diff options
| author | Christian Cleberg <[email protected]> | 2026-03-22 08:26:37 -0500 |
|---|---|---|
| committer | Christian Cleberg <[email protected]> | 2026-03-22 08:26:37 -0500 |
| commit | 2b59dc285ebd31d3c7f7a93b4fd1583cdbdb4ac4 (patch) | |
| tree | 006a486639491ac7c54f5673a7db9263e5915f70 /linux/nginx | |
| parent | 1bdcd7a487207feac99413df77bcdf7701508015 (diff) | |
| download | dotfiles-2b59dc285ebd31d3c7f7a93b4fd1583cdbdb4ac4.tar.gz dotfiles-2b59dc285ebd31d3c7f7a93b4fd1583cdbdb4ac4.tar.bz2 dotfiles-2b59dc285ebd31d3c7f7a93b4fd1583cdbdb4ac4.zip | |
add gramps and update cleberg.net security headers
Diffstat (limited to 'linux/nginx')
| -rw-r--r-- | linux/nginx/etc/nginx/conf.d/cleberg.net.conf | 3 | ||||
| -rw-r--r-- | linux/nginx/etc/nginx/conf.d/gramps.conf | 18 |
2 files changed, 21 insertions, 0 deletions
diff --git a/linux/nginx/etc/nginx/conf.d/cleberg.net.conf b/linux/nginx/etc/nginx/conf.d/cleberg.net.conf index 27848fa..9d43457 100644 --- a/linux/nginx/etc/nginx/conf.d/cleberg.net.conf +++ b/linux/nginx/etc/nginx/conf.d/cleberg.net.conf @@ -18,6 +18,9 @@ server { include custom.d/tls/certificate_files.conf; include custom.d/tls/policy_strict.conf; include custom.d/basic.conf; + include custom.d/security/strict-transport-security.conf; + include custom.d/security/content-security-policy.conf; + include custom.d/security/permissions-policy.conf; root /var/www/cleberg.net/; add_header Onion-Location "http://paske4urhs6nttrtlkuwa5cowum3fjkc6yv6kl4ncx3mjxcd77764nqd.onion$request_uri" always; diff --git a/linux/nginx/etc/nginx/conf.d/gramps.conf b/linux/nginx/etc/nginx/conf.d/gramps.conf new file mode 100644 index 0000000..c8188f7 --- /dev/null +++ b/linux/nginx/etc/nginx/conf.d/gramps.conf @@ -0,0 +1,18 @@ +server { + listen [::]:443 ssl; + listen 443 ssl; + http2 on; + server_name gramps.cleberg.net; + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_strict.conf; + include custom.d/basic.conf; + location /authelia { include custom.d/reverse_proxy/authelia.conf; } + location / { + set $upstream http://127.0.0.1:5566; + proxy_pass $upstream; + include custom.d/reverse_proxy/authelia_request.conf; + include custom.d/reverse_proxy/basic.conf; + } + include custom.d/security/robots_index_only.conf; +} |