aboutsummaryrefslogtreecommitdiff
path: root/gerboweb/deploy
diff options
context:
space:
mode:
Diffstat (limited to 'gerboweb/deploy')
-rw-r--r--gerboweb/deploy/nginx.conf40
-rw-r--r--gerboweb/deploy/setup_webserver.yml2
2 files changed, 42 insertions, 0 deletions
diff --git a/gerboweb/deploy/nginx.conf b/gerboweb/deploy/nginx.conf
index 6cf28cf..8d21357 100644
--- a/gerboweb/deploy/nginx.conf
+++ b/gerboweb/deploy/nginx.conf
@@ -132,6 +132,45 @@ http {
server {
listen 443 ssl http2;
listen [::]:443 ssl http2;
+ server_name kochbuch.jaseg.net kochbuch.jaseg.net;
+ root /usr/share/nginx/html;
+
+ ssl_certificate "/etc/letsencrypt/live/kochbuch.jaseg.net/fullchain.pem";
+ ssl_certificate_key "/etc/letsencrypt/live/kochbuch.jaseg.net/privkey.pem";
+ ssl_dhparam "/etc/letsencrypt/ssl-dhparams.pem";
+ include /etc/letsencrypt/options-ssl-nginx.conf;
+
+ ssl_stapling on;
+ ssl_stapling_verify on;
+
+ resolver 67.207.67.2 67.207.67.3 valid=300s;
+ resolver_timeout 10s;
+
+ add_header Strict-Transport-Security "max-age=86400";
+
+ # Load configuration files for the default server block.
+ include /etc/nginx/default.d/*.conf;
+
+ location / {
+ auth_basic "blubb";
+ auth_basic_user_file /etc/nginx/kochbuch.htpasswd;
+ root /var/www/kochbuch.jaseg.net;
+ }
+
+ error_page 404 /404.html;
+ location = /40x.html {
+ root /usr/share/nginx/html;
+ }
+
+ error_page 500 502 503 504 /50x.html;
+ location = /50x.html {
+ root /usr/share/nginx/html;
+ }
+ }
+
+ server {
+ listen 443 ssl http2;
+ listen [::]:443 ssl http2;
server_name pogojig.jaseg.net;
root /usr/share/nginx/html;
@@ -145,6 +184,7 @@ http {
resolver 67.207.67.2 67.207.67.3 valid=300s;
resolver_timeout 10s;
+ client_max_body_size 10M;
add_header Strict-Transport-Security "max-age=86400";
diff --git a/gerboweb/deploy/setup_webserver.yml b/gerboweb/deploy/setup_webserver.yml
index 671a699..1405bed 100644
--- a/gerboweb/deploy/setup_webserver.yml
+++ b/gerboweb/deploy/setup_webserver.yml
@@ -18,6 +18,7 @@
mode: 0550
loop:
- blog.jaseg.net
+ - kochbuch.jaseg.net
- tracespace.jaseg.net
- openjscad.jaseg.net
@@ -48,6 +49,7 @@
creates: /etc/letsencrypt/live/{{item}}/fullchain.pem
loop:
- blog.jaseg.net
+ - kochbuch.jaseg.net
- gerbolyze.jaseg.net
- tracespace.jaseg.net
- openjscad.jaseg.net