From 983584a510551ea293fe0cc23ae4abf8841cae62 Mon Sep 17 00:00:00 2001 From: lilly Date: Fri, 27 Feb 2026 21:48:47 +0100 Subject: [PATCH 1/3] configure reverse proxy map explicitly for hostnames --- resources/chaosknoten/public-reverse-proxy/nginx/nginx.conf | 1 + 1 file changed, 1 insertion(+) diff --git a/resources/chaosknoten/public-reverse-proxy/nginx/nginx.conf b/resources/chaosknoten/public-reverse-proxy/nginx/nginx.conf index b126fc3..cbefa75 100644 --- a/resources/chaosknoten/public-reverse-proxy/nginx/nginx.conf +++ b/resources/chaosknoten/public-reverse-proxy/nginx/nginx.conf @@ -18,6 +18,7 @@ stream { resolver 212.12.50.158 192.76.134.90; map $ssl_preread_server_name $address { + hostnames; ccchoir.de ccchoir.hosts.hamburg.ccc.de:8443; www.ccchoir.de ccchoir.hosts.hamburg.ccc.de:8443; cloud.hamburg.ccc.de cloud.hosts.hamburg.ccc.de:8443; From bc9e76b8ed14005ace989c36feb3247016329986 Mon Sep 17 00:00:00 2001 From: lilly Date: Fri, 27 Feb 2026 21:48:47 +0100 Subject: [PATCH 2/3] remove did.hamburg.ccc.de from public-reverse-proxy --- .../chaosknoten/public-reverse-proxy/nginx/acme_challenge.conf | 2 -- resources/chaosknoten/public-reverse-proxy/nginx/nginx.conf | 2 -- 2 files changed, 4 deletions(-) diff --git a/resources/chaosknoten/public-reverse-proxy/nginx/acme_challenge.conf b/resources/chaosknoten/public-reverse-proxy/nginx/acme_challenge.conf index 6f7a57d..d79f299 100644 --- a/resources/chaosknoten/public-reverse-proxy/nginx/acme_challenge.conf +++ b/resources/chaosknoten/public-reverse-proxy/nginx/acme_challenge.conf @@ -84,8 +84,6 @@ map $host $upstream_acme_challenge_host { local.ccc.de 172.31.17.151:31820; acmedns.hamburg.ccc.de acmedns.hosts.hamburg.ccc.de:31820; diday.org 172.31.17.151:31820; - did.hamburg.ccc.de 172.31.17.151:31820; - staging.did.hamburg.ccc.de 172.31.17.151:31820; default ""; } diff --git a/resources/chaosknoten/public-reverse-proxy/nginx/nginx.conf b/resources/chaosknoten/public-reverse-proxy/nginx/nginx.conf index cbefa75..be5dd52 100644 --- a/resources/chaosknoten/public-reverse-proxy/nginx/nginx.conf +++ b/resources/chaosknoten/public-reverse-proxy/nginx/nginx.conf @@ -102,9 +102,7 @@ stream { lokal.ccc.de 172.31.17.151:8443; local.ccc.de 172.31.17.151:8443; acmedns.hamburg.ccc.de acmedns.hosts.hamburg.ccc.de:8443; - did.hamburg.ccc.de 172.31.17.151:8443; diday.org 172.31.17.151:8443; - staging.did.hamburg.ccc.de 172.31.17.151:8443; } server { From 165487884ccfda30a7836278b74ed0bcf33ac51f Mon Sep 17 00:00:00 2001 From: lilly Date: Fri, 27 Feb 2026 21:48:47 +0100 Subject: [PATCH 3/3] setup reverse-proxying for *.staging.diday.org --- resources/chaosknoten/public-reverse-proxy/nginx/nginx.conf | 1 + 1 file changed, 1 insertion(+) diff --git a/resources/chaosknoten/public-reverse-proxy/nginx/nginx.conf b/resources/chaosknoten/public-reverse-proxy/nginx/nginx.conf index be5dd52..01edbfe 100644 --- a/resources/chaosknoten/public-reverse-proxy/nginx/nginx.conf +++ b/resources/chaosknoten/public-reverse-proxy/nginx/nginx.conf @@ -103,6 +103,7 @@ stream { local.ccc.de 172.31.17.151:8443; acmedns.hamburg.ccc.de acmedns.hosts.hamburg.ccc.de:8443; diday.org 172.31.17.151:8443; + *.staging.diday.org 172.31.17.151:8443; } server {