nginx.conf/conf.d/ad-ari-lt.conf
Arija A. c4f0aaea5f
Initialise Nginx config
Signed-off-by: Arija A. <ari@ari.lt>
2025-09-25 22:45:48 +03:00

65 lines
1.7 KiB
Text

server {
server_name ad.ari.lt;
http2 on;
listen 80;
listen [::]:80;
limit_req zone=all burst=5 delay=5;
limit_req zone=allm burst=5 delay=5;
include /etc/nginx/snippets.d/paranoia-headers.conf;
add_header Onion-Location "http://ad.arija664fy4c6zhfbsytbqcbz5gcc3qjuwaz4ue6cium5c5fo2fgakyd.onion$request_uri" always;
return 301 https://$server_name$request_uri;
}
server {
server_name ad.ari.lt;
http2 on;
listen 443 ssl;
listen [::]:443 ssl;
add_header Onion-Location "http://ad.arija664fy4c6zhfbsytbqcbz5gcc3qjuwaz4ue6cium5c5fo2fgakyd.onion$request_uri" always;
ssl_certificate /etc/letsencrypt/live/ari.lt-0001/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/ari.lt-0001/privkey.pem;
ssl_trusted_certificate /etc/letsencrypt/live/ari.lt-0001/chain.pem;
include /etc/nginx/snippets.d/ssl.conf;
limit_req zone=all burst=32 delay=5;
limit_req zone=allm burst=32 delay=5;
location = /.well-known/nginx/5xx.html {
root /var/www/nginx/html;
internal;
}
location / {
include /etc/nginx/snippets.d/proxy.conf;
include /etc/nginx/snippets.d/gzip.conf;
proxy_pass http://127.0.0.1:14714;
}
}
server {
server_name ad.arija664fy4c6zhfbsytbqcbz5gcc3qjuwaz4ue6cium5c5fo2fgakyd.onion;
http2 on;
listen 80;
limit_req zone=all burst=32 delay=5;
limit_req zone=allm burst=32 delay=5;
location = /.well-known/nginx/5xx.html {
root /var/www/nginx/html;
internal;
}
location / {
include /etc/nginx/snippets.d/proxy.conf;
include /etc/nginx/snippets.d/gzip.conf;
proxy_pass http://127.0.0.1:14714;
}
}