gru/linuxiarz_vps_angie
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

work in progress

Browse Source
This commit is contained in:
root
2025-11-16 23:45:16 +01:00
parent 4970352314
commit 24c11e8810
50 changed files with 243 additions and 1413 deletions
Download Patch File Download Diff File Expand all files Collapse all files

26
sites-available/gruszczynski.eu.org_varnish.conf
View File

@@ -7,15 +7,13 @@ server {
# security
include config/security.conf;
status_zone gruszczynski.eu.org_backend;
# restrict methods
if ($request_method !~ ^(GET)$) {
return '405';
}
# logging
#access_log /var/log/nginx/gruszczynski.eu.org.access.log;
#error_log /var/log/nginx/gruszczynski.eu.org.error.log warn;
# index.php
index index.php index.html;
@@ -42,32 +40,27 @@ server {
server_name www.gruszczynski.eu.org;
ssl_certificate /etc/letsencrypt/live/gruszczynski.eu.org/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/gruszczynski.eu.org/privkey.pem;
ssl_trusted_certificate /etc/letsencrypt/live/gruszczynski.eu.org/chain.pem;
ssl_certificate /etc/ssl/gruszczynski.eu.org/fullchain.pem;
ssl_certificate_key /etc/ssl/gruszczynski.eu.org/privkey.pem;
# ssl cfg
include config/ssl_cfg.conf;
status_zone gruszczynski.eu.org_frontend;
location / {
proxy_pass http://127.0.0.1:6081/;
proxy_pass http://varnish/;
include config/proxy.conf;
}
}
# HTTP redirect
server {
listen 80;
add_header Alt-Svc 'h3=":443"; ma=86400';
server_name gruszczynski.eu.org www.gruszczynski.eu.org;
include config/letsencrypt.conf;
# restrict methods
if ($request_method !~ ^(GET)$) {
return '405';
@@ -89,9 +82,8 @@ server {
server_name gruszczynski.eu.org;
ssl_certificate /etc/letsencrypt/live/gruszczynski.eu.org/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/gruszczynski.eu.org/privkey.pem;
ssl_trusted_certificate /etc/letsencrypt/live/gruszczynski.eu.org/chain.pem;
ssl_certificate /etc/ssl/gruszczynski.eu.org/fullchain.pem;
ssl_certificate_key /etc/ssl/gruszczynski.eu.org/privkey.pem;
# ssl cfg
include config/ssl_cfg.conf;