tls/policy_balanced.conf; |
8 | include custom.d/tls/policy_strict.conf; |
| 9 | include custom.d/basic.conf; |
9 | include custom.d/basic.conf; |
| 10 | location /authelia { include custom.d/reverse_proxy/authelia.conf; } |
10 | location /authelia { include custom.d/reverse_proxy/authelia.conf; } |
| 11 | location / { |
11 | location / { |
linux/nginx/etc/nginx/nginx.conf
−3
| @@ -202,13 +202,11 @@ http { |
| 202 | bw.cleberg.net http://127.0.0.1:10416; |
202 | bw.cleberg.net http://127.0.0.1:10416; |
| 203 | cc.cleberg.net http://127.0.0.1:8111; |
203 | cc.cleberg.net http://127.0.0.1:8111; |
| 204 | ddns.cleberg.net http://127.0.0.1:8097; |
204 | ddns.cleberg.net http://127.0.0.1:8097; |
| 205 | docker.cleberg.net http://127.0.0.1:3777; |
| |
| 206 | gh.cleberg.net http://192.168.0.251:3039; |
205 | gh.cleberg.net http://192.168.0.251:3039; |
| 207 | ha.cleberg.net http://192.168.0.214:8123; |
206 | ha.cleberg.net http://192.168.0.214:8123; |
| 208 | hat.cleberg.net http://192.168.0.251:3991; |
207 | hat.cleberg.net http://192.168.0.251:3991; |
| 209 | irc.cleberg.net http://192.168.0.251:9900; |
208 | irc.cleberg.net http://192.168.0.251:9900; |
| 210 | ld.cleberg.net http://127.0.0.1:3004; |
209 | ld.cleberg.net http://127.0.0.1:3004; |
| 211 | lemmy.cleberg.net http://127.0.0.1:10633; |
| |
| 212 | lt.cleberg.net http://127.0.0.1:5000; |
210 | lt.cleberg.net http://127.0.0.1:5000; |
| 213 | mz.cleberg.net http://127.0.0.1:3474; |
211 | mz.cleberg.net http://127.0.0.1:3474; |
| 214 | paste.cleberg.net http://127.0.0.1:8084; |
212 | paste.cleberg.net http://127.0.0.1:8084; |
| @@ -225,7 +223,6 @@ http { |
| 225 | slash.cleberg.net http://192.168.0.251:5231; |
223 | slash.cleberg.net http://192.168.0.251:5231; |
| 226 | small.cleberg.net http://127.0.0.1:8002; |
224 | small.cleberg.net http://127.0.0.1:8002; |
| 227 | ssh.cleberg.net http://127.0.0.1:8169; |
225 | ssh.cleberg.net http://127.0.0.1:8169; |
| 228 | teddit.cleberg.net http://192.168.0.251:8181; |
| |
| 229 | wyl.cleberg.net http://192.168.0.251:8840; |
226 | wyl.cleberg.net http://192.168.0.251:8840; |
| 230 | } |
227 | } |
| 231 | |
228 | |