diff --git a/ubuntu/erlking.silvestris.systems.yml b/ubuntu/erlking.silvestris.systems.yml index feeb0d1..d2331b4 100644 --- a/ubuntu/erlking.silvestris.systems.yml +++ b/ubuntu/erlking.silvestris.systems.yml @@ -205,6 +205,26 @@ deny all; } - include snippets/php_standard.conf + subscribe.packetcat.ca.http: + - listen *:80 + - listen [::]:80 + - server_name subscribe.packetcat.ca + - root "/srv/www/subscribe.packetcat.ca/" + - location /.well-known/acme-challenge/ { + allow all; + } + - return 301 "https://$host$request_uri" + subscribe.packetcat.ca.https: + - listen *:443 ssl http2 + - listen [::]:443 ssl http2 + - server_name subscribe.packetcat.ca + - root "/srv/www/subscribe.packetcat.ca" + - index index.html + - access_log "/var/log/nginx/subscribe.packetcat.ca.access.log" + - error_log "/var/log/nginx/subscribe.packetcat.ca.error.log" + - ssl_certificate "/etc/ssl/letsencrypt/wallabag.packetcat.ca.crt" + - ssl_certificate_key "/etc/ssl/letsencrypt/wallabag.packetcat.ca.pem" + - include snippets/sslstapling_hsts.conf nginx_snippets: sslstapling_hsts: - ssl_stapling on