From c4ad283a59466bc70af8343d707b5a0059929c0c Mon Sep 17 00:00:00 2001 From: root Date: Mon, 28 Oct 2024 11:30:47 +0100 Subject: [PATCH] added dockge --- 002-searx.conf | 2 +- 012-nextcloud.conf | 2 +- 018-dockge.conf | 46 +++++++++++++++++++++++ default.dpkg-dist | 91 ++++++++++++++++++++++++++++++++++++++++++++++ 4 files changed, 139 insertions(+), 2 deletions(-) create mode 100644 018-dockge.conf create mode 100644 default.dpkg-dist diff --git a/002-searx.conf b/002-searx.conf index 3ad88fc..3a4e448 100644 --- a/002-searx.conf +++ b/002-searx.conf @@ -61,7 +61,7 @@ server { if ($query_string = "format=rss" ) { return 403; } if ($query_string = "format=json" ) { return 403; } - proxy_pass http://127.0.0.1:4004; + proxy_pass http://127.0.0.1:8080; proxy_set_header Host $http_host; proxy_set_header Connection $http_connection; diff --git a/012-nextcloud.conf b/012-nextcloud.conf index f5aaddc..efaa422 100644 --- a/012-nextcloud.conf +++ b/012-nextcloud.conf @@ -145,7 +145,7 @@ server { fastcgi_param modHeadersAvailable true; # Avoid sending the security headers twice fastcgi_param front_controller_active true; # Enable pretty urls #fastcgi_pass php-handler; - fastcgi_pass unix:/run/php/php8.1-fpm.sock; + fastcgi_pass unix:/run/php/php8.2-fpm.sock; fastcgi_intercept_errors on; fastcgi_request_buffering off; diff --git a/018-dockge.conf b/018-dockge.conf new file mode 100644 index 0000000..0dfc314 --- /dev/null +++ b/018-dockge.conf @@ -0,0 +1,46 @@ +server { + listen 80; + #listen [::]:80; + server_name dockge.solusar.de; + + # Enforce HTTPS + return 301 https://$server_name$request_uri; +} + +server { + listen 443 ssl http2; + #listen [::]:443 ssl http2; + server_name dockge.solusar.de; + + #ssl on; + ssl_certificate /etc/letsencrypt/live/dockge.solusar.de/fullchain.pem; + ssl_trusted_certificate /etc/letsencrypt/live/dockge.solusar.de/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/dockge.solusar.de/privkey.pem; + + ssl_dhparam /etc/myssl/dh4096.pem; + ssl_protocols TLSv1.2; + ssl_ciphers 'ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK'; + ssl_session_timeout 5m; + ssl_prefer_server_ciphers on; + ssl_session_cache shared:SSL:50m; + + add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"; + #add_header X-Frame-Options "SAMEORIGIN"; + #add_header X-Content-Type-Options nosniff; + #add_header X-XSS-Protection "1; mode=block"; + #add_header Content-Security-Policy "default-src 'none'; font-src 'self'; script-src 'self' 'unsafe-inline' https://nc.solusar.de; img-src * data:; object-src 'none'; style-src 'self' 'unsafe-inline' 'sha256-bQfd5MwpJ1ZxnVh373acxlqXQ8VwM88QhEHNuQ0ppNg='; frame-src 'self'; connect-src 'self'; form-action 'self'; base-uri 'self';frame-ancestors 'self';"; + + charset utf-8; + + root /var/www/default; + + access_log /var/log/nginx/016-dockge.org-access.log; + error_log /var/log/nginx/016-dockge-error.log; + #client_max_body_size 300m; + + location / { + proxy_pass http://localhost:5001; + proxy_set_header Host $host; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for ; + } +} diff --git a/default.dpkg-dist b/default.dpkg-dist new file mode 100644 index 0000000..c5af914 --- /dev/null +++ b/default.dpkg-dist @@ -0,0 +1,91 @@ +## +# You should look at the following URL's in order to grasp a solid understanding +# of Nginx configuration files in order to fully unleash the power of Nginx. +# https://www.nginx.com/resources/wiki/start/ +# https://www.nginx.com/resources/wiki/start/topics/tutorials/config_pitfalls/ +# https://wiki.debian.org/Nginx/DirectoryStructure +# +# In most cases, administrators will remove this file from sites-enabled/ and +# leave it as reference inside of sites-available where it will continue to be +# updated by the nginx packaging team. +# +# This file will automatically load configuration files provided by other +# applications, such as Drupal or Wordpress. These applications will be made +# available underneath a path with that package name, such as /drupal8. +# +# Please see /usr/share/doc/nginx-doc/examples/ for more detailed examples. +## + +# Default server configuration +# +server { + listen 80 default_server; + listen [::]:80 default_server; + + # SSL configuration + # + # listen 443 ssl default_server; + # listen [::]:443 ssl default_server; + # + # Note: You should disable gzip for SSL traffic. + # See: https://bugs.debian.org/773332 + # + # Read up on ssl_ciphers to ensure a secure configuration. + # See: https://bugs.debian.org/765782 + # + # Self signed certs generated by the ssl-cert package + # Don't use them in a production server! + # + # include snippets/snakeoil.conf; + + root /var/www/html; + + # Add index.php to the list if you are using PHP + index index.html index.htm index.nginx-debian.html; + + server_name _; + + location / { + # First attempt to serve request as file, then + # as directory, then fall back to displaying a 404. + try_files $uri $uri/ =404; + } + + # pass PHP scripts to FastCGI server + # + #location ~ \.php$ { + # include snippets/fastcgi-php.conf; + # + # # With php-fpm (or other unix sockets): + # fastcgi_pass unix:/run/php/php7.4-fpm.sock; + # # With php-cgi (or other tcp sockets): + # fastcgi_pass 127.0.0.1:9000; + #} + + # deny access to .htaccess files, if Apache's document root + # concurs with nginx's one + # + #location ~ /\.ht { + # deny all; + #} +} + + +# Virtual Host configuration for example.com +# +# You can move that to a different file under sites-available/ and symlink that +# to sites-enabled/ to enable it. +# +#server { +# listen 80; +# listen [::]:80; +# +# server_name example.com; +# +# root /var/www/example.com; +# index index.html; +# +# location / { +# try_files $uri $uri/ =404; +# } +#}