cmc/dotfiles

Using GNU Stow to manage my dotfiles. config dotfiles macos stow

Commit f4318a3e39

f4318a3e399d60ef93e9fe08d50aa3fa44794730

parent: 2ccdcfbbd7

Verified · cmc

cmc <hello@cleberg.net> · 2026-03-04 06:14 UTC 

update nginx with security fixes

Layout: unified · split

linux/nginx/etc/nginx/conf.d/ao.conf +1 −1
@@ -5,7 +5,7 @@ server {
55 server_name ao.cleberg.net;
66 include custom.d/tls/ssl_engine.conf;
77 include custom.d/tls/certificate_files.conf;
8 include custom.d/tls/policy_balanced.conf;
8 include custom.d/tls/policy_strict.conf;
99 include custom.d/basic.conf;
1010 location / {
1111 set $upstream http://127.0.0.1:9380;
linux/nginx/etc/nginx/conf.d/art.conf +1 −1
@@ -5,7 +5,7 @@ server {
55 server_name art.cleberg.net;
66 include custom.d/tls/ssl_engine.conf;
77 include custom.d/tls/certificate_files.conf;
8 include custom.d/tls/policy_balanced.conf;
8 include custom.d/tls/policy_strict.conf;
99 include custom.d/basic.conf;
1010 location / {
1111 set $upstream http://127.0.0.1:3003;
linux/nginx/etc/nginx/conf.d/auth.conf +1 −1
@@ -5,7 +5,7 @@ server {
55 server_name auth.cleberg.net;
66 include custom.d/tls/ssl_engine.conf;
77 include custom.d/tls/certificate_files.conf;
8 include custom.d/tls/policy_balanced.conf;
8 include custom.d/tls/policy_strict.conf;
99 include custom.d/basic.conf;
1010 set $upstream http://127.0.0.1:9092;
1111 location / {
linux/nginx/etc/nginx/conf.d/br.conf +1 −1
@@ -5,7 +5,7 @@ server {
55 server_name br.cleberg.net;
66 include custom.d/tls/ssl_engine.conf;
77 include custom.d/tls/certificate_files.conf;
8 include custom.d/tls/policy_balanced.conf;
8 include custom.d/tls/policy_strict.conf;
99 include custom.d/basic.conf;
1010 location / {
1111 set $upstream http://127.0.0.1:3030;
linux/nginx/etc/nginx/conf.d/bt.conf +1 −1
@@ -5,7 +5,7 @@ server {
55 server_name bt.cleberg.net;
66 include custom.d/tls/ssl_engine.conf;
77 include custom.d/tls/certificate_files.conf;
8 include custom.d/tls/policy_balanced.conf;
8 include custom.d/tls/policy_strict.conf;
99 include custom.d/basic.conf;
1010 set $upstream http://127.0.0.1:9091;
1111 location /authelia { include custom.d/reverse_proxy/authelia.conf; }
linux/nginx/etc/nginx/conf.d/bw.conf +1 −1
@@ -5,7 +5,7 @@ server {
55 server_name bw.cleberg.net;
66 include custom.d/tls/ssl_engine.conf;
77 include custom.d/tls/certificate_files.conf;
8 include custom.d/tls/policy_balanced.conf;
8 include custom.d/tls/policy_strict.conf;
99 include custom.d/basic.conf;
1010 location / {
1111 set $upstream http://127.0.0.1:10416;
linux/nginx/etc/nginx/conf.d/cc.conf +1 −1
@@ -5,7 +5,7 @@ server {
55 server_name cc.cleberg.net;
66 include custom.d/tls/ssl_engine.conf;
77 include custom.d/tls/certificate_files.conf;
8 include custom.d/tls/policy_balanced.conf;
8 include custom.d/tls/policy_strict.conf;
99 include custom.d/basic.conf;
1010 location / {
1111 set $upstream http://127.0.0.1:8111;
linux/nginx/etc/nginx/conf.d/cleberg.io.conf +1 −1
@@ -4,7 +4,7 @@ server {
44 http2 on;
55 server_name cleberg.io;
66 include custom.d/tls/ssl_engine.conf;
7 include custom.d/tls/policy_balanced.conf;
7 include custom.d/tls/policy_strict.conf;
88 include custom.d/basic.conf;
99 ssl_certificate /etc/letsencrypt/live/cleberg.io/fullchain.pem;
1010 ssl_certificate_key /etc/letsencrypt/live/cleberg.io/privkey.pem;
linux/nginx/etc/nginx/conf.d/cleberg.net.conf +2 −2
@@ -5,7 +5,7 @@ server {
55 server_name www.cleberg.net;
66 include custom.d/tls/ssl_engine.conf;
77 include custom.d/tls/certificate_files.conf;
8 include custom.d/tls/policy_balanced.conf;
8 include custom.d/tls/policy_strict.conf;
99 return 301 $scheme://cleberg.net$request_uri;
1010}
1111
@@ -16,7 +16,7 @@ server {
1616 server_name cleberg.net;
1717 include custom.d/tls/ssl_engine.conf;
1818 include custom.d/tls/certificate_files.conf;
19 include custom.d/tls/policy_balanced.conf;
19 include custom.d/tls/policy_strict.conf;
2020 include custom.d/basic.conf;
2121 root /var/www/cleberg.net/;
2222
linux/nginx/etc/nginx/conf.d/cv.conf +1 −1
@@ -5,7 +5,7 @@ server {
55 server_name cv.cleberg.net;
66 include custom.d/tls/ssl_engine.conf;
77 include custom.d/tls/certificate_files.conf;
8 include custom.d/tls/policy_balanced.conf;
8 include custom.d/tls/policy_strict.conf;
99 include custom.d/basic.conf;
1010 root /var/www/cv/;
1111 autoindex on;
linux/nginx/etc/nginx/conf.d/ddns.conf +1 −1
@@ -5,7 +5,7 @@ server {
55 server_name ddns.cleberg.net;
66 include custom.d/tls/ssl_engine.conf;
77 include custom.d/tls/certificate_files.conf;
8 include custom.d/tls/policy_balanced.conf;
8 include custom.d/tls/policy_strict.conf;
99 include custom.d/basic.conf;
1010 location /authelia { include custom.d/reverse_proxy/authelia.conf; }
1111 location / {
linux/nginx/etc/nginx/conf.d/default.conf +1 −1
@@ -5,7 +5,7 @@ server {
55 server_name _;
66 include custom.d/tls/ssl_engine.conf;
77 include custom.d/tls/certificate_files.conf;
8 include custom.d/tls/policy_balanced.conf;
8 include custom.d/tls/policy_strict.conf;
99 return 444;
1010}
1111
linux/nginx/etc/nginx/conf.d/docker.conf +1 −1
@@ -5,7 +5,7 @@ server {
55 server_name docker.cleberg.net;
66 include custom.d/tls/ssl_engine.conf;
77 include custom.d/tls/certificate_files.conf;
8 include custom.d/tls/policy_balanced.conf;
8 include custom.d/tls/policy_strict.conf;
99 include custom.d/basic.conf;
1010 location /authelia { include custom.d/reverse_proxy/authelia.conf; }
1111 location / {
linux/nginx/etc/nginx/conf.d/files.conf +1 −1
@@ -5,7 +5,7 @@ server {
55 server_name files.cleberg.net;
66 include custom.d/tls/ssl_engine.conf;
77 include custom.d/tls/certificate_files.conf;
8 include custom.d/tls/policy_balanced.conf;
8 include custom.d/tls/policy_strict.conf;
99 include custom.d/basic.conf;
1010 root /var/www/files/;
1111 autoindex on;
linux/nginx/etc/nginx/conf.d/gh.conf +1 −1
@@ -5,7 +5,7 @@ server {
55 server_name gh.cleberg.net;
66 include custom.d/tls/ssl_engine.conf;
77 include custom.d/tls/certificate_files.conf;
8 include custom.d/tls/policy_balanced.conf;
8 include custom.d/tls/policy_strict.conf;
99 include custom.d/basic.conf;
1010 location / {
1111 set $upstream http://192.168.0.251:3039;
linux/nginx/etc/nginx/conf.d/ha.conf +1 −1
@@ -5,7 +5,7 @@ server {
55 server_name ha.cleberg.net;
66 include custom.d/tls/ssl_engine.conf;
77 include custom.d/tls/certificate_files.conf;
8 include custom.d/tls/policy_balanced.conf;
8 include custom.d/tls/policy_strict.conf;
99 include custom.d/basic.conf;
1010 set $upstream http://192.168.0.214:8123;
1111 location / {
linux/nginx/etc/nginx/conf.d/hat.conf +1 −1
@@ -5,7 +5,7 @@ server {
55 server_name hat.cleberg.net;
66 include custom.d/tls/ssl_engine.conf;
77 include custom.d/tls/certificate_files.conf;
8 include custom.d/tls/policy_balanced.conf;
8 include custom.d/tls/policy_strict.conf;
99 include custom.d/basic.conf;
1010 location / {
1111 set $upstream http://192.168.0.251:3991;
linux/nginx/etc/nginx/conf.d/hn.conf +1 −1
@@ -8,7 +8,7 @@ server {
88 add_header Onion-Location http://r3yfeffyj7ornpikojmw75u3sn2la7tqnmcmwgv2ov7if24sm5czqeid.onion;
99 include custom.d/tls/ssl_engine.conf;
1010 include custom.d/tls/certificate_files.conf;
11 include custom.d/tls/policy_balanced.conf;
11 include custom.d/tls/policy_strict.conf;
1212 include custom.d/basic.conf;
1313 location / { try_files $uri $uri/ /index.html; }
1414}
linux/nginx/etc/nginx/conf.d/img.conf +1 −1
@@ -5,7 +5,7 @@ server {
55 server_name img.cleberg.net;
66 include custom.d/tls/ssl_engine.conf;
77 include custom.d/tls/certificate_files.conf;
8 include custom.d/tls/policy_balanced.conf;
8 include custom.d/tls/policy_strict.conf;
99 include custom.d/basic.conf;
1010 root /var/www/img/;
1111 autoindex on;
linux/nginx/etc/nginx/conf.d/irc.conf +1 −1
@@ -5,7 +5,7 @@ server {
55 server_name irc.cleberg.net;
66 include custom.d/tls/ssl_engine.conf;
77 include custom.d/tls/certificate_files.conf;
8 include custom.d/tls/policy_balanced.conf;
8 include custom.d/tls/policy_strict.conf;
99 include custom.d/basic.conf;
1010 location /authelia { include custom.d/reverse_proxy/authelia.conf; }
1111 location / {
linux/nginx/etc/nginx/conf.d/ld.conf +1 −1
@@ -5,7 +5,7 @@ server {
55 server_name ld.cleberg.net;
66 include custom.d/tls/ssl_engine.conf;
77 include custom.d/tls/certificate_files.conf;
8 include custom.d/tls/policy_balanced.conf;
8 include custom.d/tls/policy_strict.conf;
99 include custom.d/basic.conf;
1010 location / {
1111 set $upstream http://127.0.0.1:3004;
linux/nginx/etc/nginx/conf.d/lemmy.conf +1 −1
@@ -5,7 +5,7 @@ server {
55 server_name lemmy.cleberg.net;
66 include custom.d/tls/ssl_engine.conf;
77 include custom.d/tls/certificate_files.conf;
8 include custom.d/tls/policy_balanced.conf;
8 include custom.d/tls/policy_strict.conf;
99 include custom.d/basic.conf;
1010 location / {
1111 set $upstream http://127.0.0.1:10633;
linux/nginx/etc/nginx/conf.d/lt.conf +1 −1
@@ -5,7 +5,7 @@ server {
55 server_name lt.cleberg.net;
66 include custom.d/tls/ssl_engine.conf;
77 include custom.d/tls/certificate_files.conf;
8 include custom.d/tls/policy_balanced.conf;
8 include custom.d/tls/policy_strict.conf;
99 include custom.d/basic.conf;
1010 location / {
1111 set $upstream http://127.0.0.1:5000;
linux/nginx/etc/nginx/conf.d/michelangelo.conf +1 −1
@@ -4,7 +4,7 @@ server {
44 server_name michelangelo.cleberg.net;
55 include custom.d/tls/ssl_engine.conf;
66 include custom.d/tls/certificate_files.conf;
7 include custom.d/tls/policy_balanced.conf;
7 include custom.d/tls/policy_strict.conf;
88 include custom.d/basic.conf;
99
1010 location / {
linux/nginx/etc/nginx/conf.d/mz.conf +1 −1
@@ -5,7 +5,7 @@ server {
55 server_name mz.cleberg.net;
66 include custom.d/tls/ssl_engine.conf;
77 include custom.d/tls/certificate_files.conf;
8 include custom.d/tls/policy_balanced.conf;
8 include custom.d/tls/policy_strict.conf;
99 include custom.d/basic.conf;
1010 location / {
1111 set $upstream http://127.0.0.1:3474;
linux/nginx/etc/nginx/conf.d/office.conf +1 −1
@@ -6,7 +6,7 @@ server {
66 root /var/www/office/;
77 include custom.d/tls/ssl_engine.conf;
88 include custom.d/tls/certificate_files.conf;
9 include custom.d/tls/policy_balanced.conf;
9 include custom.d/tls/policy_strict.conf;
1010 include custom.d/basic.conf;
1111 location / { try_files $uri $uri/ /index.html; }
1212}
\ No newline at end of file
linux/nginx/etc/nginx/conf.d/org.conf +1 −1
@@ -6,7 +6,7 @@ server {
66 root /var/www/org/;
77 include custom.d/tls/ssl_engine.conf;
88 include custom.d/tls/certificate_files.conf;
9 include custom.d/tls/policy_balanced.conf;
9 include custom.d/tls/policy_strict.conf;
1010 include custom.d/basic.conf;
1111 location / { try_files $uri $uri/ /index.html; }
1212}
\ No newline at end of file
linux/nginx/etc/nginx/conf.d/paste.conf +1 −1
@@ -5,7 +5,7 @@ server {
55 server_name paste.cleberg.net;
66 include custom.d/tls/ssl_engine.conf;
77 include custom.d/tls/certificate_files.conf;
8 include custom.d/tls/policy_balanced.conf;
8 include custom.d/tls/policy_strict.conf;
99 include custom.d/basic.conf;
1010 location / {
1111 set $upstream http://127.0.0.1:8084;
linux/nginx/etc/nginx/conf.d/pb.conf +1 −1
@@ -5,7 +5,7 @@ server {
55 server_name pb.cleberg.net;
66 include custom.d/tls/ssl_engine.conf;
77 include custom.d/tls/certificate_files.conf;
8 include custom.d/tls/policy_balanced.conf;
8 include custom.d/tls/policy_strict.conf;
99 include custom.d/basic.conf;
1010 location / {
1111 set $upstream http://127.0.0.1:8745;
linux/nginx/etc/nginx/conf.d/photos.conf +1 −1
@@ -5,7 +5,7 @@ server {
55 server_name photos.cleberg.net;
66 include custom.d/tls/ssl_engine.conf;
77 include custom.d/tls/certificate_files.conf;
8 include custom.d/tls/policy_balanced.conf;
8 include custom.d/tls/policy_strict.conf;
99 include custom.d/basic.conf;
1010 client_max_body_size 50000M;
1111 proxy_set_header Host $host;
linux/nginx/etc/nginx/conf.d/pin.conf +1 −1
@@ -5,7 +5,7 @@ server {
55 server_name pin.cleberg.net;
66 include custom.d/tls/ssl_engine.conf;
77 include custom.d/tls/certificate_files.conf;
8 include custom.d/tls/policy_balanced.conf;
8 include custom.d/tls/policy_strict.conf;
99 include custom.d/basic.conf;
1010 location / {
1111 set $upstream http://127.0.0.1:8086;
linux/nginx/etc/nginx/conf.d/piped.conf +1 −1
@@ -5,7 +5,7 @@ server {
55 server_name piped.cleberg.net pipedapi.cleberg.net pipedproxy.cleberg.net;
66 include custom.d/tls/ssl_engine.conf;
77 include custom.d/tls/certificate_files.conf;
8 include custom.d/tls/policy_balanced.conf;
8 include custom.d/tls/policy_strict.conf;
99 include custom.d/basic.conf;
1010 location / {
1111 set $upstream http://127.0.0.1:8077;
linux/nginx/etc/nginx/conf.d/projects.conf +1 −1
@@ -7,7 +7,7 @@ server {
77 autoindex on;
88 include custom.d/tls/ssl_engine.conf;
99 include custom.d/tls/certificate_files.conf;
10 include custom.d/tls/policy_balanced.conf;
10 include custom.d/tls/policy_strict.conf;
1111 include custom.d/basic.conf;
1212 location / { try_files $uri $uri/ /index.html; }
1313}
linux/nginx/etc/nginx/conf.d/rd.conf +1 −1
@@ -5,7 +5,7 @@ server {
55 server_name rd.cleberg.net;
66 include custom.d/tls/ssl_engine.conf;
77 include custom.d/tls/certificate_files.conf;
8 include custom.d/tls/policy_balanced.conf;
8 include custom.d/tls/policy_strict.conf;
99 include custom.d/basic.conf;
1010 location / {
1111 set $upstream http://127.0.0.1:2944;
linux/nginx/etc/nginx/conf.d/reminiscecleberg.com.conf +2 −2
@@ -4,7 +4,7 @@ server {
44 http2 on;
55 server_name www.reminiscecleberg.com;
66 include custom.d/tls/ssl_engine.conf;
7 include custom.d/tls/policy_balanced.conf;
7 include custom.d/tls/policy_strict.conf;
88 ssl_certificate /etc/letsencrypt/live/reminiscecleberg.com/fullchain.pem;
99 ssl_certificate_key /etc/letsencrypt/live/reminiscecleberg.com/privkey.pem;
1010 ssl_trusted_certificate /etc/letsencrypt/live/reminiscecleberg.com/chain.pem;
@@ -19,7 +19,7 @@ server {
1919 server_name reminiscecleberg.com;
2020 root /var/www/reminiscecleberg.com/;
2121 include custom.d/tls/ssl_engine.conf;
22 include custom.d/tls/policy_balanced.conf;
22 include custom.d/tls/policy_strict.conf;
2323 include custom.d/basic.conf;
2424 ssl_certificate /etc/letsencrypt/live/reminiscecleberg.com/fullchain.pem;
2525 ssl_certificate_key /etc/letsencrypt/live/reminiscecleberg.com/privkey.pem;
linux/nginx/etc/nginx/conf.d/rimgo.conf +1 −1
@@ -5,7 +5,7 @@ server {
55 server_name rimgo.cleberg.net;
66 include custom.d/tls/ssl_engine.conf;
77 include custom.d/tls/certificate_files.conf;
8 include custom.d/tls/policy_balanced.conf;
8 include custom.d/tls/policy_strict.conf;
99 include custom.d/basic.conf;
1010 location / {
1111 set $upstream http://127.0.0.1:3869;
linux/nginx/etc/nginx/conf.d/rl.conf +1 −1
@@ -5,7 +5,7 @@ server {
55 server_name rl.cleberg.net;
66 include custom.d/tls/ssl_engine.conf;
77 include custom.d/tls/certificate_files.conf;
8 include custom.d/tls/policy_balanced.conf;
8 include custom.d/tls/policy_strict.conf;
99 include custom.d/basic.conf;
1010 location /authelia { include custom.d/reverse_proxy/authelia.conf; }
1111 location / {
linux/nginx/etc/nginx/conf.d/rss.conf +1 −2
@@ -6,12 +6,11 @@ server {
66 server_name rss.cleberg.net;
77 include custom.d/tls/ssl_engine.conf;
88 include custom.d/tls/certificate_files.conf;
9 include custom.d/tls/policy_balanced.conf;
9 include custom.d/tls/policy_strict.conf;
1010 include custom.d/basic.conf;
1111 location / {
1212 proxy_pass http://freshrss/;
1313 add_header X-Frame-Options SAMEORIGIN;
14 add_header X-XSS-Protection "1; mode=block";
1514 proxy_redirect off;
1615 proxy_buffering off;
1716 proxy_set_header Host $host;
linux/nginx/etc/nginx/conf.d/search.conf +1 −1
@@ -5,7 +5,7 @@ server {
55 server_name search.cleberg.net;
66 include custom.d/tls/ssl_engine.conf;
77 include custom.d/tls/certificate_files.conf;
8 include custom.d/tls/policy_balanced.conf;
8 include custom.d/tls/policy_strict.conf;
99 include custom.d/basic.conf;
1010 location / {
1111 set $upstream http://127.0.0.1:9191;
linux/nginx/etc/nginx/conf.d/send.conf +1 −1
@@ -5,7 +5,7 @@ server {
55 server_name send.cleberg.net;
66 include custom.d/tls/ssl_engine.conf;
77 include custom.d/tls/certificate_files.conf;
8 include custom.d/tls/policy_balanced.conf;
8 include custom.d/tls/policy_strict.conf;
99 include custom.d/basic.conf;
1010 location / {
1111 set $upstream http://192.168.0.251:1443;
linux/nginx/etc/nginx/conf.d/slash.conf +1 −1
@@ -5,7 +5,7 @@ server {
55 server_name slash.cleberg.net;
66 include custom.d/tls/ssl_engine.conf;
77 include custom.d/tls/certificate_files.conf;
8 include custom.d/tls/policy_balanced.conf;
8 include custom.d/tls/policy_strict.conf;
99 include custom.d/basic.conf;
1010 location / {
1111 set $upstream http://192.168.0.251:5231;
linux/nginx/etc/nginx/conf.d/small.conf +1 −1
@@ -5,7 +5,7 @@ server {
55 server_name small.cleberg.net;
66 include custom.d/tls/ssl_engine.conf;
77 include custom.d/tls/certificate_files.conf;
8 include custom.d/tls/policy_balanced.conf;
8 include custom.d/tls/policy_strict.conf;
99 include custom.d/basic.conf;
1010 location / {
1111 set $upstream http://127.0.0.1:8002;
linux/nginx/etc/nginx/conf.d/ssh.conf +1 −1
@@ -5,7 +5,7 @@ server {
55 server_name ssh.cleberg.net;
66 include custom.d/tls/ssl_engine.conf;
77 include custom.d/tls/certificate_files.conf;
8 include custom.d/tls/policy_balanced.conf;
8 include custom.d/tls/policy_strict.conf;
99 include custom.d/basic.conf;
1010 location /authelia { include custom.d/reverse_proxy/authelia.conf; }
1111 location / {
linux/nginx/etc/nginx/conf.d/teddit.conf +1 −1
@@ -5,7 +5,7 @@ server {
55 server_name teddit.cleberg.net;
66 include custom.d/tls/ssl_engine.conf;
77 include custom.d/tls/certificate_files.conf;
8 include custom.d/tls/policy_balanced.conf;
8 include custom.d/tls/policy_strict.conf;
99 include custom.d/basic.conf;
1010 location /authelia { include custom.d/reverse_proxy/authelia.conf; }
1111 location / {
linux/nginx/etc/nginx/conf.d/wyl.conf +1 −1
@@ -5,7 +5,7 @@ server {
55 server_name wyl.cleberg.net;
66 include custom.d/tls/ssl_engine.conf;
77 include custom.d/tls/certificate_files.conf;
8 include custom.d/tls/policy_balanced.conf;
8 include custom.d/tls/policy_strict.conf;
99 include custom.d/basic.conf;
1010 location /authelia { include custom.d/reverse_proxy/authelia.conf; }
1111 location / {
linux/nginx/etc/nginx/nginx.conf −3
@@ -202,13 +202,11 @@ http {
202202 bw.cleberg.net http://127.0.0.1:10416;
203203 cc.cleberg.net http://127.0.0.1:8111;
204204 ddns.cleberg.net http://127.0.0.1:8097;
205 docker.cleberg.net http://127.0.0.1:3777;
206205 gh.cleberg.net http://192.168.0.251:3039;
207206 ha.cleberg.net http://192.168.0.214:8123;
208207 hat.cleberg.net http://192.168.0.251:3991;
209208 irc.cleberg.net http://192.168.0.251:9900;
210209 ld.cleberg.net http://127.0.0.1:3004;
211 lemmy.cleberg.net http://127.0.0.1:10633;
212210 lt.cleberg.net http://127.0.0.1:5000;
213211 mz.cleberg.net http://127.0.0.1:3474;
214212 paste.cleberg.net http://127.0.0.1:8084;
@@ -225,7 +223,6 @@ http {
225223 slash.cleberg.net http://192.168.0.251:5231;
226224 small.cleberg.net http://127.0.0.1:8002;
227225 ssh.cleberg.net http://127.0.0.1:8169;
228 teddit.cleberg.net http://192.168.0.251:8181;
229226 wyl.cleberg.net http://192.168.0.251:8840;
230227 }
231228