From 9d1d0ada3a3e73a4b08c62d7d06f587d0907b335 Mon Sep 17 00:00:00 2001 From: Valentin Popov Date: Tue, 28 Apr 2020 15:34:13 +0400 Subject: Initial NGINX Signed-off-by: Valentin Popov --- debian/personal-vps/nginx/conf.d/code.conf | 27 ++++++++++++++ debian/personal-vps/nginx/conf.d/default.conf | 15 ++++++++ debian/personal-vps/nginx/conf.d/gist.conf | 41 ++++++++++++++++++++++ .../personal-vps/nginx/conf.d/redirect_http.conf | 8 +++++ debian/personal-vps/nginx/conf.d/sync.conf | 27 ++++++++++++++ 5 files changed, 118 insertions(+) create mode 100644 debian/personal-vps/nginx/conf.d/code.conf create mode 100644 debian/personal-vps/nginx/conf.d/default.conf create mode 100644 debian/personal-vps/nginx/conf.d/gist.conf create mode 100644 debian/personal-vps/nginx/conf.d/redirect_http.conf create mode 100644 debian/personal-vps/nginx/conf.d/sync.conf (limited to 'debian/personal-vps/nginx/conf.d') diff --git a/debian/personal-vps/nginx/conf.d/code.conf b/debian/personal-vps/nginx/conf.d/code.conf new file mode 100644 index 0000000..b0cf60d --- /dev/null +++ b/debian/personal-vps/nginx/conf.d/code.conf @@ -0,0 +1,27 @@ +map $http_upgrade $connection_upgrade { + default upgrade; + "" close; +} + +server { + charset utf-8; + listen 443 ssl http2; + listen [::]:443 ssl http2; + root /var/www/html; + server_name code.valentineus.link; + + access_log off; + error_log /var/log/nginx/code/error.log warn; + + location / { + proxy_http_version 1.1; + proxy_pass http://unix:/var/run/gitea/gitea.sock; + + proxy_set_header Connection $connection_upgrade; + proxy_set_header Host $host; + proxy_set_header Upgrade $http_upgrade; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + proxy_set_header X-Real-IP $remote_addr; + } +} \ No newline at end of file diff --git a/debian/personal-vps/nginx/conf.d/default.conf b/debian/personal-vps/nginx/conf.d/default.conf new file mode 100644 index 0000000..fc9cd26 --- /dev/null +++ b/debian/personal-vps/nginx/conf.d/default.conf @@ -0,0 +1,15 @@ +server { + charset utf-8; + listen 443 ssl http2; + listen [::]:443 ssl http2; + root /usr/share/nginx/html; + server_name valentineus.link + *.valentineus.link; + + access_log /var/log/nginx/default/access.log; + error_log /var/log/nginx/default/error.log warn; + + location / { + index index.html; + } +} \ No newline at end of file diff --git a/debian/personal-vps/nginx/conf.d/gist.conf b/debian/personal-vps/nginx/conf.d/gist.conf new file mode 100644 index 0000000..cae6608 --- /dev/null +++ b/debian/personal-vps/nginx/conf.d/gist.conf @@ -0,0 +1,41 @@ +server { + charset utf-8; + listen 443 ssl http2; + listen [::]:443 ssl http2; + root /var/www/html/PrivateBin; + server_name gist.valentineus.link; + + access_log off; + error_log /var/log/nginx/gist/error.log warn; + + location ~* \.(jpg|jpeg|gif|css|png|js|map|woff|woff2|ttf|svg|eot)$ { + access_log off; + expires 30d; + } + + location ~ ^/(data|cfg|tmp) { + deny all; + } + + location ~* /(.*)\.(?:markdown|md|twig|yaml|yml|ht|htaccess|ini)$ { + deny all; + } + + location ~ /\. { + deny all; + } + + location ~ [^/]\.(php|html|htm)(/|$) { + include fastcgi_params; + fastcgi_pass unix:/run/php/php7.3-fpm.sock; + fastcgi_index index.php; + fastcgi_param PATH_INFO $fastcgi_path_info; + fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; + fastcgi_split_path_info ^(.+\.php)(/.+)$; + } + + location / { + index index.php; + try_files $uri $uri/ /index.php; + } +} \ No newline at end of file diff --git a/debian/personal-vps/nginx/conf.d/redirect_http.conf b/debian/personal-vps/nginx/conf.d/redirect_http.conf new file mode 100644 index 0000000..897d6d7 --- /dev/null +++ b/debian/personal-vps/nginx/conf.d/redirect_http.conf @@ -0,0 +1,8 @@ +server { + listen 80 default_server; + listen [::]:80 default_server; + return 301 https://$host$request_uri; + + access_log off; + error_log off; +} \ No newline at end of file diff --git a/debian/personal-vps/nginx/conf.d/sync.conf b/debian/personal-vps/nginx/conf.d/sync.conf new file mode 100644 index 0000000..c76466d --- /dev/null +++ b/debian/personal-vps/nginx/conf.d/sync.conf @@ -0,0 +1,27 @@ +map $http_upgrade $connection_upgrade { + default upgrade; + "" close; +} + +server { + charset utf-8; + listen 443 ssl http2; + listen [::]:443 ssl http2; + root /var/www/html; + server_name sync.valentineus.link; + + access_log off; + error_log /var/log/nginx/sync/error.log warn; + + location / { + proxy_http_version 1.1; + proxy_pass http://127.0.0.1:8384; + + proxy_set_header Connection $connection_upgrade; + proxy_set_header Host $host; + proxy_set_header Upgrade $http_upgrade; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + proxy_set_header X-Real-IP $remote_addr; + } +} \ No newline at end of file -- cgit v1.2.3