server { listen 443 ssl; server_name fet.at; include ssl.conf; #changed 22.9.22, andis client_max_body_size 50M; # set $proxy_host triton20; # set $proxy_port 8080; set $proxy_host fetsite2023; set $proxy_port 8000; # location / { return 503 'Andis rulez'; } #include default_proxy.conf; location / { include proxy.conf; include secure.conf; proxy_pass http://$proxy_host:$proxy_port; #more_set_headers "Content-Security-Policy: default-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; base-uri 'self'; form-action 'self'; connect-src 'self' 'unsafe-inline' ; frame-ancestors 'self'"; more_set_headers "Content-Security-Policy: default-src 'none'; img-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; font-src 'self'; base-uri 'self'; form-action 'self'; connect-src 'self'; frame-ancestors 'none'"; } location /etherpad { include proxy.conf; include secure.conf; proxy_cookie_path ~^/(.+)$ "/$1; SameSite=none"; #more_set_headers "Content-Security-Policy: default-src 'none'; img-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fet.at/; style-src 'self' 'unsafe-inline' https://fet.at/; font-src 'self' 'unsafe-inline' https://fet.at/; base-uri 'self'; form-action 'self'; connect-src 'self' 'unsafe-inline' https://fet.at/ ; frame-ancestors 'none'"; more_set_headers "Content-Security-Policy: default-src 'self'; img-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fet.at/; style-src 'self' 'unsafe-inline' https://fet.at/; font-src 'self' 'unsafe-inline'; base-uri 'self'; form-action 'self'; connect-src 'self' 'unsafe-inline' https://fet.at/ ; frame-ancestors 'self' "; proxy_pass http://$proxy_host:$proxy_port; } location /admin { include proxy.conf; include secure.conf; proxy_cookie_path ~^/(.+)$ "/$1; SameSite=none"; more_set_headers "Content-Security-Policy: default-src 'none'; img-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fet.at/; style-src 'self' 'unsafe-inline' https://fet.at/; font-src 'self' 'unsafe-inline' https://fet.at/; base-uri 'self'; form-action 'self'; connect-src 'self' 'unsafe-inline' https://fet.at/ ; frame-ancestors 'none'"; proxy_pass http://$proxy_host:$proxy_port; } } server { listen 443 ssl; server_name www.fet.at; include ssl.conf; return 302 https://fet.at$request_uri; }