1
0
mirror of git://f0xx.org/ac/ac-ms-template synced 2026-07-29 02:18:17 +03:00
Files
ac-ms-template/skeleton/deploy/nginx.fe-s.f0xx.org.snippet
Anton Afanasyeu 1ca30210bd initial
2026-06-23 12:29:30 +02:00

49 lines
1.5 KiB
Plaintext

# FE Gentoo — server block for s.f0xx.org (URL shortener)
# File: tmp/FE_gentoo/etc/nginx/nginx.conf OR conf.d/s.f0xx.org.conf
#
# TLS cert (confirmed on FE):
# ssl_certificate /etc/letsencrypt/live/s.f0xx.org/fullchain.pem;
# ssl_certificate_key /etc/letsencrypt/live/s.f0xx.org/privkey.pem;
server {
listen 80;
server_name s.f0xx.org;
return 301 https://$host$request_uri;
}
server {
listen 443 ssl http2;
server_name s.f0xx.org;
ssl_certificate /etc/letsencrypt/live/s.f0xx.org/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/s.f0xx.org/privkey.pem;
access_log /var/log/nginx/s.f0xx.org.access_log main;
error_log /var/log/nginx/s.f0xx.org.error_log info;
ssl_certificate /etc/letsencrypt/live/s.f0xx.org/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/s.f0xx.org/privkey.pem;
# All paths → BE :80 (PHP-FPM url-shortener vhost)
location / {
proxy_pass http://artc0.intra.raptor.org:80;
proxy_http_version 1.1;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_connect_timeout 120s;
proxy_send_timeout 120s;
proxy_read_timeout 180s;
proxy_buffers 16 16m;
proxy_buffer_size 16m;
client_body_buffer_size 16m;
client_max_body_size 16m;
proxy_buffering off;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $connection_upgrade;
proxy_cache_bypass $http_upgrade;
}
}