From 996d47f17580cd6b9efcbd78b97aba13f8e487e3 Mon Sep 17 00:00:00 2001 From: jaseg Date: Fri, 17 Jan 2020 00:51:31 +0100 Subject: Add kochbuch --- gerboweb/deploy/nginx.conf | 40 +++++++++++++++++++++++++++++++++++++ gerboweb/deploy/setup_webserver.yml | 2 ++ 2 files changed, 42 insertions(+) (limited to 'gerboweb/deploy') diff --git a/gerboweb/deploy/nginx.conf b/gerboweb/deploy/nginx.conf index 6cf28cf..8d21357 100644 --- a/gerboweb/deploy/nginx.conf +++ b/gerboweb/deploy/nginx.conf @@ -129,6 +129,45 @@ http { } } + server { + listen 443 ssl http2; + listen [::]:443 ssl http2; + server_name kochbuch.jaseg.net kochbuch.jaseg.net; + root /usr/share/nginx/html; + + ssl_certificate "/etc/letsencrypt/live/kochbuch.jaseg.net/fullchain.pem"; + ssl_certificate_key "/etc/letsencrypt/live/kochbuch.jaseg.net/privkey.pem"; + ssl_dhparam "/etc/letsencrypt/ssl-dhparams.pem"; + include /etc/letsencrypt/options-ssl-nginx.conf; + + ssl_stapling on; + ssl_stapling_verify on; + + resolver 67.207.67.2 67.207.67.3 valid=300s; + resolver_timeout 10s; + + add_header Strict-Transport-Security "max-age=86400"; + + # Load configuration files for the default server block. + include /etc/nginx/default.d/*.conf; + + location / { + auth_basic "blubb"; + auth_basic_user_file /etc/nginx/kochbuch.htpasswd; + root /var/www/kochbuch.jaseg.net; + } + + error_page 404 /404.html; + location = /40x.html { + root /usr/share/nginx/html; + } + + error_page 500 502 503 504 /50x.html; + location = /50x.html { + root /usr/share/nginx/html; + } + } + server { listen 443 ssl http2; listen [::]:443 ssl http2; @@ -145,6 +184,7 @@ http { resolver 67.207.67.2 67.207.67.3 valid=300s; resolver_timeout 10s; + client_max_body_size 10M; add_header Strict-Transport-Security "max-age=86400"; diff --git a/gerboweb/deploy/setup_webserver.yml b/gerboweb/deploy/setup_webserver.yml index 671a699..1405bed 100644 --- a/gerboweb/deploy/setup_webserver.yml +++ b/gerboweb/deploy/setup_webserver.yml @@ -18,6 +18,7 @@ mode: 0550 loop: - blog.jaseg.net + - kochbuch.jaseg.net - tracespace.jaseg.net - openjscad.jaseg.net @@ -48,6 +49,7 @@ creates: /etc/letsencrypt/live/{{item}}/fullchain.pem loop: - blog.jaseg.net + - kochbuch.jaseg.net - gerbolyze.jaseg.net - tracespace.jaseg.net - openjscad.jaseg.net -- cgit