security/hakurei.app
security/hakurei.app
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 4 Wiki Activity

split out virtual server for www subdomain

Browse Source
This commit is contained in:
Daniel Micay 2020-04-01 10:04:36 -04:00
parent bab50f098f
commit fcb0d84373
1 changed files with 21 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

26
nginx/server.conf
View File

@ -13,7 +13,27 @@ server {
listen 443 ssl http2; listen 443 ssl http2;
listen [::]:443 ssl http2; listen [::]:443 ssl http2;
server_name www.grapheneos.org grapheneos.org; server_name www.grapheneos.org;
ssl_certificate /etc/letsencrypt/live/grapheneos.org/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/grapheneos.org/privkey.pem;
include /etc/letsencrypt/options-ssl-nginx.conf;
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
ssl_trusted_certificate /etc/letsencrypt/live/grapheneos.org/chain.pem;
ssl_stapling on;
ssl_stapling_verify on;
root /var/empty;
return 301 https://grapheneos.org$request_uri;
}
server {
listen 443 ssl http2;
listen [::]:443 ssl http2;
server_name grapheneos.org;
ssl_certificate /etc/letsencrypt/live/grapheneos.org/fullchain.pem; ssl_certificate /etc/letsencrypt/live/grapheneos.org/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/grapheneos.org/privkey.pem; ssl_certificate_key /etc/letsencrypt/live/grapheneos.org/privkey.pem;
@ -30,10 +50,6 @@ server {
include /etc/nginx/snippets/security-headers.conf; include /etc/nginx/snippets/security-headers.conf;
gzip_static on; gzip_static on;
if ($host != "grapheneos.org") {
return 301 https://grapheneos.org$request_uri;
}
if ($request_uri ~ ^/(.*)\.html$) { if ($request_uri ~ ^/(.*)\.html$) {
return 301 /$1; return 301 /$1;
} }