freifunk/ansible-config
0
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

New nginx role

Browse source
This commit is contained in:
Alexander Dietrich 2018-11-03 16:20:39 +01:00
commit 7956d09b3e
22 changed files with 122 additions and 130 deletions
Download patch file Download diff file Expand all files Collapse all files

3
roles/nginx/files/snippets/autoindex.conf Normal file
View file

@ -0,0 +1,3 @@
autoindex on;
autoindex_exact_size on;
autoindex_localtime off;

5
roles/nginx/files/snippets/error-pages.conf Normal file
View file

@ -0,0 +1,5 @@
error_page 502 /_error-pages/502.html;
location ^~ /_error-pages {
root /var/www;
}

1
roles/nginx/files/snippets/header-hsts.conf Normal file
View file

@ -0,0 +1 @@
add_header Strict-Transport-Security 'max-age=31536000';

6
roles/nginx/files/snippets/location-acme-srv01.conf Normal file
View file

@ -0,0 +1,6 @@
location ^~ /.well-known/acme-challenge {
proxy_set_header Host $host;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_pass http://srv01.hamburg.freifunk.net$request_uri;
access_log off;
}

5
roles/nginx/files/snippets/location-acme.conf Normal file
View file

@ -0,0 +1,5 @@
location ^~ /.well-known/acme-challenge {
root /var/www/_acme-challenge;
try_files $uri $uri/ =404;
access_log off;
}

8
roles/nginx/files/snippets/no-unsafe-files.conf Normal file
View file

@ -0,0 +1,8 @@
disable_symlinks on from=$document_root;
# Do not serve dotfiles.
location ~ /\. {
deny all;
access_log off;
log_not_found off;
}