Add *.app.vostan.org servers.

Change configuration name. Now configuration name is the reversed site
name.
Add all those configuration to https certificate.
This commit is contained in:
2025-05-21 23:33:03 +01:00
parent 98b14edb81
commit 77eb5180e1
14 changed files with 82 additions and 42 deletions

View File

@@ -35,8 +35,8 @@ server {
return 301 https://$host$request_uri;
}
# If host name is not known, then simply return 404
#
## If host name is not known, then simply return 404
##
set $known_host 0;
if ($host = www.vostan.org) {
set $known_host 1;
@@ -44,7 +44,10 @@ server {
if ($host = drive.vostan.org) {
set $known_host 1;
}
if ($host ~* "^.+\.app\.vostan\.org$") {
set $known_host 1;
}
if ($known_host != 1) {
return 404;
return 404;
}
}

View File

@@ -14,12 +14,10 @@
##
server {
listen 80;
listen [::]:80;
#listen 443 ssl;
#listen [::]:443 ssl;
listen 443 ssl;
listen [::]:443 ssl;
http2 on;
server_name books.vostan.org;
server_name books.app.vostan.org;
# SSL configuration
#

View File

@@ -14,12 +14,10 @@
##
server {
# listen 80;
# listen [::]:80;
listen 443 ssl;
listen [::]:443 ssl;
http2 on;
server_name deluge.vostan.org;
server_name deluge.app.vostan.org;
# SSL configuration
#

View File

@@ -0,0 +1,42 @@
##
# You should look at the following URL's in order to grasp a solid understanding of Nginx configuration files in order to fully unleash the power of Nginx.
# https://www.nginx.com/resources/wiki/start/ https://www.nginx.com/resources/wiki/start/topics/tutorials/config_pitfalls/ https://wiki.debian.org/Nginx/DirectoryStructure
#
# In most cases, administrators will remove this file from sites-enabled/ and
# leave it as reference inside of sites-available where it will continue to be
# updated by the nginx packaging team.
#
# This file will automatically load configuration files provided by other
# applications, such as Drupal or Wordpress. These applications will be made
# available underneath a path with that package name, such as /drupal8.
#
# Please see /usr/share/doc/nginx-doc/examples/ for more detailed examples.
##
server {
listen 443 ssl;
listen [::]:443 ssl;
http2 on;
server_name drive.app.vostan.org;
# SSL configuration
#
ssl_certificate /etc/nginx/ssl/live/www.vostan.org/fullchain.pem;
ssl_certificate_key /etc/nginx/ssl/live/www.vostan.org/privkey.pem;
#
set $upstream 192.168.11.4;
location / {
proxy_pass_header Authorization;
proxy_pass http://$upstream:8090;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_http_version 1.1;
proxy_set_header Connection "";
proxy_buffering off;
client_max_body_size 0;
proxy_read_timeout 36000s;
proxy_redirect off;
}
}

View File

@@ -14,12 +14,10 @@
##
server {
listen 80;
listen [::]:80;
#listen 443 ssl;
#listen [::]:443 ssl;
listen 443 ssl;
listen [::]:443 ssl;
http2 on;
server_name gerbera.vostan.org;
server_name gerbera.app.vostan.org;
# SSL configuration
#

View File

@@ -14,12 +14,10 @@
##
server {
listen 80;
listen [::]:80;
#listen 443 ssl;
#listen [::]:443 ssl;
listen 443 ssl;
listen [::]:443 ssl;
http2 on;
server_name gitea.vostan.org;
server_name gitea.app.vostan.org;
# SSL configuration
#

View File

@@ -14,12 +14,10 @@
##
server {
listen 80;
listen [::]:80;
#listen 443 ssl;
#listen [::]:443 ssl;
listen 443 ssl;
listen [::]:443 ssl;
http2 on;
server_name pihole.vostan.org;
server_name pihole.app.vostan.org;
# SSL configuration
#

View File

@@ -14,12 +14,10 @@
##
server {
listen 80;
listen [::]:80;
#listen 443 ssl;
#listen [::]:443 ssl;
listen 443 ssl;
listen [::]:443 ssl;
http2 on;
server_name wireguard.vostan.org;
server_name wireguard.app.vostan.org;
# SSL configuration
#