From 167ff651a33116d979285d35c2e83fe160926778 Mon Sep 17 00:00:00 2001 From: nonphatic Date: Tue, 24 Apr 2018 00:52:31 -0700 Subject: [PATCH] Initial commit. --- default | 160 +++++++++++++++++++++++++++++++++++++++++++++++++ ex.ert.space | 45 ++++++++++++++ gitb.ert.space | 29 +++++++++ hilb.ert.space | 29 +++++++++ in.ert.space | 29 +++++++++ 5 files changed, 292 insertions(+) create mode 100644 default create mode 100644 ex.ert.space create mode 100644 gitb.ert.space create mode 100644 hilb.ert.space create mode 100644 in.ert.space diff --git a/default b/default new file mode 100644 index 0000000..43d6b0c --- /dev/null +++ b/default @@ -0,0 +1,160 @@ +## +# You should look at the following URL's in order to grasp a solid understanding +# of Nginx configuration files in order to fully unleash the power of Nginx. +# http://wiki.nginx.org/Pitfalls +# http://wiki.nginx.org/QuickStart +# http://wiki.nginx.org/Configuration +# +# Generally, you will want to move this file somewhere, and start with a clean +# file but keep this around for reference. Or just disable in sites-enabled. +# +# Please see /usr/share/doc/nginx-doc/examples/ for more detailed examples. +## + +# Default server configuration +# +server { + listen 80 default_server; + listen [::]:80 default_server; + + # SSL configuration + # + # listen 443 ssl default_server; + # listen [::]:443 ssl default_server; + # + # Note: You should disable gzip for SSL traffic. + # See: https://bugs.debian.org/773332 + # + # Read up on ssl_ciphers to ensure a secure configuration. + # See: https://bugs.debian.org/765782 + # + # Self signed certs generated by the ssl-cert package + # Don't use them in a production server! + # + # include snippets/snakeoil.conf; + + root /var/www/html; + + # Add index.php to the list if you are using PHP + index index.html index.htm index.nginx-debian.html; + + server_name _; + + location / { + # First attempt to serve request as file, then + # as directory, then fall back to displaying a 404. + try_files $uri $uri/ =404; + } + + # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000 + # + #location ~ \.php$ { + # include snippets/fastcgi-php.conf; + # + # # With php7.0-cgi alone: + # fastcgi_pass 127.0.0.1:9000; + # # With php7.0-fpm: + # fastcgi_pass unix:/run/php/php7.0-fpm.sock; + #} + + # deny access to .htaccess files, if Apache's document root + # concurs with nginx's one + # + #location ~ /\.ht { + # deny all; + #} +} + + +# Virtual Host configuration for example.com +# +# You can move that to a different file under sites-available/ and symlink that +# to sites-enabled/ to enable it. +# +#server { +# listen 80; +# listen [::]:80; +# +# server_name example.com; +# +# root /var/www/example.com; +# index index.html; +# +# location / { +# try_files $uri $uri/ =404; +# } +#} + +server { + + # SSL configuration + # + # listen 443 ssl default_server; + # listen [::]:443 ssl default_server; + # + # Note: You should disable gzip for SSL traffic. + # See: https://bugs.debian.org/773332 + # + # Read up on ssl_ciphers to ensure a secure configuration. + # See: https://bugs.debian.org/765782 + # + # Self signed certs generated by the ssl-cert package + # Don't use them in a production server! + # + # include snippets/snakeoil.conf; + + root /var/www/html; + + # Add index.php to the list if you are using PHP + index index.html index.htm index.nginx-debian.html; + server_name ert.space; # managed by Certbot + + + location / { + # First attempt to serve request as file, then + # as directory, then fall back to displaying a 404. + try_files $uri $uri/ =404; + } + + # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000 + # + #location ~ \.php$ { + # include snippets/fastcgi-php.conf; + # + # # With php7.0-cgi alone: + # fastcgi_pass 127.0.0.1:9000; + # # With php7.0-fpm: + # fastcgi_pass unix:/run/php/php7.0-fpm.sock; + #} + + # deny access to .htaccess files, if Apache's document root + # concurs with nginx's one + # + #location ~ /\.ht { + # deny all; + #} + + + listen [::]:443 ssl; # managed by Certbot + listen 443 ssl; # managed by Certbot + ssl_certificate /etc/letsencrypt/live/ert.space/fullchain.pem; # managed by Certbot + ssl_certificate_key /etc/letsencrypt/live/ert.space/privkey.pem; # managed by Certbot + include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot + ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot + + +} +server { + if ($host = ert.space) { + return 301 https://$host$request_uri; + } # managed by Certbot + + + listen 80 ; + listen [::]:80 ; + server_name ert.space; + return 404; # managed by Certbot + + +} + diff --git a/ex.ert.space b/ex.ert.space new file mode 100644 index 0000000..bdf07a4 --- /dev/null +++ b/ex.ert.space @@ -0,0 +1,45 @@ +server { + + root /srv/docker/syncthing/sync; + index /_h5ai/public/index.php; + + server_name ex.ert.space; + + auth_basic "Authentication Required"; + auth_basic_user_file /etc/apache2/.htpasswd; + + location / { + try_files $uri $uri/ =404; + } + + location ~ \.php$ { + include snippets/fastcgi-php.conf; + fastcgi_pass unix:/run/php/php7.0-fpm.sock; + } + + location ~ /\.ht { + deny all; + } + + listen [::]:443 ssl; # managed by Certbot + listen 443 ssl; # managed by Certbot + ssl_certificate /etc/letsencrypt/live/ex.ert.space/fullchain.pem; # managed by Certbot + ssl_certificate_key /etc/letsencrypt/live/ex.ert.space/privkey.pem; # managed by Certbot + include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot + ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot + +} +server { + if ($host = ex.ert.space) { + return 301 https://$host$request_uri; + } # managed by Certbot + + + listen 80; + listen [::]:80; + + server_name ex.ert.space; + return 404; # managed by Certbot + + +} diff --git a/gitb.ert.space b/gitb.ert.space new file mode 100644 index 0000000..4daa5e3 --- /dev/null +++ b/gitb.ert.space @@ -0,0 +1,29 @@ +server { + server_name gitb.ert.space; + location / { + proxy_pass http://localhost:3000; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + } + + listen [::]:443 ssl; # managed by Certbot + listen 443 ssl; # managed by Certbot + ssl_certificate /etc/letsencrypt/live/gitb.ert.space/fullchain.pem; # managed by Certbot + ssl_certificate_key /etc/letsencrypt/live/gitb.ert.space/privkey.pem; # managed by Certbot + include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot + ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot + +} +server { + if ($host = gitb.ert.space) { + return 301 https://$host$request_uri; + } # managed by Certbot + + + listen 80; + listen [::]:80; + server_name gitb.ert.space; + return 404; # managed by Certbot + + +} \ No newline at end of file diff --git a/hilb.ert.space b/hilb.ert.space new file mode 100644 index 0000000..663a4ee --- /dev/null +++ b/hilb.ert.space @@ -0,0 +1,29 @@ +server { + server_name hilb.ert.space; + location / { + proxy_pass http://localhost:2368; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + } + + listen [::]:443 ssl; # managed by Certbot + listen 443 ssl; # managed by Certbot + ssl_certificate /etc/letsencrypt/live/hilb.ert.space/fullchain.pem; # managed by Certbot + ssl_certificate_key /etc/letsencrypt/live/hilb.ert.space/privkey.pem; # managed by Certbot + include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot + ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot + +} +server { + if ($host = hilb.ert.space) { + return 301 https://$host$request_uri; + } # managed by Certbot + + + listen 80; + listen [::]:80; + server_name hilb.ert.space; + return 404; # managed by Certbot + + +} \ No newline at end of file diff --git a/in.ert.space b/in.ert.space new file mode 100644 index 0000000..8b4f5ae --- /dev/null +++ b/in.ert.space @@ -0,0 +1,29 @@ +server { + root /srv/www/in.ert.space; + server_name in.ert.space; + error_page 404 /404.html; + location / { + try_files $uri $uri/ =404; + } + + listen [::]:443 ssl ipv6only=on; # managed by Certbot + listen 443 ssl; # managed by Certbot + ssl_certificate /etc/letsencrypt/live/in.ert.space/fullchain.pem; # managed by Certbot + ssl_certificate_key /etc/letsencrypt/live/in.ert.space/privkey.pem; # managed by Certbot + include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot + ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot + +} +server { + if ($host = in.ert.space) { + return 301 https://$host$request_uri; + } # managed by Certbot + + + listen 80; + listen [::]:80; + server_name in.ert.space; + return 404; # managed by Certbot + + +}