caelebfi/nginx-vhosts
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

added ghost vhosts

Browse Source
This commit is contained in:
root
2024-12-18 11:07:23 +01:00
parent 0227afb258
commit dcc16fb632
3 changed files with 74 additions and 18 deletions
Download Patch File Download Diff File Expand all files Collapse all files
018-dockge.conf
+3 -3
View File
@@ -34,12 +34,12 @@ server {
root /var/www/default; root /var/www/default;
access_log /var/log/nginx/016-dockge.org-access.log; access_log /var/log/nginx/018-dockge.org-access.log;
error_log /var/log/nginx/016-dockge-error.log; error_log /var/log/nginx/018-dockge-error.log;
#client_max_body_size 300m; #client_max_body_size 300m;
location / { location / {
proxy_pass http://localhost:5001; proxy_pass http://localhost:5002;
proxy_set_header Host $host; proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for ; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for ;
} }
019-ghost.conf
+20 -15
View File
@@ -1,7 +1,7 @@
server { server {
listen 80; listen 80;
#listen [::]:80; #listen [::]:80;
server_name ghost.solusar.de; server_name solusar.de www.solusar.de;
# Enforce HTTPS # Enforce HTTPS
return 301 https://$server_name$request_uri; return 301 https://$server_name$request_uri;
@@ -10,12 +10,12 @@ server {
server { server {
listen 443 ssl http2; listen 443 ssl http2;
#listen [::]:443 ssl http2; #listen [::]:443 ssl http2;
server_name ghost.solusar.de; server_name solusar.de www.solusar.de;
#ssl on; #ssl on;
ssl_certificate /etc/letsencrypt/live/dokge.solusar.de/fullchain.pem; ssl_certificate /etc/letsencrypt/live/www.solusar.de/fullchain.pem;
ssl_trusted_certificate /etc/letsencrypt/live/dockge.solusar.de/fullchain.pem; ssl_trusted_certificate /etc/letsencrypt/live/www.solusar.de/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/dockge.solusar.de/privkey.pem; ssl_certificate_key /etc/letsencrypt/live/www.solusar.de/privkey.pem;
ssl_dhparam /etc/myssl/dh4096.pem; ssl_dhparam /etc/myssl/dh4096.pem;
ssl_protocols TLSv1.2; ssl_protocols TLSv1.2;
@@ -25,22 +25,27 @@ server {
ssl_session_cache shared:SSL:50m; ssl_session_cache shared:SSL:50m;
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"; add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload";
#add_header X-Frame-Options "SAMEORIGIN"; add_header X-Frame-Options "SAMEORIGIN";
#add_header X-Content-Type-Options nosniff; add_header X-Content-Type-Options nosniff;
#add_header X-XSS-Protection "1; mode=block"; add_header X-XSS-Protection "1; mode=block";
#add_header Content-Security-Policy "default-src 'none'; font-src 'self'; script-src 'self' 'unsafe-inline' https://nc.solusar.de; img-src * data:; object-src 'none'; style-src 'self' 'unsafe-inline' 'sha256-bQfd5MwpJ1ZxnVh373acxlqXQ8VwM88QhEHNuQ0ppNg='; frame-src 'self'; connect-src 'self'; form-action 'self'; base-uri 'self';frame-ancestors 'self';"; add_header Content-Security-Policy "default-src 'none'; child-src 'self'; connect-src 'self' localhost ghost.org resources.ghost.io api.unsplash.com; img-src 'self' data: https: *.gravatar.com *.unsplash.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' localhost cdn.jsdelivr.net api.instagram.com pagead2.googlesyndication.com; style-src 'self' 'unsafe-inline' https: fonts.googleapis.com; font-src 'self' data: https: fonts.googleapis.com themes.googleusercontent.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self' www.paypal.com; media-src https:;";
add_header X-Clacks-Overhead "GNU Terry Pratchett";
charset utf-8; charset utf-8;
root /var/www/default; root /var/www/default;
access_log /var/log/nginx/016-ghost.org-access.log; access_log /var/log/nginx/019-ghost.org-access.log;
error_log /var/log/nginx/016-ghost-error.log; error_log /var/log/nginx/019-ghost-error.log;
#client_max_body_size 300m;
client_max_body_size 50m;
location / { location / {
proxy_pass http://localhost:5001; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Host $host; proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for ; proxy_set_header X-Real-IP $remote_addr;
proxy_set_header Host $http_host;
proxy_pass http://127.0.0.1:8080;
} }
} }
020-ghost-slg.conf
+51
View File
@@ -0,0 +1,51 @@
server {
listen 80;
#listen [::]:80;
server_name slg-uetze.de www.slg-uetze.de;
# Enforce HTTPS
return 301 https://$server_name$request_uri;
}
server {
listen 443 ssl http2;
#listen [::]:443 ssl http2;
server_name slg-uetze.de www.slg-uetze.de;
#ssl on;
ssl_certificate /etc/letsencrypt/live/www.slg-uetze.de/fullchain.pem;
ssl_trusted_certificate /etc/letsencrypt/live/www.slg-uetze.de/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/www.slg-uetze.de/privkey.pem;
ssl_dhparam /etc/myssl/dh4096.pem;
ssl_protocols TLSv1.2;
ssl_ciphers 'ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK';
ssl_session_timeout 5m;
ssl_prefer_server_ciphers on;
ssl_session_cache shared:SSL:50m;
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload";
add_header X-Frame-Options "SAMEORIGIN";
add_header X-Content-Type-Options nosniff;
add_header X-XSS-Protection "1; mode=block";
add_header Content-Security-Policy "default-src 'none'; child-src 'self' *.solusar.de *.ghost.io; connect-src 'self' localhost ghost.org resources.ghost.io api.unsplash.com; img-src 'self' data: https: *.gravatar.com *.unsplash.com *.solusar.de; script-src 'self' 'unsafe-eval' 'unsafe-inline' localhost cdn.jsdelivr.net api.instagram.com pagead2.googlesyndication.com code.jquery.com; style-src 'self' 'unsafe-inline' https: fonts.googleapis.com; font-src 'self' data: https: fonts.googleapis.com themes.googleusercontent.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self' www.paypal.com; media-src https:;";
add_header X-Clacks-Overhead "GNU Terry Pratchett";
charset utf-8;
root /var/www/default;
access_log /var/log/nginx/019-ghost.org-access.log;
error_log /var/log/nginx/019-ghost-error.log;
client_max_body_size 50m;
location / {
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header Host $http_host;
proxy_pass http://127.0.0.1:8081;
}
}