76 lines
1.8 KiB
Text
76 lines
1.8 KiB
Text
server {
|
|
server_name muc.ari.lt ps.ari.lt relay.ari.lt xmpp.ari.lt;
|
|
|
|
http2 on;
|
|
listen 80;
|
|
listen [::]:80;
|
|
|
|
limit_req zone=all burst=5 delay=5;
|
|
limit_req zone=allm burst=5 delay=5;
|
|
|
|
include /etc/nginx/snippets.d/paranoia-headers.conf;
|
|
|
|
return 301 https://ari.lt/;
|
|
}
|
|
|
|
server {
|
|
server_name muc.ari.lt ps.ari.lt relay.ari.lt xmpp.ari.lt;
|
|
|
|
http2 on;
|
|
listen 443 ssl;
|
|
listen [::]:443 ssl;
|
|
|
|
limit_req zone=all burst=5 delay=5;
|
|
limit_req zone=allm burst=5 delay=5;
|
|
|
|
include /etc/nginx/snippets.d/paranoia-headers.conf;
|
|
|
|
ssl_certificate /etc/letsencrypt/live/ari.lt-0001/fullchain.pem;
|
|
ssl_certificate_key /etc/letsencrypt/live/ari.lt-0001/privkey.pem;
|
|
ssl_trusted_certificate /etc/letsencrypt/live/ari.lt-0001/chain.pem;
|
|
include /etc/nginx/snippets.d/ssl.conf;
|
|
|
|
return 301 https://ari.lt/;
|
|
}
|
|
|
|
server {
|
|
server_name ht.ari.lt;
|
|
|
|
http2 on;
|
|
listen 80;
|
|
listen [::]:80;
|
|
|
|
limit_req zone=all burst=5 delay=5;
|
|
limit_req zone=allm burst=5 delay=5;
|
|
|
|
include /etc/nginx/snippets.d/paranoia-headers.conf;
|
|
|
|
return 301 https://ari.lt/;
|
|
}
|
|
|
|
server {
|
|
http2 on;
|
|
listen 443 ssl;
|
|
listen [::]:443 ssl;
|
|
|
|
server_name ht.ari.lt;
|
|
server_tokens off;
|
|
|
|
add_header X-Content-Type-Options "nosniff" always;
|
|
|
|
limit_req zone=all burst=15 delay=5;
|
|
limit_req zone=allm burst=15 delay=5;
|
|
|
|
ssl_certificate /etc/letsencrypt/live/ari.lt-0001/fullchain.pem;
|
|
ssl_certificate_key /etc/letsencrypt/live/ari.lt-0001/privkey.pem;
|
|
ssl_trusted_certificate /etc/letsencrypt/live/ari.lt-0001/chain.pem;
|
|
include /etc/nginx/snippets.d/ssl.conf;
|
|
|
|
include /etc/nginx/snippets.d/5xx.conf;
|
|
|
|
location / {
|
|
include /etc/nginx/snippets.d/proxy-rt.conf;
|
|
client_max_body_size 512M;
|
|
proxy_pass http://127.0.0.1:5280;
|
|
}
|
|
}
|