security/hakurei.app
security/hakurei.app
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 4 Wiki Activity

split out virtual server for /generate_204 service

Browse Source
This commit is contained in:
Daniel Micay 2020-04-01 09:55:13 -04:00
parent 4590363b85
commit bab50f098f
1 changed files with 37 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

43
nginx/server.conf
View File

@ -2,7 +2,7 @@ server {
listen 80; listen 80;
listen [::]:80; listen [::]:80;
server_name connectivitycheck.grapheneos.org www.grapheneos.org grapheneos.org; server_name www.grapheneos.org grapheneos.org;
root /var/empty; root /var/empty;
@ -13,7 +13,7 @@ server {
listen 443 ssl http2; listen 443 ssl http2;
listen [::]:443 ssl http2; listen [::]:443 ssl http2;
server_name connectivitycheck.grapheneos.org www.grapheneos.org grapheneos.org; server_name www.grapheneos.org grapheneos.org;
ssl_certificate /etc/letsencrypt/live/grapheneos.org/fullchain.pem; ssl_certificate /etc/letsencrypt/live/grapheneos.org/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/grapheneos.org/privkey.pem; ssl_certificate_key /etc/letsencrypt/live/grapheneos.org/privkey.pem;
@ -66,10 +66,6 @@ server {
return 301 /bitcoin-address.png; return 301 /bitcoin-address.png;
} }
location = /generate_204 {
return 204;
}
location = /LICENSE { location = /LICENSE {
default_type text/plain; default_type text/plain;
} }
@ -97,6 +93,41 @@ server {
} }
} }
server {
listen 80;
listen [::]:80;
server_name connectivitycheck.grapheneos.org;
root /var/empty;
return 301 https://connectivitycheck.grapheneos.org$request_uri;
}
server {
listen 443 ssl http2;
listen [::]:443 ssl http2;
server_name connectivitycheck.grapheneos.org;
ssl_certificate /etc/letsencrypt/live/grapheneos.org/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/grapheneos.org/privkey.pem;
include /etc/letsencrypt/options-ssl-nginx.conf;
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
ssl_trusted_certificate /etc/letsencrypt/live/grapheneos.org/chain.pem;
ssl_stapling on;
ssl_stapling_verify on;
root /var/empty;
include /etc/nginx/snippets/security-headers.conf;
location = /generate_204 {
return 204;
}
}
server { server {
listen 80; listen 80;
listen [::]:80; listen [::]:80;