security/hakurei.app
security/hakurei.app
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 4 Wiki Activity

avoid unnecessary ACME challenge redirects

Browse Source
This commit is contained in:
Daniel Micay 2023-02-09 10:12:20 -05:00
parent 763c17a058
commit 76cc4ae336
1 changed files with 9 additions and 19 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

28
nginx/nginx.conf
View File

@ -129,12 +129,18 @@ http {
root /var/empty;
return 301 https://$host$request_uri;
location /.well-known/acme-challenge/ {
return 301 http://0.grapheneos.org$request_uri;
}
location / {
return 301 https://$host$request_uri;
}
}
server {
listen 443 ssl http2;
listen [::]:443 ssl http2;
listen 80;
listen [::]:80;
server_name 0.grapheneos.org;
root /var/empty;
@ -158,10 +164,6 @@ http {
include snippets/security-headers.conf;
add_header Cross-Origin-Resource-Policy "same-origin" always;
location /.well-known/acme-challenge/ {
return 301 https://0.grapheneos.org$request_uri;
}
location / {
return 301 https://grapheneos.org$request_uri;
}
@ -177,10 +179,6 @@ http {
include snippets/security-headers.conf;
add_header Cross-Origin-Resource-Policy "same-origin" always;
location /.well-known/acme-challenge/ {
return 301 https://0.grapheneos.org$request_uri;
}
location / {
return 302 https://github.com/GrapheneOS/Vanadium;
}
@ -407,10 +405,6 @@ http {
try_files $uri.html =404;
}
location ^~ /.well-known/acme-challenge/ {
return 301 https://0.grapheneos.org$request_uri;
}
location ^~ /fonts/ {
include snippets/security-headers.conf;
add_header Cross-Origin-Resource-Policy "same-origin" always;
@ -510,10 +504,6 @@ http {
location = /.well-known/mta-sts.txt {}
location /.well-known/acme-challenge/ {
return 301 https://0.grapheneos.org$request_uri;
}
location / {
return 404;
}