forked from exozyme/nginx
- xtexx.eu.org is moving from Vercel to exopages for better experience and extensible (e.g. CSP) The refactor is also in progress. The source code can be found at https://codeberg.org/xtex/home.git The server is deployed with podman with a low memory limitation. btw, cache-handler sucks. - blog.xtexx.eu.org is now handled by the same caddy instance for xtexx.eu.org. The main reason is that, there will be more and more complex rules in the future. And I will implement more RFCs (e.g. RFC6415) for this domain.
39 lines
1.1 KiB
Text
39 lines
1.1 KiB
Text
server {
|
|
listen 443 ssl;
|
|
listen [::]:443 ssl;
|
|
server_name xtexx.eu.org;
|
|
|
|
ssl_certificate /etc/letsencrypt/live/xtexx.eu.org/fullchain.pem;
|
|
ssl_certificate_key /etc/letsencrypt/live/xtexx.eu.org/privkey.pem;
|
|
|
|
add_header Server exozyme;
|
|
|
|
proxy_pass http://unix:/home/xtex/home/server.sock;
|
|
proxy_set_header Host $host;
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
proxy_set_header X-Forwarded-Proto $scheme;
|
|
|
|
# Proxy WebSockets
|
|
proxy_http_version 1.1;
|
|
proxy_set_header Upgrade $http_upgrade;
|
|
proxy_set_header Connection "Upgrade";
|
|
}
|
|
|
|
server {
|
|
listen 443 ssl;
|
|
listen [::]:443 ssl;
|
|
server_name blog.xtexx.eu.org;
|
|
|
|
ssl_certificate /etc/letsencrypt/live/blog.xtexx.eu.org/fullchain.pem;
|
|
ssl_certificate_key /etc/letsencrypt/live/blog.xtexx.eu.org/privkey.pem;
|
|
|
|
add_header Server exozyme;
|
|
|
|
proxy_pass http://unix:/home/xtex/home/blog.sock;
|
|
proxy_set_header Host $host;
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
proxy_set_header X-Forwarded-Proto $scheme;
|
|
}
|