michael/containers
1
0
Fork 0
Code Packages

working

Browse Source
This commit is contained in:
= 2024-12-15 00:18:37 -05:00
parent d83f14f47b
commit 3e7007bbb9
2 changed files with 79 additions and 41 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
nginx-balsillie-net/Dockerfile
View File

@ -1,4 +1,4 @@
FROM nginxinc/nginx-unprivileged:stable-alpine FROM nginxinc/nginx-unprivileged:stable-alpine
COPY --chown=nginx:nginx content /usr/share/nginx/html COPY --chown=nginx:nginx content /usr/share/nginx/html
COPY --chown=nginx:nginx nginx.conf /etc/nginx/nginx.conf COPY --chown=nginx:nginx default.conf /etc/nginx/conf.d/default.conf
USER nginx USER nginx

118
nginx-balsillie-net/default.conf
View File

@ -1,50 +1,88 @@
http2 on;
ssl_certificate /usr/share/nginx/ssl/tls.crt;
ssl_certificate_key /usr/share/nginx/ssl/tls.key;
ssl_protocols TLSv1.2 TLSv1.3;
ssl_ciphers ALL:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM;
ssl_prefer_server_ciphers on;
ssl_session_cache shared:SSL:10m;
ssl_session_timeout 10m;
server { server {
listen 8080 default_server; listen 8080;
server_name _; server_name balsillie.net balsillie.email openpgpkey.balsillie.net openpgpkey.balsillie.email;
return 301 https://$host$request_uri; return 301 https://$host$request_uri;
} }
server { server {
listen 8443 ssl: listen 8080 default_server;
server_name balsillie.net; return 444;
http2 on; }
#access_log /var/log/nginx/host.access.log main; server {
listen 8443 ssl;
server_name balsillie.net;
location = /michael.vcf {
default_type application/octet-stream;
root /usr/share/nginx/html;
}
location = /.well-known/mta-sts.txt {
default_type application/octet-stream;
root /usr/share/nginx/html/mta-sts/balsillie_net;
}
location /.well-known/host-meta {
return 301 https://social.balsillie.net$request_uri;
}
location /.well-known/webfinger {
return 301 https://social.balsillie.net$request_uri;
}
location /.well-known/nodeinfo {
return 301 https://social.balsillie.net$request_uri;
}
location /.well-known/matrix/ {
default_type application/json;
root /usr/share/nginx/html;
}
location / { location / {
root /usr/share/nginx/html; return 444;
index index.html index.htm;
} }
}
#error_page 404 /404.html;
server {
# redirect server error pages to the static page /50x.html listen 8443 ssl;
# server_name balsillie.email;
error_page 500 502 503 504 /50x.html;
location = /50x.html { location = /.well-known/mta-sts.txt {
root /usr/share/nginx/html; default_type application/octet-stream;
} root /usr/share/nginx/html/mta-sts/balsillie_email;
}
# proxy the PHP scripts to Apache listening on 127.0.0.1:80
# location / {
#location ~ \.php$ { return 444;
# proxy_pass http://127.0.0.1; }
#} }
# pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000 server {
# listen 8443 ssl;
#location ~ \.php$ { server_name openpgpkey.balsillie.net openpgpkey.balsillie.email;
# root html;
# fastcgi_pass 127.0.0.1:9000; location /.well-known/openpgpkey {
# fastcgi_index index.php; default_type application/octet-stream;
# fastcgi_param SCRIPT_FILENAME /scripts$fastcgi_script_name; root /usr/share/nginx/html;
# include fastcgi_params; }
#}
location / {
# deny access to .htaccess files, if Apache's document root return 444;
# concurs with nginx's one }
# }
#location ~ /\.ht {
# deny all; server {
#} listen 8443 ssl default_server;
ssl_reject_handshake on;
} }