From 2b59dc285ebd31d3c7f7a93b4fd1583cdbdb4ac4 Mon Sep 17 00:00:00 2001 From: Christian Cleberg Date: Sun, 22 Mar 2026 08:26:37 -0500 Subject: add gramps and update cleberg.net security headers --- linux/nginx/etc/nginx/conf.d/cleberg.net.conf | 3 +++ linux/nginx/etc/nginx/conf.d/gramps.conf | 18 ++++++++++++++++++ 2 files changed, 21 insertions(+) create mode 100644 linux/nginx/etc/nginx/conf.d/gramps.conf (limited to 'linux/nginx') diff --git a/linux/nginx/etc/nginx/conf.d/cleberg.net.conf b/linux/nginx/etc/nginx/conf.d/cleberg.net.conf index 27848fa..9d43457 100644 --- a/linux/nginx/etc/nginx/conf.d/cleberg.net.conf +++ b/linux/nginx/etc/nginx/conf.d/cleberg.net.conf @@ -18,6 +18,9 @@ server { include custom.d/tls/certificate_files.conf; include custom.d/tls/policy_strict.conf; include custom.d/basic.conf; + include custom.d/security/strict-transport-security.conf; + include custom.d/security/content-security-policy.conf; + include custom.d/security/permissions-policy.conf; root /var/www/cleberg.net/; add_header Onion-Location "http://paske4urhs6nttrtlkuwa5cowum3fjkc6yv6kl4ncx3mjxcd77764nqd.onion$request_uri" always; diff --git a/linux/nginx/etc/nginx/conf.d/gramps.conf b/linux/nginx/etc/nginx/conf.d/gramps.conf new file mode 100644 index 0000000..c8188f7 --- /dev/null +++ b/linux/nginx/etc/nginx/conf.d/gramps.conf @@ -0,0 +1,18 @@ +server { + listen [::]:443 ssl; + listen 443 ssl; + http2 on; + server_name gramps.cleberg.net; + include custom.d/tls/ssl_engine.conf; + include custom.d/tls/certificate_files.conf; + include custom.d/tls/policy_strict.conf; + include custom.d/basic.conf; + location /authelia { include custom.d/reverse_proxy/authelia.conf; } + location / { + set $upstream http://127.0.0.1:5566; + proxy_pass $upstream; + include custom.d/reverse_proxy/authelia_request.conf; + include custom.d/reverse_proxy/basic.conf; + } + include custom.d/security/robots_index_only.conf; +} -- cgit v1.2.3