From d3c6f6dd7d83cdecd5059689bfde5350f3ba2867 Mon Sep 17 00:00:00 2001 From: packetcat Date: Wed, 31 Aug 2022 11:02:47 -0400 Subject: [PATCH] add config for miniflux.packetcat.ca --- ubuntu/erlking.asininetech.net.yml | 27 +++++++++++++++++++++++++++ 1 file changed, 27 insertions(+) diff --git a/ubuntu/erlking.asininetech.net.yml b/ubuntu/erlking.asininetech.net.yml index 05f8db1..aa96986 100644 --- a/ubuntu/erlking.asininetech.net.yml +++ b/ubuntu/erlking.asininetech.net.yml @@ -318,6 +318,33 @@ deny all; } - include snippets/php_standard.conf + miniflux.packetcat.ca.http: + - listen *:80 + - listen [::]:80 + - server_name miniflux.packetcat.ca + - root "/srv/www/miniflux.packetcat.ca" + - location /.well-known/acme-challenge/ { + allow all; + } + - return 301 "https://$host$request_uri" + miniflux.packetcat.ca.https: + - listen *:443 ssl http2 + - listen [::]:443 ssl http2 + - server_name miniflux.packetcat.ca + - root "/srv/www/miniflux.packetcat.ca" + - access_log "/var/log/nginx/miniflux.packetcat.ca.access.log" + - error_log "/var/log/nginx/miniflux.packetcat.ca.error.log" + - ssl_certificate "/etc/ssl/letsencrypt/wiki.packetcat.ca.crt" + - ssl_certificate_key "/etc/ssl/letsencrypt/wiki.packetcat.ca.pem" + - include snippets/sslstapling_hsts.conf + - location / { + proxy_pass http://127.0.0.1:8080; + proxy_redirect off; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + } nginx_snippets: sslstapling_hsts: - ssl_stapling on