diff --git a/ubuntu/mercy.sickstack.com.yml b/ubuntu/mercy.sickstack.com.yml index 6eb4640..68e6097 100644 --- a/ubuntu/mercy.sickstack.com.yml +++ b/ubuntu/mercy.sickstack.com.yml @@ -28,6 +28,32 @@ - location / { proxy_pass http://127.0.0.1:3000; } + wiki.sickstack.com.https: + - listen *:443 ssl http2 + - listen [::]:443 ssl http2 + - server_name wiki.sickstack.com + - root "/srv/www/wiki.sickstack.com" + - index index.php + - access_log "/var/log/nginx/wiki.sickstack.com.access.log" + - error_log "/var/log/nginx/wiki.sickstack.com.error.log" + - ssl_certificate "/etc/ssl/letsencrypt/wiki.sickstack.com.crt" + - ssl_certificate_key "/etc/ssl/letsencrypt/wiki.sickstack.com.pem" + - ssl_stapling on + - add_header Strict-Transport-Security max-age=31536000 + - location ~ /(data|conf|bin|inc)/ { + deny all; + } + - location / { + try_files $uri $uri/ /index.php?$args; + } + - location ~ \.php$ { + try_files $uri =404; + fastcgi_split_path_info ^(.+\.php)(/.+)$; + include fastcgi_params; + fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; + fastcgi_pass php; + fastcgi_index index.php; + } nginx_configs: gzip: