Commit graph

28 commits

Author SHA1 Message Date
84c65e5506
Track global nginx config options, block Bytespider from redlib 2024-04-13 13:45:52 +00:00
057107d9c5
Fix iacore cert path 2024-04-10 18:56:37 +00:00
iacore
b2348b9646
Add bean-doze 2024-04-07 09:52:13 +00:00
8c2b0854b9
Move log_format to nginx.conf
log_format is only allowed in the http context and not in a server block. Otherwise you get the error "log_format" directive is not allowed here
2024-04-06 15:39:28 +00:00
iacore
42fb81a97a
www.1a-insec.net: Do not log IP address 2024-04-06 12:02:13 +00:00
8fe7a105cb
Use default log format for iacore access log 2024-03-30 20:09:45 +00:00
iacore
a2c5b4ab7c
move log location 2024-03-30 17:36:48 +00:00
iacore
6908e562b3
enable logs for www.1a-insec.net 2024-03-30 16:00:41 +00:00
e541b39644
Reformat and generate certs for iacore.conf 2024-02-26 16:52:19 +00:00
iacore
6d15c0efae
Add www.1a-insec.net 2024-02-26 15:54:38 +00:00
f9748b3ec7
Change /srv/http/pages to /srv/http, don't automatically forward ports 4200-9
The first change doesn't require any manual intervention since /srv/http/pages is now symlinked to /srv/http. The purpose of it is just to make paths shorter, that's all.

I have several reasons for the second change, even though it may have been a useful feature:
- Security: Some programs use those ports by default and you don't want to accidentally expose them to the internet. If you want to run a program on exozyme and view it on your own computer, use SSH port forwarding instead.
- There was some weird DNS resolution problem with that config so I made it only listen to IPv4, which can cause problems since some programs only bind to IPv6.
- If you want to expose a program to the internet, you must use a Unix socket or socat. This feature was useful as a quick-and-dirty option, but socat is also just one command and doesn't require much more effort.
2024-01-20 16:01:08 +00:00
21303cfea0
Move SSL stuff to /etc/nginx/nginx.conf 2024-01-11 18:25:56 +00:00
1b30fed65f
Improve SSL config 2024-01-11 17:43:59 +00:00
eb1da632fb
Remove Websockets proxying for iacore.conf 2023-12-21 22:01:02 +00:00
4cce3721b2
Uncomment commented stuff in iacore.conf 2023-12-21 19:19:54 +00:00
184b931fd0 Update iacore.conf 2023-12-20 14:10:25 +00:00
Locria Cyber
c71ee472ae
modify iacore.conf: try minimal config 2023-12-20 12:40:02 +00:00
Locria Cyber
c82031450c
Add iacore.conf 2023-12-19 23:18:09 +00:00
00fc2e086f
Delete iacore.conf because www.1a-insec.net is now being served by pages.sr.ht 2023-09-04 17:59:36 +00:00
d7e4151476
Use new http2 on; directive to enable HTTP/2 in /etc/nginx/nginx.conf instead of in individual conf files 2023-07-06 14:48:08 +00:00
Locria Cyber
67c8eed118
Add 404 page 2023-05-10 01:45:18 +00:00
Locria Cyber
c090dd6ad2
(iacore.conf) fix Cache-Control stale 2023-04-13 23:43:29 +00:00
e07b0dd49d
Fix typo in iacore.conf 2023-04-13 20:04:46 +00:00
65ea204f75 [iacore.conf] cache resources
See http://nginx.org/en/docs/http/ngx_http_headers_module.html

I did not add `Expires` to allow re-validation on each request.
2023-04-13 19:42:55 +00:00
412d525078
Update peertube config for 5.0.0 2022-12-26 18:16:34 +00:00
aac3063790
Fix iacore.exozy.me wrong cert error 2022-12-22 17:43:53 +00:00
iacore
de3853a886
Fix iacore.conf 2022-12-22 16:10:59 +00:00
iacore
885052deb6
Add iacore.conf 2022-12-16 19:17:21 +00:00