asxpi/nginx
asxpi/nginx
1
0
Fork 0
Code Issues Pull requests Activity

initial commit

Browse source
This commit is contained in:
Sergei Poljanski 2023-08-02 19:42:42 +00:00
commit 7977d297ac
28 changed files with 21761 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

77
sites-available/asxp.io Normal file
View file

@ -0,0 +1,77 @@
#asxp.io
server {
if ($host = www.asxp.io) {
return 301 https://$host$request_uri;
} # managed by Certbot
if ($host = asxp.io) {
return 301 https://$host$request_uri;
} # managed by Certbot
listen 80;
server_name www.asxp.io asxp.io;
listen [::]:80;
server_name www.asxp.io asxp.io;
root /srv/http/asxpio;
#root /srv/http/photos;
index index.html;
server_name _;
return 444;
location / {
try_files $uri $uri/ =404;
}
}
server {
root /srv/http/asxpio;
#root /srv/http/photos;
index index.html;
server_name asxp.io www.asxp.io; # managed by Certbot
location / {
# First attempt to serve request as file, then
# as directory, then fall back to displaying a 404.
try_files $uri $uri/ =404;
}
location ~ \.php$ {
fastcgi_pass unix:/var/run/php-fpm/php-fpm.sock;
fastcgi_index index.php;
root /srv/http/asxpio;
include fastcgi.conf;
}
# deny access to .htaccess files, if Apache's document root
# concurs with nginx's one
#
#location ~ /\.ht {
# deny all;
#}
#listen [::]:443 ssl ipv6only=on; # managed by Certbot
#listen [::]:443;
#ssl on;
listen 443 ssl; # managed by Certbot
ssl_certificate /etc/letsencrypt/live/asxp.io/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/asxp.io/privkey.pem; # managed by Certbot
include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
##
# Nginx Bad Bot Blocker Includes
# REPO: https://github.com/mitchellkrogza/nginx-ultimate-bad-bot-blocker
##
#include /etc/nginx/bots.d/ddos.conf;
#include /etc/nginx/bots.d/blockbots.conf;
}

45
sites-available/gitea Normal file
View file

@ -0,0 +1,45 @@
server {
if ($host = www.git.asxp.io) {
return 301 https://$host$request_uri;
} # managed by Certbot
if ($host = git.asxp.io) {
return 301 https://$host$request_uri;
} # managed by Certbot
listen 80;
server_name www.git.asxp.io git.asxp.io;
listen [::]:80;
server_name www.git.asxp.io git.asxp.io;
server_name _;
return 444;
location / {
proxy_pass http://localhost:3000;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
}
}
server {
listen 443 ssl http2;
listen [::]:443 ssl http2;
server_name git.asxp.io;
ssl_certificate /etc/letsencrypt/live/asxp.io/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/asxp.io/privkey.pem; # managed by Certbot
location / {
proxy_pass http://localhost:3000;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
}
}

75
sites-available/photos.asxp.io Normal file
View file

@ -0,0 +1,75 @@
#asxp.io
server {
if ($host = www.photos.asxp.io) {
return 301 https://$host$request_uri;
} # managed by Certbot
if ($host = photos.asxp.io) {
return 301 https://$host$request_uri;
} # managed by Certbot
listen 80;
server_name www.photos.asxp.io photos.asxp.io;
listen [::]:80;
server_name www.photos.asxp.io photos.asxp.io;
root /srv/http/photos;
index index.html;
server_name _;
return 444;
location / {
try_files $uri $uri/ =404;
}
}
server {
root /srv/http/photos;
index index.html;
server_name photos.asxp.io www.photos.asxp.io; # managed by Certbot
location / {
# First attempt to serve request as file, then
# as directory, then fall back to displaying a 404.
try_files $uri $uri/ =404;
}
location ~ \.php$ {
fastcgi_pass unix:/var/run/php-fpm/php-fpm.sock;
fastcgi_index index.php;
root /srv/http/photos;
include fastcgi.conf;
}
# deny access to .htaccess files, if Apache's document root
# concurs with nginx's one
#
#location ~ /\.ht {
# deny all;
#}
#listen [::]:443 ssl ipv6only=on; # managed by Certbot
#listen [::]:443;
#ssl on;
listen 443 ssl; # managed by Certbot
ssl_certificate /etc/letsencrypt/live/asxp.io/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/asxp.io/privkey.pem; # managed by Certbot
include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
##
# Nginx Bad Bot Blocker Includes
# REPO: https://github.com/mitchellkrogza/nginx-ultimate-bad-bot-blocker
##
include /etc/nginx/bots.d/ddos.conf;
include /etc/nginx/bots.d/blockbots.conf;
}

11
sites-available/upload.asxp.io Normal file
View file

@ -0,0 +1,11 @@
server {
listen 80;
listen 443 ssl;
server_name upload.asxp.io;
location /content {
root /var/telegabber/content/.. ;
}
ssl_certificate /etc/letsencrypt/live/asxp.io/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/asxp.io/privkey.pem; # managed by Certbot
}

18
sites-available/uptime.asxp.io Normal file
View file

@ -0,0 +1,18 @@
server {
listen 443 ssl http2;
# Remove '#' in the next line to enable IPv6
# listen [::]:443 ssl http2;
server_name uptime.asxp.io;
ssl_certificate /etc/letsencrypt/live/asxp.io/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/asxp.io/privkey.pem; # managed by Certbot
location / {
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Host $host;
proxy_pass http://localhost:3001/;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
}
}