mdwalters/nginx
1
0
Fork 0
forked from exozyme/nginx
Code Pull requests Activity
nginx/xtex.conf

43 lines
1.2 KiB
Text
Raw Normal View History

add blog.xtexx.ml
2023-06-11 23:53:08 +00:00
server {
Use new http2 on; directive to enable HTTP/2 in /etc/nginx/nginx.conf instead of in individual conf files
2023-07-06 14:47:37 +00:00
listen 443 ssl;
listen [::]:443 ssl;
Update xtexx.eu.org - xtexx.eu.org is moving from Vercel to exopages for better experience and extensible (e.g. CSP) The refactor is also in progress. The source code can be found at https://codeberg.org/xtex/home.git The server is deployed with podman with a low memory limitation. btw, cache-handler sucks. - blog.xtexx.eu.org is now handled by the same caddy instance for xtexx.eu.org. The main reason is that, there will be more and more complex rules in the future. And I will implement more RFCs (e.g. RFC6415) for this domain.
2023-09-02 11:36:46 +00:00
server_name xtexx.eu.org;
add blog.xtexx.ml
2023-06-11 23:53:08 +00:00
Update xtexx.eu.org - xtexx.eu.org is moving from Vercel to exopages for better experience and extensible (e.g. CSP) The refactor is also in progress. The source code can be found at https://codeberg.org/xtex/home.git The server is deployed with podman with a low memory limitation. btw, cache-handler sucks. - blog.xtexx.eu.org is now handled by the same caddy instance for xtexx.eu.org. The main reason is that, there will be more and more complex rules in the future. And I will implement more RFCs (e.g. RFC6415) for this domain.
2023-09-02 11:36:46 +00:00
ssl_certificate /etc/letsencrypt/live/xtexx.eu.org/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/xtexx.eu.org/privkey.pem;
add blog.xtexx.ml
2023-06-11 23:53:08 +00:00
add_header Server exozyme;
Wrap proxy_pass stuff in a location / block for xtex.conf
2023-09-02 19:20:23 +00:00
location / {
Change /srv/http/pages to /srv/http, don't automatically forward ports 4200-9 The first change doesn't require any manual intervention since /srv/http/pages is now symlinked to /srv/http. The purpose of it is just to make paths shorter, that's all. I have several reasons for the second change, even though it may have been a useful feature: - Security: Some programs use those ports by default and you don't want to accidentally expose them to the internet. If you want to run a program on exozyme and view it on your own computer, use SSH port forwarding instead. - There was some weird DNS resolution problem with that config so I made it only listen to IPv4, which can cause problems since some programs only bind to IPv6. - If you want to expose a program to the internet, you must use a Unix socket or socat. This feature was useful as a quick-and-dirty option, but socat is also just one command and doesn't require much more effort.
2024-01-20 15:56:03 +00:00
proxy_pass http://unix:/srv/http/xtexhome;
Wrap proxy_pass stuff in a location / block for xtex.conf
2023-09-02 19:20:23 +00:00
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
# Proxy WebSockets
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "Upgrade";
}
Update xtexx.eu.org - xtexx.eu.org is moving from Vercel to exopages for better experience and extensible (e.g. CSP) The refactor is also in progress. The source code can be found at https://codeberg.org/xtex/home.git The server is deployed with podman with a low memory limitation. btw, cache-handler sucks. - blog.xtexx.eu.org is now handled by the same caddy instance for xtexx.eu.org. The main reason is that, there will be more and more complex rules in the future. And I will implement more RFCs (e.g. RFC6415) for this domain.
2023-09-02 11:36:46 +00:00
}
server {
listen 443 ssl;
listen [::]:443 ssl;
server_name blog.xtexx.eu.org;
add blog.xtexx.ml
2023-06-11 23:53:08 +00:00
Use single cert for both xtexx.eu.org and blog.xtexx.eu.org
2023-11-16 02:24:46 +00:00
ssl_certificate /etc/letsencrypt/live/xtexx.eu.org/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/xtexx.eu.org/privkey.pem;
add blog.xtexx.ml
2023-06-11 23:53:08 +00:00
Update xtexx.eu.org - xtexx.eu.org is moving from Vercel to exopages for better experience and extensible (e.g. CSP) The refactor is also in progress. The source code can be found at https://codeberg.org/xtex/home.git The server is deployed with podman with a low memory limitation. btw, cache-handler sucks. - blog.xtexx.eu.org is now handled by the same caddy instance for xtexx.eu.org. The main reason is that, there will be more and more complex rules in the future. And I will implement more RFCs (e.g. RFC6415) for this domain.
2023-09-02 11:36:46 +00:00
add_header Server exozyme;
add blog.xtexx.ml
2023-06-11 23:53:08 +00:00
Wrap proxy_pass stuff in a location / block for xtex.conf
2023-09-02 19:20:23 +00:00
location / {
Change /srv/http/pages to /srv/http, don't automatically forward ports 4200-9 The first change doesn't require any manual intervention since /srv/http/pages is now symlinked to /srv/http. The purpose of it is just to make paths shorter, that's all. I have several reasons for the second change, even though it may have been a useful feature: - Security: Some programs use those ports by default and you don't want to accidentally expose them to the internet. If you want to run a program on exozyme and view it on your own computer, use SSH port forwarding instead. - There was some weird DNS resolution problem with that config so I made it only listen to IPv4, which can cause problems since some programs only bind to IPv6. - If you want to expose a program to the internet, you must use a Unix socket or socat. This feature was useful as a quick-and-dirty option, but socat is also just one command and doesn't require much more effort.
2024-01-20 15:56:03 +00:00
proxy_pass http://unix:/srv/http/xtexblog;
Wrap proxy_pass stuff in a location / block for xtex.conf
2023-09-02 19:20:23 +00:00
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
}
add blog.xtexx.ml
2023-06-11 23:53:08 +00:00
}
Copy permalink