diff --git a/ubuntu/erlking.asininetech.net.yml b/ubuntu/erlking.asininetech.net.yml index 05f8db1..aa96986 100644 --- a/ubuntu/erlking.asininetech.net.yml +++ b/ubuntu/erlking.asininetech.net.yml @@ -318,6 +318,33 @@ deny all; } - include snippets/php_standard.conf + miniflux.packetcat.ca.http: + - listen *:80 + - listen [::]:80 + - server_name miniflux.packetcat.ca + - root "/srv/www/miniflux.packetcat.ca" + - location /.well-known/acme-challenge/ { + allow all; + } + - return 301 "https://$host$request_uri" + miniflux.packetcat.ca.https: + - listen *:443 ssl http2 + - listen [::]:443 ssl http2 + - server_name miniflux.packetcat.ca + - root "/srv/www/miniflux.packetcat.ca" + - access_log "/var/log/nginx/miniflux.packetcat.ca.access.log" + - error_log "/var/log/nginx/miniflux.packetcat.ca.error.log" + - ssl_certificate "/etc/ssl/letsencrypt/wiki.packetcat.ca.crt" + - ssl_certificate_key "/etc/ssl/letsencrypt/wiki.packetcat.ca.pem" + - include snippets/sslstapling_hsts.conf + - location / { + proxy_pass http://127.0.0.1:8080; + proxy_redirect off; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + } nginx_snippets: sslstapling_hsts: - ssl_stapling on