New nginx role
This commit is contained in:
parent
71caecc508
commit
7956d09b3e
22 changed files with 122 additions and 130 deletions
3
roles/nginx/files/snippets/autoindex.conf
Normal file
3
roles/nginx/files/snippets/autoindex.conf
Normal file
|
@ -0,0 +1,3 @@
|
|||
autoindex on;
|
||||
autoindex_exact_size on;
|
||||
autoindex_localtime off;
|
5
roles/nginx/files/snippets/error-pages.conf
Normal file
5
roles/nginx/files/snippets/error-pages.conf
Normal file
|
@ -0,0 +1,5 @@
|
|||
error_page 502 /_error-pages/502.html;
|
||||
|
||||
location ^~ /_error-pages {
|
||||
root /var/www;
|
||||
}
|
1
roles/nginx/files/snippets/header-hsts.conf
Normal file
1
roles/nginx/files/snippets/header-hsts.conf
Normal file
|
@ -0,0 +1 @@
|
|||
add_header Strict-Transport-Security 'max-age=31536000';
|
6
roles/nginx/files/snippets/location-acme-srv01.conf
Normal file
6
roles/nginx/files/snippets/location-acme-srv01.conf
Normal file
|
@ -0,0 +1,6 @@
|
|||
location ^~ /.well-known/acme-challenge {
|
||||
proxy_set_header Host $host;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
proxy_pass http://srv01.hamburg.freifunk.net$request_uri;
|
||||
access_log off;
|
||||
}
|
5
roles/nginx/files/snippets/location-acme.conf
Normal file
5
roles/nginx/files/snippets/location-acme.conf
Normal file
|
@ -0,0 +1,5 @@
|
|||
location ^~ /.well-known/acme-challenge {
|
||||
root /var/www/_acme-challenge;
|
||||
try_files $uri $uri/ =404;
|
||||
access_log off;
|
||||
}
|
8
roles/nginx/files/snippets/no-unsafe-files.conf
Normal file
8
roles/nginx/files/snippets/no-unsafe-files.conf
Normal file
|
@ -0,0 +1,8 @@
|
|||
disable_symlinks on from=$document_root;
|
||||
|
||||
# Do not serve dotfiles.
|
||||
location ~ /\. {
|
||||
deny all;
|
||||
access_log off;
|
||||
log_not_found off;
|
||||
}
|
Loading…
Add table
Add a link
Reference in a new issue