From 7099c9bad59528189431ba22c36cbe987f8462c6 Mon Sep 17 00:00:00 2001 From: packetcat Date: Sat, 18 Nov 2023 18:29:33 -0500 Subject: [PATCH] add vhost for wiki.bastetrix.org --- ubuntu/erlking.silvestris.systems.yml | 24 ++++++++++++++++++++++++ 1 file changed, 24 insertions(+) diff --git a/ubuntu/erlking.silvestris.systems.yml b/ubuntu/erlking.silvestris.systems.yml index e10fe45..4038efd 100644 --- a/ubuntu/erlking.silvestris.systems.yml +++ b/ubuntu/erlking.silvestris.systems.yml @@ -200,6 +200,30 @@ - ssl_certificate "/etc/ssl/letsencrypt/bastetrix.com.crt" - ssl_certificate_key "/etc/ssl/letsencrypt/bastetrix.com.pem" - include snippets/sslstapling_hsts.conf + wiki.bastetrix.org.http: + - listen *:80 + - listen [::]:80 + - server_name wiki.bastetrix.org + - root "/srv/www/wiki.bastetrix.org" + - location /.well-known/acme-challenge/ { + allow all; + } + - return 301 "https://$host$request_uri" + wiki.bastetrix.org.https: + - listen *:443 ssl http2 + - listen [::]:443 ssl http2 + - server_name wiki.bastetrix.org + - root "/srv/www/wiki.bastetrix.org" + - index index.php + - access_log "/var/log/nginx/wiki.bastetrix.org.access.log" + - error_log "/var/log/nginx/wiki.bastetrix.org.error.log" + - ssl_certificate "/etc/ssl/letsencrypt/wiki.bastetrix.org.crt" + - ssl_certificate_key "/etc/ssl/letsencrypt/wiki.bastetrix.org.pem" + - include snippets/sslstapling_hsts.conf + - location ~ /(data|conf|bin|inc)/ { + deny all; + } + - include snippets/php_standard.conf nginx_snippets: sslstapling_hsts: - ssl_stapling on