diff --git a/ubuntu/erlking.silvestris.systems.yml b/ubuntu/erlking.silvestris.systems.yml index f54b0e2..e10fe45 100644 --- a/ubuntu/erlking.silvestris.systems.yml +++ b/ubuntu/erlking.silvestris.systems.yml @@ -180,6 +180,26 @@ - location ~ \.php$ { return 404; } + bastetrix.com.http: + - listen *:80 + - listen [::]:80 + - server_name bastetrix.com + - root "/srv/www/bastetrix.com/public" + - location /.well-known/acme-challenge/ { + allow all; + } + - return 301 "https://$host$request_uri" + bastetrix.com.https: + - listen *:443 ssl http2 + - listen [::]:443 ssl http2 + - server_name bastetrix.com + - root "/srv/www/bastetrix.com/public" + - index index.html + - access_log "/var/log/nginx/bastetrix.com.access.log" + - error_log "/var/log/nginx/bastetrix.com.error.log" + - ssl_certificate "/etc/ssl/letsencrypt/bastetrix.com.crt" + - ssl_certificate_key "/etc/ssl/letsencrypt/bastetrix.com.pem" + - include snippets/sslstapling_hsts.conf nginx_snippets: sslstapling_hsts: - ssl_stapling on