Unify configs, enhance SSL security

2018-03-25 20:23:08 +02:00
parent 83354160ea
commit 69047a611c
18 changed files with 446 additions and 373 deletions
--- a/fet.at/git.conf
+++ b/fet.at/git.conf
@@ -0,0 +1,29 @@
+# -*-nginx-*-
+server {
+    listen 80;
+    server_name git.fet.at;
+
+    location /.well-known {
+        root /srv/pxy/git;
+        allow all;
+    }
+    location / {
+        return 301 https://$host$request_uri;
+    }
+}
+
+server {
+    listen 443 ssl http2;
+    server_name git.fet.at;
+
+    ssl_certificate /etc/letsencrypt/live/git.fet.at/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/git.fet.at/privkey.pem;
+    ssl_trusted_certificate /etc/letsencrypt/live/git.fet.at/chain.pem;
+
+    include snippets/ssl.conf;
+    include snippets/header.conf;
+
+    location / {
+        proxy_pass http://zyklon:3000;
+    }
+}