diff options
Diffstat (limited to 'linux/nginx')
34 files changed, 30 insertions, 1379 deletions
diff --git a/linux/nginx/etc/nginx/conf.d/ao.conf b/linux/nginx/etc/nginx/conf.d/ao.conf deleted file mode 100644 index 96d232f..0000000 --- a/linux/nginx/etc/nginx/conf.d/ao.conf +++ /dev/null @@ -1,39 +0,0 @@ -# ---------------------------------------------------------------------- -# | Config file for host | -# ---------------------------------------------------------------------- -server { - listen [::]:443 ssl; - listen 443 ssl; - http2 on; - - server_name ao.cleberg.net; - - include custom.d/tls/ssl_engine.conf; - include custom.d/tls/certificate_files.conf; - include custom.d/tls/policy_balanced.conf; - include custom.d/basic.conf; - - # ---------------------------------------------------------------------- - # | Custom rules & config for specific website | - # ---------------------------------------------------------------------- - location / { - set $upstream http://127.0.0.1:9380; - proxy_pass $upstream; - - include custom.d/reverse_proxy/basic.conf; - } - - include custom.d/security/robots_index_only.conf; - # ---------------------------------------------------------------------- -} - -# ---------------------------------------------------------------------- -# | Config file for non-secure host | -# ---------------------------------------------------------------------- -server { - listen [::]:80; - listen 80; - server_name ao.cleberg.net; - - return 301 https://$host$request_uri; -} diff --git a/linux/nginx/etc/nginx/conf.d/art.conf b/linux/nginx/etc/nginx/conf.d/art.conf deleted file mode 100644 index 6ce012a..0000000 --- a/linux/nginx/etc/nginx/conf.d/art.conf +++ /dev/null @@ -1,39 +0,0 @@ -# ---------------------------------------------------------------------- -# | Config file for host | -# ---------------------------------------------------------------------- -server { - listen [::]:443 ssl; - listen 443 ssl; - http2 on; - - server_name art.cleberg.net; - - include custom.d/tls/ssl_engine.conf; - include custom.d/tls/certificate_files.conf; - include custom.d/tls/policy_balanced.conf; - include custom.d/basic.conf; - - # ---------------------------------------------------------------------- - # | Custom rules & config for specific website | - # ---------------------------------------------------------------------- - location / { - set $upstream http://127.0.0.1:3003; - proxy_pass $upstream; - - include custom.d/reverse_proxy/basic.conf; - } - - include custom.d/security/robots_index_only.conf; - # ---------------------------------------------------------------------- -} - -# ---------------------------------------------------------------------- -# | Config file for non-secure host | -# ---------------------------------------------------------------------- -server { - listen [::]:80; - listen 80; - server_name art.cleberg.net; - - return 301 https://$host$request_uri; -} diff --git a/linux/nginx/etc/nginx/conf.d/auth.conf b/linux/nginx/etc/nginx/conf.d/auth.conf deleted file mode 100644 index 31c0a86..0000000 --- a/linux/nginx/etc/nginx/conf.d/auth.conf +++ /dev/null @@ -1,42 +0,0 @@ -# ---------------------------------------------------------------------- -# | Config file for host | -# ---------------------------------------------------------------------- -server { - listen [::]:443 ssl; - listen 443 ssl; - http2 on; - - server_name auth.cleberg.net; - - include custom.d/tls/ssl_engine.conf; - include custom.d/tls/certificate_files.conf; - include custom.d/tls/policy_balanced.conf; - include custom.d/basic.conf; - - # ---------------------------------------------------------------------- - # | Custom rules & config for specific website | - # ---------------------------------------------------------------------- - set $upstream http://127.0.0.1:9092; - - location / { - proxy_pass $upstream; - - include custom.d/reverse_proxy/basic.conf; - } - - location /api/verify { - proxy_pass $upstream; - } - # ---------------------------------------------------------------------- -} - -# ---------------------------------------------------------------------- -# | Config file for non-secure host | -# ---------------------------------------------------------------------- -server { - listen [::]:80; - listen 80; - server_name auth.cleberg.net; - - return 301 https://$host$request_uri; -} diff --git a/linux/nginx/etc/nginx/conf.d/br.conf b/linux/nginx/etc/nginx/conf.d/br.conf deleted file mode 100644 index 414b703..0000000 --- a/linux/nginx/etc/nginx/conf.d/br.conf +++ /dev/null @@ -1,39 +0,0 @@ -# ---------------------------------------------------------------------- -# | Config file for host | -# ---------------------------------------------------------------------- -server { - listen [::]:443 ssl; - listen 443 ssl; - http2 on; - - server_name br.cleberg.net; - - include custom.d/tls/ssl_engine.conf; - include custom.d/tls/certificate_files.conf; - include custom.d/tls/policy_balanced.conf; - include custom.d/basic.conf; - - # ---------------------------------------------------------------------- - # | Custom rules & config for specific website | - # ---------------------------------------------------------------------- - location / { - set $upstream http://127.0.0.1:3030; - proxy_pass $upstream; - - include custom.d/reverse_proxy/basic.conf; - } - - include custom.d/security/robots_index_only.conf; - # ---------------------------------------------------------------------- -} - -# ---------------------------------------------------------------------- -# | Config file for non-secure host | -# ---------------------------------------------------------------------- -server { - listen [::]:80; - listen 80; - server_name br.cleberg.net; - - return 301 https://$host$request_uri; -} diff --git a/linux/nginx/etc/nginx/conf.d/bt.conf b/linux/nginx/etc/nginx/conf.d/bt.conf deleted file mode 100644 index 1fa0bfa..0000000 --- a/linux/nginx/etc/nginx/conf.d/bt.conf +++ /dev/null @@ -1,46 +0,0 @@ -# ---------------------------------------------------------------------- -# | Config file for host | -# ---------------------------------------------------------------------- -server { - listen [::]:443 ssl; - listen 443 ssl; - http2 on; - - server_name bt.cleberg.net; - - include custom.d/tls/ssl_engine.conf; - include custom.d/tls/certificate_files.conf; - include custom.d/tls/policy_balanced.conf; - include custom.d/basic.conf; - - # ---------------------------------------------------------------------- - # | Custom rules & config for specific website | - # ---------------------------------------------------------------------- - set $upstream http://127.0.0.1:9091; - - location /authelia { - include custom.d/reverse_proxy/authelia.conf; - } - - location / { - proxy_pass $upstream; - - include custom.d/reverse_proxy/authelia_request.conf; - # include custom.d/reverse_proxy/basic.conf; - proxy_pass_header X-bt-Session-Id; - } - - include custom.d/security/robots_index_only.conf; - # ---------------------------------------------------------------------- -} - -# ---------------------------------------------------------------------- -# | Config file for non-secure host | -# ---------------------------------------------------------------------- -server { - listen [::]:80; - listen 80; - server_name bt.cleberg.net; - - return 301 https://$host$request_uri; -} diff --git a/linux/nginx/etc/nginx/conf.d/bw.conf b/linux/nginx/etc/nginx/conf.d/bw.conf deleted file mode 100644 index af63166..0000000 --- a/linux/nginx/etc/nginx/conf.d/bw.conf +++ /dev/null @@ -1,39 +0,0 @@ -# ---------------------------------------------------------------------- -# | Config file for host | -# ---------------------------------------------------------------------- -server { - listen [::]:443 ssl; - listen 443 ssl; - http2 on; - - server_name bw.cleberg.net; - - include custom.d/tls/ssl_engine.conf; - include custom.d/tls/certificate_files.conf; - include custom.d/tls/policy_balanced.conf; - include custom.d/basic.conf; - - # ---------------------------------------------------------------------- - # | Custom rules & config for specific website | - # ---------------------------------------------------------------------- - location / { - set $upstream http://127.0.0.1:10416; - proxy_pass $upstream; - - include custom.d/reverse_proxy/basic.conf; - } - - include custom.d/security/robots_index_only.conf; - # ---------------------------------------------------------------------- -} - -# ---------------------------------------------------------------------- -# | Config file for non-secure host | -# ---------------------------------------------------------------------- -server { - listen [::]:80; - listen 80; - server_name bw.cleberg.net; - - return 301 https://$host$request_uri; -} diff --git a/linux/nginx/etc/nginx/conf.d/cc.conf b/linux/nginx/etc/nginx/conf.d/cc.conf deleted file mode 100644 index a3978b1..0000000 --- a/linux/nginx/etc/nginx/conf.d/cc.conf +++ /dev/null @@ -1,39 +0,0 @@ -# ---------------------------------------------------------------------- -# | Config file for host | -# ---------------------------------------------------------------------- -server { - listen [::]:443 ssl; - listen 443 ssl; - http2 on; - - server_name cc.cleberg.net; - - include custom.d/tls/ssl_engine.conf; - include custom.d/tls/certificate_files.conf; - include custom.d/tls/policy_balanced.conf; - include custom.d/basic.conf; - - # ---------------------------------------------------------------------- - # | Custom rules & config for specific website | - # ---------------------------------------------------------------------- - location / { - set $upstream http://127.0.0.1:8111; - proxy_pass $upstream; - - include custom.d/reverse_proxy/basic.conf; - } - - include custom.d/security/robots_index_only.conf; - # ---------------------------------------------------------------------- -} - -# ---------------------------------------------------------------------- -# | Config file for non-secure host | -# ---------------------------------------------------------------------- -server { - listen [::]:80; - listen 80; - server_name cc.cleberg.net; - - return 301 https://$host$request_uri; -} diff --git a/linux/nginx/etc/nginx/conf.d/cleberg.net_wildcard.conf b/linux/nginx/etc/nginx/conf.d/cleberg.net_wildcard.conf new file mode 100644 index 0000000..cd0f842 --- /dev/null +++ b/linux/nginx/etc/nginx/conf.d/cleberg.net_wildcard.conf @@ -0,0 +1,30 @@ +server { + listen 80; + listen [::]:80; + server_name .cleberg.net; + return 301 https://$host$request_uri; +} + +server { + listen 443 ssl; + listen [::]:443 ssl; + http2 on; + + server_name .cleberg.net; + + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_balanced.conf; + include custom.d/basic.conf; + + location / { + if ($backend_address = "") { + return 404; + } + + proxy_pass $backend_address; + include custom.d/reverse_proxy/basic.conf; + } + + include custom.d/security/robots_index_only.conf; +} diff --git a/linux/nginx/etc/nginx/conf.d/ddns.conf b/linux/nginx/etc/nginx/conf.d/ddns.conf deleted file mode 100644 index 9915c1c..0000000 --- a/linux/nginx/etc/nginx/conf.d/ddns.conf +++ /dev/null @@ -1,44 +0,0 @@ -# ---------------------------------------------------------------------- -# | Config file for host | -# ---------------------------------------------------------------------- -server { - listen [::]:443 ssl; - listen 443 ssl; - http2 on; - - server_name ddns.cleberg.net; - - include custom.d/tls/ssl_engine.conf; - include custom.d/tls/certificate_files.conf; - include custom.d/tls/policy_balanced.conf; - include custom.d/basic.conf; - - # ---------------------------------------------------------------------- - # | Custom rules & config for specific website | - # ---------------------------------------------------------------------- - location /authelia { - include custom.d/reverse_proxy/authelia.conf; - } - - location / { - set $upstream http://127.0.0.1:8097; - proxy_pass $upstream; - - include custom.d/reverse_proxy/authelia_request.conf; - include custom.d/reverse_proxy/basic.conf; - } - - include custom.d/security/robots_index_only.conf; - # ---------------------------------------------------------------------- -} - -# ---------------------------------------------------------------------- -# | Config file for non-secure host | -# ---------------------------------------------------------------------- -server { - listen [::]:80; - listen 80; - server_name ddns.cleberg.net; - - return 301 https://$host$request_uri; -} diff --git a/linux/nginx/etc/nginx/conf.d/docker.conf b/linux/nginx/etc/nginx/conf.d/docker.conf deleted file mode 100644 index 4fab091..0000000 --- a/linux/nginx/etc/nginx/conf.d/docker.conf +++ /dev/null @@ -1,44 +0,0 @@ -# ---------------------------------------------------------------------- -# | Config file for host | -# ---------------------------------------------------------------------- -server { - listen [::]:443 ssl; - listen 443 ssl; - http2 on; - - server_name docker.cleberg.net; - - include custom.d/tls/ssl_engine.conf; - include custom.d/tls/certificate_files.conf; - include custom.d/tls/policy_balanced.conf; - include custom.d/basic.conf; - - # ---------------------------------------------------------------------- - # | Custom rules & config for specific website | - # ---------------------------------------------------------------------- - location /authelia { - include custom.d/reverse_proxy/authelia.conf; - } - - location / { - set $upstream http://127.0.0.1:3777; - proxy_pass $upstream; - - include custom.d/reverse_proxy/authelia_request.conf; - include custom.d/reverse_proxy/basic.conf; - } - - include custom.d/security/robots_index_only.conf; - # ---------------------------------------------------------------------- -} - -# ---------------------------------------------------------------------- -# | Config file for non-secure host | -# ---------------------------------------------------------------------- -server { - listen [::]:80; - listen 80; - server_name docker.cleberg.net; - - return 301 https://$host$request_uri; -} diff --git a/linux/nginx/etc/nginx/conf.d/gh.conf b/linux/nginx/etc/nginx/conf.d/gh.conf deleted file mode 100644 index 9b05a7f..0000000 --- a/linux/nginx/etc/nginx/conf.d/gh.conf +++ /dev/null @@ -1,39 +0,0 @@ -# ---------------------------------------------------------------------- -# | Config file for host | -# ---------------------------------------------------------------------- -server { - listen [::]:443 ssl; - listen 443 ssl; - http2 on; - - server_name gh.cleberg.net; - - include custom.d/tls/ssl_engine.conf; - include custom.d/tls/certificate_files.conf; - include custom.d/tls/policy_balanced.conf; - include custom.d/basic.conf; - - # ---------------------------------------------------------------------- - # | Custom rules & config for specific website | - # ---------------------------------------------------------------------- - location / { - set $upstream http://192.168.0.251:3039; - proxy_pass $upstream; - - include custom.d/reverse_proxy/basic.conf; - } - - include custom.d/security/robots_index_only.conf; - # ---------------------------------------------------------------------- -} - -# ---------------------------------------------------------------------- -# | Config file for non-secure host | -# ---------------------------------------------------------------------- -server { - listen [::]:80; - listen 80; - server_name gh.cleberg.net; - - return 301 https://$host$request_uri; -} diff --git a/linux/nginx/etc/nginx/conf.d/ha.conf b/linux/nginx/etc/nginx/conf.d/ha.conf deleted file mode 100644 index 63ed76c..0000000 --- a/linux/nginx/etc/nginx/conf.d/ha.conf +++ /dev/null @@ -1,46 +0,0 @@ -# ---------------------------------------------------------------------- -# | Config file for host | -# ---------------------------------------------------------------------- -server { - listen [::]:443 ssl; - listen 443 ssl; - http2 on; - - server_name ha.cleberg.net; - - include custom.d/tls/ssl_engine.conf; - include custom.d/tls/certificate_files.conf; - include custom.d/tls/policy_balanced.conf; - include custom.d/basic.conf; - - # ---------------------------------------------------------------------- - # | Custom rules & config for specific website | - # ---------------------------------------------------------------------- - set $upstream http://192.168.0.214:8123; - - location / { - proxy_pass $upstream; - proxy_set_header X-Forwarded-For $remote_addr; - } - - location /api/websocket { - proxy_pass $upstream; - proxy_http_version 1.1; - proxy_set_header Upgrade $http_upgrade; - proxy_set_header Connection "upgrade"; - } - - include custom.d/security/robots_index_only.conf; - # ---------------------------------------------------------------------- -} - -# ---------------------------------------------------------------------- -# | Config file for non-secure host | -# ---------------------------------------------------------------------- -server { - listen [::]:80; - listen 80; - server_name ha.cleberg.net; - - return 301 https://$host$request_uri; -} diff --git a/linux/nginx/etc/nginx/conf.d/hat.conf b/linux/nginx/etc/nginx/conf.d/hat.conf deleted file mode 100644 index 4d9da2c..0000000 --- a/linux/nginx/etc/nginx/conf.d/hat.conf +++ /dev/null @@ -1,39 +0,0 @@ -# ---------------------------------------------------------------------- -# | Config file for host | -# ---------------------------------------------------------------------- -server { - listen [::]:443 ssl; - listen 443 ssl; - http2 on; - - server_name hat.cleberg.net; - - include custom.d/tls/ssl_engine.conf; - include custom.d/tls/certificate_files.conf; - include custom.d/tls/policy_balanced.conf; - include custom.d/basic.conf; - - # ---------------------------------------------------------------------- - # | Custom rules & config for specific website | - # ---------------------------------------------------------------------- - location / { - set $upstream http://192.168.0.251:3991; - proxy_pass $upstream; - - include custom.d/reverse_proxy/basic.conf; - } - - include custom.d/security/robots_index_only.conf; - # ---------------------------------------------------------------------- -} - -# ---------------------------------------------------------------------- -# | Config file for non-secure host | -# ---------------------------------------------------------------------- -server { - listen [::]:80; - listen 80; - server_name hat.cleberg.net; - - return 301 https://$host$request_uri; -} diff --git a/linux/nginx/etc/nginx/conf.d/irc.conf b/linux/nginx/etc/nginx/conf.d/irc.conf deleted file mode 100644 index 0d8af19..0000000 --- a/linux/nginx/etc/nginx/conf.d/irc.conf +++ /dev/null @@ -1,44 +0,0 @@ -# ---------------------------------------------------------------------- -# | Config file for host | -# ---------------------------------------------------------------------- -server { - listen [::]:443 ssl; - listen 443 ssl; - http2 on; - - server_name irc.cleberg.net; - - include custom.d/tls/ssl_engine.conf; - include custom.d/tls/certificate_files.conf; - include custom.d/tls/policy_balanced.conf; - include custom.d/basic.conf; - - # ---------------------------------------------------------------------- - # | Custom rules & config for specific website | - # ---------------------------------------------------------------------- - location /authelia { - include custom.d/reverse_proxy/authelia.conf; - } - - location / { - set $upstream http://192.168.0.251:9900; - proxy_pass $upstream; - - include custom.d/reverse_proxy/authelia_request.conf; - include custom.d/reverse_proxy/basic.conf; - } - - include custom.d/security/robots_index_only.conf; - # ---------------------------------------------------------------------- -} - -# ---------------------------------------------------------------------- -# | Config file for non-secure host | -# ---------------------------------------------------------------------- -server { - listen [::]:80; - listen 80; - server_name irc.cleberg.net; - - return 301 https://$host$request_uri; -} diff --git a/linux/nginx/etc/nginx/conf.d/ld.conf b/linux/nginx/etc/nginx/conf.d/ld.conf deleted file mode 100644 index 5c03fca..0000000 --- a/linux/nginx/etc/nginx/conf.d/ld.conf +++ /dev/null @@ -1,39 +0,0 @@ -# ---------------------------------------------------------------------- -# | Config file for host | -# ---------------------------------------------------------------------- -server { - listen [::]:443 ssl; - listen 443 ssl; - http2 on; - - server_name ld.cleberg.net; - - include custom.d/tls/ssl_engine.conf; - include custom.d/tls/certificate_files.conf; - include custom.d/tls/policy_balanced.conf; - include custom.d/basic.conf; - - # ---------------------------------------------------------------------- - # | Custom rules & config for specific website | - # ---------------------------------------------------------------------- - location / { - set $upstream http://127.0.0.1:3004; - proxy_pass $upstream; - - include custom.d/reverse_proxy/basic.conf; - } - - include custom.d/security/robots_index_only.conf; - # ---------------------------------------------------------------------- -} - -# ---------------------------------------------------------------------- -# | Config file for non-secure host | -# ---------------------------------------------------------------------- -server { - listen [::]:80; - listen 80; - server_name ld.cleberg.net; - - return 301 https://$host$request_uri; -} diff --git a/linux/nginx/etc/nginx/conf.d/lemmy.conf b/linux/nginx/etc/nginx/conf.d/lemmy.conf deleted file mode 100644 index 1e3fffa..0000000 --- a/linux/nginx/etc/nginx/conf.d/lemmy.conf +++ /dev/null @@ -1,39 +0,0 @@ -# ---------------------------------------------------------------------- -# | Config file for host | -# ---------------------------------------------------------------------- -server { - listen [::]:443 ssl; - listen 443 ssl; - http2 on; - - server_name lemmy.cleberg.net; - - include custom.d/tls/ssl_engine.conf; - include custom.d/tls/certificate_files.conf; - include custom.d/tls/policy_balanced.conf; - include custom.d/basic.conf; - - # ---------------------------------------------------------------------- - # | Custom rules & config for specific website | - # ---------------------------------------------------------------------- - location / { - set $upstream http://127.0.0.1:10633; - proxy_pass $upstream; - - include custom.d/reverse_proxy/basic.conf; - } - - include custom.d/security/robots_index_only.conf; - # ---------------------------------------------------------------------- -} - -# ---------------------------------------------------------------------- -# | Config file for non-secure host | -# ---------------------------------------------------------------------- -server { - listen [::]:80; - listen 80; - server_name lemmy.cleberg.net; - - return 301 https://$host$request_uri; -} diff --git a/linux/nginx/etc/nginx/conf.d/lt.conf b/linux/nginx/etc/nginx/conf.d/lt.conf deleted file mode 100644 index 620f02b..0000000 --- a/linux/nginx/etc/nginx/conf.d/lt.conf +++ /dev/null @@ -1,39 +0,0 @@ -# ---------------------------------------------------------------------- -# | Config file for host | -# ---------------------------------------------------------------------- -server { - listen [::]:443 ssl; - listen 443 ssl; - http2 on; - - server_name lt.cleberg.net; - - include custom.d/tls/ssl_engine.conf; - include custom.d/tls/certificate_files.conf; - include custom.d/tls/policy_balanced.conf; - include custom.d/basic.conf; - - # ---------------------------------------------------------------------- - # | Custom rules & config for specific website | - # ---------------------------------------------------------------------- - location / { - set $upstream http://127.0.0.1:5000; - proxy_pass $upstream; - - include custom.d/reverse_proxy/basic.conf; - } - - include custom.d/security/robots_index_only.conf; - # ---------------------------------------------------------------------- -} - -# ---------------------------------------------------------------------- -# | Config file for non-secure host | -# ---------------------------------------------------------------------- -server { - listen [::]:80; - listen 80; - server_name lt.cleberg.net; - - return 301 https://$host$request_uri; -} diff --git a/linux/nginx/etc/nginx/conf.d/mz.conf b/linux/nginx/etc/nginx/conf.d/mz.conf deleted file mode 100644 index df7d7b2..0000000 --- a/linux/nginx/etc/nginx/conf.d/mz.conf +++ /dev/null @@ -1,39 +0,0 @@ -# ---------------------------------------------------------------------- -# | Config file for host | -# ---------------------------------------------------------------------- -server { - listen [::]:443 ssl; - listen 443 ssl; - http2 on; - - server_name mz.cleberg.net; - - include custom.d/tls/ssl_engine.conf; - include custom.d/tls/certificate_files.conf; - include custom.d/tls/policy_balanced.conf; - include custom.d/basic.conf; - - # ---------------------------------------------------------------------- - # | Custom rules & config for specific website | - # ---------------------------------------------------------------------- - location / { - set $upstream http://127.0.0.1:3474; - proxy_pass $upstream; - - include custom.d/reverse_proxy/basic.conf; - } - - include custom.d/security/robots_index_only.conf; - # ---------------------------------------------------------------------- -} - -# ---------------------------------------------------------------------- -# | Config file for non-secure host | -# ---------------------------------------------------------------------- -server { - listen [::]:80; - listen 80; - server_name mz.cleberg.net; - - return 301 https://$host$request_uri; -} diff --git a/linux/nginx/etc/nginx/conf.d/paste.conf b/linux/nginx/etc/nginx/conf.d/paste.conf deleted file mode 100644 index 9164097..0000000 --- a/linux/nginx/etc/nginx/conf.d/paste.conf +++ /dev/null @@ -1,39 +0,0 @@ -# ---------------------------------------------------------------------- -# | Config file for host | -# ---------------------------------------------------------------------- -server { - listen [::]:443 ssl; - listen 443 ssl; - http2 on; - - server_name paste.cleberg.net; - - include custom.d/tls/ssl_engine.conf; - include custom.d/tls/certificate_files.conf; - include custom.d/tls/policy_balanced.conf; - include custom.d/basic.conf; - - # ---------------------------------------------------------------------- - # | Custom rules & config for specific website | - # ---------------------------------------------------------------------- - location / { - set $upstream http://127.0.0.1:8084; - proxy_pass $upstream; - - include custom.d/reverse_proxy/basic.conf; - } - - include custom.d/security/robots_index_only.conf; - # ---------------------------------------------------------------------- -} - -# ---------------------------------------------------------------------- -# | Config file for non-secure host | -# ---------------------------------------------------------------------- -server { - listen [::]:80; - listen 80; - server_name paste.cleberg.net; - - return 301 https://$host$request_uri; -} diff --git a/linux/nginx/etc/nginx/conf.d/pb.conf b/linux/nginx/etc/nginx/conf.d/pb.conf deleted file mode 100644 index 4adbc0a..0000000 --- a/linux/nginx/etc/nginx/conf.d/pb.conf +++ /dev/null @@ -1,39 +0,0 @@ -# ---------------------------------------------------------------------- -# | Config file for host | -# ---------------------------------------------------------------------- -server { - listen [::]:443 ssl; - listen 443 ssl; - http2 on; - - server_name pb.cleberg.net; - - include custom.d/tls/ssl_engine.conf; - include custom.d/tls/certificate_files.conf; - include custom.d/tls/policy_balanced.conf; - include custom.d/basic.conf; - - # ---------------------------------------------------------------------- - # | Custom rules & config for specific website | - # ---------------------------------------------------------------------- - location / { - set $upstream http://127.0.0.1:8745; - proxy_pass $upstream; - - include custom.d/reverse_proxy/basic.conf; - } - - # include custom.d/security/robots_index_only.conf; - # ---------------------------------------------------------------------- -} - -# ---------------------------------------------------------------------- -# | Config file for non-secure host | -# ---------------------------------------------------------------------- -server { - listen [::]:80; - listen 80; - server_name pb.cleberg.net; - - return 301 https://$host$request_uri; -} diff --git a/linux/nginx/etc/nginx/conf.d/photos.conf b/linux/nginx/etc/nginx/conf.d/photos.conf deleted file mode 100644 index 1a1e41a..0000000 --- a/linux/nginx/etc/nginx/conf.d/photos.conf +++ /dev/null @@ -1,54 +0,0 @@ -# ---------------------------------------------------------------------- -# | Config file for host | -# ---------------------------------------------------------------------- -server { - listen [::]:443 ssl; - listen 443 ssl; - http2 on; - - server_name photos.cleberg.net; - - include custom.d/tls/ssl_engine.conf; - include custom.d/tls/certificate_files.conf; - include custom.d/tls/policy_balanced.conf; - include custom.d/basic.conf; - - # ---------------------------------------------------------------------- - # | Custom rules & config for specific website | - # ---------------------------------------------------------------------- - # allow large file uploads - client_max_body_size 50000M; - - # Set headers - proxy_set_header Host $host; - proxy_set_header X-Real-IP $remote_addr; - proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; - proxy_set_header X-Forwarded-Proto $scheme; - - # enable websockets: http://nginx.org/en/docs/http/websocket.html - proxy_http_version 1.1; - proxy_set_header Upgrade $http_upgrade; - proxy_set_header Connection "upgrade"; - proxy_redirect off; - - # set timeout - proxy_read_timeout 600s; - proxy_send_timeout 600s; - send_timeout 600s; - - location / { - proxy_pass http://127.0.0.1:2283; - } - # ---------------------------------------------------------------------- -} - -# ---------------------------------------------------------------------- -# | Config file for non-secure host | -# ---------------------------------------------------------------------- -server { - listen [::]:80; - listen 80; - server_name photos.cleberg.net; - - return 301 https://$host$request_uri; -} diff --git a/linux/nginx/etc/nginx/conf.d/pin.conf b/linux/nginx/etc/nginx/conf.d/pin.conf deleted file mode 100644 index 228cfd0..0000000 --- a/linux/nginx/etc/nginx/conf.d/pin.conf +++ /dev/null @@ -1,39 +0,0 @@ -# ---------------------------------------------------------------------- -# | Config file for host | -# ---------------------------------------------------------------------- -server { - listen [::]:443 ssl; - listen 443 ssl; - http2 on; - - server_name pin.cleberg.net; - - include custom.d/tls/ssl_engine.conf; - include custom.d/tls/certificate_files.conf; - include custom.d/tls/policy_balanced.conf; - include custom.d/basic.conf; - - # ---------------------------------------------------------------------- - # | Custom rules & config for specific website | - # ---------------------------------------------------------------------- - location / { - set $upstream http://127.0.0.1:8086; - proxy_pass $upstream; - - include custom.d/reverse_proxy/basic.conf; - } - - include custom.d/security/robots_index_only.conf; - # ---------------------------------------------------------------------- -} - -# ---------------------------------------------------------------------- -# | Config file for non-secure host | -# ---------------------------------------------------------------------- -server { - listen [::]:80; - listen 80; - server_name pin.cleberg.net; - - return 301 https://$host$request_uri; -} diff --git a/linux/nginx/etc/nginx/conf.d/piped.conf b/linux/nginx/etc/nginx/conf.d/piped.conf deleted file mode 100644 index 8efa6aa..0000000 --- a/linux/nginx/etc/nginx/conf.d/piped.conf +++ /dev/null @@ -1,40 +0,0 @@ -# ---------------------------------------------------------------------- -# | Config file for host | -# ---------------------------------------------------------------------- -server { - listen [::]:443 ssl; - listen 443 ssl; - http2 on; - - server_name piped.cleberg.net pipedapi.cleberg.net pipedproxy.cleberg.net; - - include custom.d/tls/ssl_engine.conf; - include custom.d/tls/certificate_files.conf; - include custom.d/tls/policy_balanced.conf; - include custom.d/basic.conf; - - # ---------------------------------------------------------------------- - # | Custom rules & config for specific website | - # ---------------------------------------------------------------------- - location / { - set $upstream http://127.0.0.1:8077; - proxy_pass $upstream; - - proxy_set_header Host $host; - # include custom.d/reverse_proxy/basic.conf; - } - - include custom.d/security/robots_index_only.conf; - # ---------------------------------------------------------------------- -} - -# ---------------------------------------------------------------------- -# | Config file for non-secure host | -# ---------------------------------------------------------------------- -server { - listen [::]:80; - listen 80; - server_name piped.cleberg.net pipedapi.cleberg.net pipedproxy.cleberg.net; - - return 301 https://$host$request_uri; -} diff --git a/linux/nginx/etc/nginx/conf.d/rd.conf b/linux/nginx/etc/nginx/conf.d/rd.conf deleted file mode 100644 index bea88da..0000000 --- a/linux/nginx/etc/nginx/conf.d/rd.conf +++ /dev/null @@ -1,39 +0,0 @@ -# ---------------------------------------------------------------------- -# | Config file for host | -# ---------------------------------------------------------------------- -server { - listen [::]:443 ssl; - listen 443 ssl; - http2 on; - - server_name rd.cleberg.net; - - include custom.d/tls/ssl_engine.conf; - include custom.d/tls/certificate_files.conf; - include custom.d/tls/policy_balanced.conf; - include custom.d/basic.conf; - - # ---------------------------------------------------------------------- - # | Custom rules & config for specific website | - # ---------------------------------------------------------------------- - location / { - set $upstream http://127.0.0.1:5758; - proxy_pass $upstream; - - include custom.d/reverse_proxy/basic.conf; - } - - include custom.d/security/robots_index_only.conf; - # ---------------------------------------------------------------------- -} - -# ---------------------------------------------------------------------- -# | Config file for non-secure host | -# ---------------------------------------------------------------------- -server { - listen [::]:80; - listen 80; - server_name rd.cleberg.net; - - return 301 https://$host$request_uri; -} diff --git a/linux/nginx/etc/nginx/conf.d/rimgo.conf b/linux/nginx/etc/nginx/conf.d/rimgo.conf deleted file mode 100644 index 2d1272f..0000000 --- a/linux/nginx/etc/nginx/conf.d/rimgo.conf +++ /dev/null @@ -1,39 +0,0 @@ -# ---------------------------------------------------------------------- -# | Config file for host | -# ---------------------------------------------------------------------- -server { - listen [::]:443 ssl; - listen 443 ssl; - http2 on; - - server_name rimgo.cleberg.net; - - include custom.d/tls/ssl_engine.conf; - include custom.d/tls/certificate_files.conf; - include custom.d/tls/policy_balanced.conf; - include custom.d/basic.conf; - - # ---------------------------------------------------------------------- - # | Custom rules & config for specific website | - # ---------------------------------------------------------------------- - location / { - set $upstream http://127.0.0.1:3869; - proxy_pass $upstream; - - include custom.d/reverse_proxy/basic.conf; - } - - include custom.d/security/robots_index_only.conf; - # ---------------------------------------------------------------------- -} - -# ---------------------------------------------------------------------- -# | Config file for non-secure host | -# ---------------------------------------------------------------------- -server { - listen [::]:80; - listen 80; - server_name rimgo.cleberg.net; - - return 301 https://$host$request_uri; -} diff --git a/linux/nginx/etc/nginx/conf.d/rl.conf b/linux/nginx/etc/nginx/conf.d/rl.conf deleted file mode 100644 index d00f563..0000000 --- a/linux/nginx/etc/nginx/conf.d/rl.conf +++ /dev/null @@ -1,44 +0,0 @@ -# ---------------------------------------------------------------------- -# | Config file for host | -# ---------------------------------------------------------------------- -server { - listen [::]:443 ssl; - listen 443 ssl; - http2 on; - - server_name rl.cleberg.net; - - include custom.d/tls/ssl_engine.conf; - include custom.d/tls/certificate_files.conf; - include custom.d/tls/policy_balanced.conf; - include custom.d/basic.conf; - - # ---------------------------------------------------------------------- - # | Custom rules & config for specific website | - # ---------------------------------------------------------------------- - location /authelia { - include custom.d/reverse_proxy/authelia.conf; - } - - location / { - set $upstream http://192.168.0.251:8983; - proxy_pass $upstream; - - include custom.d/reverse_proxy/authelia_request.conf; - include custom.d/reverse_proxy/basic.conf; - } - - include custom.d/security/robots_index_only.conf; - # ---------------------------------------------------------------------- -} - -# ---------------------------------------------------------------------- -# | Config file for non-secure host | -# ---------------------------------------------------------------------- -server { - listen [::]:80; - listen 80; - server_name rl.cleberg.net; - - return 301 https://$host$request_uri; -} diff --git a/linux/nginx/etc/nginx/conf.d/rss.conf b/linux/nginx/etc/nginx/conf.d/rss.conf deleted file mode 100644 index a097b50..0000000 --- a/linux/nginx/etc/nginx/conf.d/rss.conf +++ /dev/null @@ -1,58 +0,0 @@ -# ---------------------------------------------------------------------- -# | Config file for host | -# ---------------------------------------------------------------------- -upstream freshrss { - server 192.168.0.251:8081; - keepalive 64; -} - -server { - listen [::]:443 ssl; - listen 443 ssl; - http2 on; - - server_name rss.cleberg.net; - - include custom.d/tls/ssl_engine.conf; - include custom.d/tls/certificate_files.conf; - include custom.d/tls/policy_balanced.conf; - include custom.d/basic.conf; - - # ---------------------------------------------------------------------- - # | Custom rules & config for specific website | - # ---------------------------------------------------------------------- - location / { - proxy_pass http://freshrss/; - - # include custom.d/reverse_proxy/basic.conf; - - add_header X-Frame-Options SAMEORIGIN; - add_header X-XSS-Protection "1; mode=block"; - proxy_redirect off; - proxy_buffering off; - proxy_set_header Host $host; - proxy_set_header X-Real-IP $remote_addr; - proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; - proxy_set_header X-Forwarded-Proto $scheme; - proxy_set_header X-Forwarded-Port $server_port; - proxy_read_timeout 90; - - # Forward the Authorization header for the Google Reader API. - proxy_set_header Authorization $http_authorization; - proxy_pass_header Authorization; - } - - include custom.d/security/robots_index_only.conf; - # ---------------------------------------------------------------------- -} - -# ---------------------------------------------------------------------- -# | Config file for non-secure host | -# ---------------------------------------------------------------------- -server { - listen [::]:80; - listen 80; - server_name rss.cleberg.net; - - return 301 https://$host$request_uri; -} diff --git a/linux/nginx/etc/nginx/conf.d/search.conf b/linux/nginx/etc/nginx/conf.d/search.conf deleted file mode 100644 index 8ba49b0..0000000 --- a/linux/nginx/etc/nginx/conf.d/search.conf +++ /dev/null @@ -1,44 +0,0 @@ -# ---------------------------------------------------------------------- -# | Config file for host | -# ---------------------------------------------------------------------- -server { - listen [::]:443 ssl; - listen 443 ssl; - http2 on; - - server_name search.cleberg.net; - - include custom.d/tls/ssl_engine.conf; - include custom.d/tls/certificate_files.conf; - include custom.d/tls/policy_balanced.conf; - include custom.d/basic.conf; - - # ---------------------------------------------------------------------- - # | Custom rules & config for specific website | - # ---------------------------------------------------------------------- - location / { - set $upstream http://127.0.0.1:9191; - proxy_pass $upstream; - - # include custom.d/reverse_proxy/basic.conf; - proxy_set_header Host $host; - proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; - proxy_set_header Upgrade $http_upgrade; - proxy_set_header Connection "upgrade"; - proxy_http_version 1.1; - } - - include custom.d/security/robots_index_only.conf; - # ---------------------------------------------------------------------- -} - -# ---------------------------------------------------------------------- -# | Config file for non-secure host | -# ---------------------------------------------------------------------- -server { - listen [::]:80; - listen 80; - server_name search.cleberg.net; - - return 301 https://$host$request_uri; -} diff --git a/linux/nginx/etc/nginx/conf.d/send.conf b/linux/nginx/etc/nginx/conf.d/send.conf deleted file mode 100644 index 78a60c9..0000000 --- a/linux/nginx/etc/nginx/conf.d/send.conf +++ /dev/null @@ -1,39 +0,0 @@ -# ---------------------------------------------------------------------- -# | Config file for host | -# ---------------------------------------------------------------------- -server { - listen [::]:443 ssl; - listen 443 ssl; - http2 on; - - server_name send.cleberg.net; - - include custom.d/tls/ssl_engine.conf; - include custom.d/tls/certificate_files.conf; - include custom.d/tls/policy_balanced.conf; - include custom.d/basic.conf; - - # ---------------------------------------------------------------------- - # | Custom rules & config for specific website | - # ---------------------------------------------------------------------- - location / { - set $upstream http://127.0.0.1:1443; - proxy_pass $upstream; - - include custom.d/reverse_proxy/basic.conf; - } - - include custom.d/security/robots_index_only.conf; - # ---------------------------------------------------------------------- -} - -# ---------------------------------------------------------------------- -# | Config file for non-secure host | -# ---------------------------------------------------------------------- -server { - listen [::]:80; - listen 80; - server_name send.cleberg.net; - - return 301 https://$host$request_uri; -} diff --git a/linux/nginx/etc/nginx/conf.d/slash.conf b/linux/nginx/etc/nginx/conf.d/slash.conf deleted file mode 100644 index b7489dd..0000000 --- a/linux/nginx/etc/nginx/conf.d/slash.conf +++ /dev/null @@ -1,39 +0,0 @@ -# ---------------------------------------------------------------------- -# | Config file for host | -# ---------------------------------------------------------------------- -server { - listen [::]:443 ssl; - listen 443 ssl; - http2 on; - - server_name slash.cleberg.net; - - include custom.d/tls/ssl_engine.conf; - include custom.d/tls/certificate_files.conf; - include custom.d/tls/policy_balanced.conf; - include custom.d/basic.conf; - - # ---------------------------------------------------------------------- - # | Custom rules & config for specific website | - # ---------------------------------------------------------------------- - location / { - set $upstream http://192.168.0.251:5231; - proxy_pass $upstream; - - include custom.d/reverse_proxy/basic.conf; - } - - include custom.d/security/robots_index_only.conf; - # ---------------------------------------------------------------------- -} - -# ---------------------------------------------------------------------- -# | Config file for non-secure host | -# ---------------------------------------------------------------------- -server { - listen [::]:80; - listen 80; - server_name slash.cleberg.net; - - return 301 https://$host$request_uri; -} diff --git a/linux/nginx/etc/nginx/conf.d/small.conf b/linux/nginx/etc/nginx/conf.d/small.conf deleted file mode 100644 index 1bdb145..0000000 --- a/linux/nginx/etc/nginx/conf.d/small.conf +++ /dev/null @@ -1,39 +0,0 @@ -# ---------------------------------------------------------------------- -# | Config file for host | -# ---------------------------------------------------------------------- -server { - listen [::]:443 ssl; - listen 443 ssl; - http2 on; - - server_name small.cleberg.net; - - include custom.d/tls/ssl_engine.conf; - include custom.d/tls/certificate_files.conf; - include custom.d/tls/policy_balanced.conf; - include custom.d/basic.conf; - - # ---------------------------------------------------------------------- - # | Custom rules & config for specific website | - # ---------------------------------------------------------------------- - location / { - set $upstream http://127.0.0.1:8002; - proxy_pass $upstream; - - include custom.d/reverse_proxy/basic.conf; - } - - include custom.d/security/robots_index_only.conf; - # ---------------------------------------------------------------------- -} - -# ---------------------------------------------------------------------- -# | Config file for non-secure host | -# ---------------------------------------------------------------------- -server { - listen [::]:80; - listen 80; - server_name small.cleberg.net; - - return 301 https://$host$request_uri; -} diff --git a/linux/nginx/etc/nginx/conf.d/ssh.conf b/linux/nginx/etc/nginx/conf.d/ssh.conf deleted file mode 100644 index 726a0d8..0000000 --- a/linux/nginx/etc/nginx/conf.d/ssh.conf +++ /dev/null @@ -1,44 +0,0 @@ -# ---------------------------------------------------------------------- -# | Config file for host | -# ---------------------------------------------------------------------- -server { - listen [::]:443 ssl; - listen 443 ssl; - http2 on; - - server_name ssh.cleberg.net; - - include custom.d/tls/ssl_engine.conf; - include custom.d/tls/certificate_files.conf; - include custom.d/tls/policy_balanced.conf; - include custom.d/basic.conf; - - # ---------------------------------------------------------------------- - # | Custom rules & config for specific website | - # ---------------------------------------------------------------------- - location /authelia { - include custom.d/reverse_proxy/authelia.conf; - } - - location / { - set $upstream http://127.0.0.1:8169; - proxy_pass $upstream; - - include custom.d/reverse_proxy/authelia_request.conf; - include custom.d/reverse_proxy/basic.conf; - } - - include custom.d/security/robots_index_only.conf; - # ---------------------------------------------------------------------- -} - -# ---------------------------------------------------------------------- -# | Config file for non-secure host | -# ---------------------------------------------------------------------- -server { - listen [::]:80; - listen 80; - server_name ssh.cleberg.net; - - return 301 https://$host$request_uri; -} diff --git a/linux/nginx/etc/nginx/conf.d/teddit.conf b/linux/nginx/etc/nginx/conf.d/teddit.conf deleted file mode 100644 index f96bd34..0000000 --- a/linux/nginx/etc/nginx/conf.d/teddit.conf +++ /dev/null @@ -1,44 +0,0 @@ -# ---------------------------------------------------------------------- -# | Config file for host | -# ---------------------------------------------------------------------- -server { - listen [::]:443 ssl; - listen 443 ssl; - http2 on; - - server_name teddit.cleberg.net; - - include custom.d/tls/ssl_engine.conf; - include custom.d/tls/certificate_files.conf; - include custom.d/tls/policy_balanced.conf; - include custom.d/basic.conf; - - # ---------------------------------------------------------------------- - # | Custom rules & config for specific website | - # ---------------------------------------------------------------------- - location /authelia { - include custom.d/reverse_proxy/authelia.conf; - } - - location / { - set $upstream http://192.168.0.251:8181; - proxy_pass $upstream; - - include custom.d/reverse_proxy/authelia_request.conf; - include custom.d/reverse_proxy/basic.conf; - } - - include custom.d/security/robots_index_only.conf; - # ---------------------------------------------------------------------- -} - -# ---------------------------------------------------------------------- -# | Config file for non-secure host | -# ---------------------------------------------------------------------- -server { - listen [::]:80; - listen 80; - server_name teddit.cleberg.net; - - return 301 https://$host$request_uri; -} diff --git a/linux/nginx/etc/nginx/conf.d/wyl.conf b/linux/nginx/etc/nginx/conf.d/wyl.conf deleted file mode 100644 index da20b69..0000000 --- a/linux/nginx/etc/nginx/conf.d/wyl.conf +++ /dev/null @@ -1,44 +0,0 @@ -# ---------------------------------------------------------------------- -# | Config file for host | -# ---------------------------------------------------------------------- -server { - listen [::]:443 ssl; - listen 443 ssl; - http2 on; - - server_name wyl.cleberg.net; - - include custom.d/tls/ssl_engine.conf; - include custom.d/tls/certificate_files.conf; - include custom.d/tls/policy_balanced.conf; - include custom.d/basic.conf; - - # ---------------------------------------------------------------------- - # | Custom rules & config for specific website | - # ---------------------------------------------------------------------- - location /authelia { - include custom.d/reverse_proxy/authelia.conf; - } - - location / { - set $upstream http://192.168.0.251:8840; - proxy_pass $upstream; - - include custom.d/reverse_proxy/authelia_request.conf; - include custom.d/reverse_proxy/basic.conf; - } - - include custom.d/security/robots_index_only.conf; - # ---------------------------------------------------------------------- -} - -# ---------------------------------------------------------------------- -# | Config file for non-secure host | -# ---------------------------------------------------------------------- -server { - listen [::]:80; - listen 80; - server_name wyl.cleberg.net; - - return 301 https://$host$request_uri; -} |