From 5643d5fde71ae3aca7c11937f4e91e2c0d13351c Mon Sep 17 00:00:00 2001 From: Gyurix Date: Wed, 21 Aug 2024 10:40:41 +0200 Subject: [PATCH] initial commit --- nginx/bitwarden.format.hu.conf | 43 ------------ nginx/config | 115 --------------------------------- nginx/doc.fat.hu.conf | 43 ------------ nginx/remote.fat.hu.conf | 44 ------------- 4 files changed, 245 deletions(-) delete mode 100644 nginx/bitwarden.format.hu.conf delete mode 100644 nginx/config delete mode 100644 nginx/doc.fat.hu.conf delete mode 100644 nginx/remote.fat.hu.conf diff --git a/nginx/bitwarden.format.hu.conf b/nginx/bitwarden.format.hu.conf deleted file mode 100644 index e98cf6d..0000000 --- a/nginx/bitwarden.format.hu.conf +++ /dev/null @@ -1,43 +0,0 @@ -server { -listen 80 proxy_protocol; -server_name bitwarden.format.hu; -set_real_ip_from 0.0.0.0/0; -real_ip_header proxy_protocol; -rewrite_log on; -return 301 https://bitwarden.format.hu; -} -server { -listen 443 ssl proxy_protocol; -set_real_ip_from 0.0.0.0/0; -real_ip_header proxy_protocol; -server_name bitwarden.format.hu; -client_max_body_size 512M; -rewrite_log on; -proxy_ssl_server_name on; - ssl_dhparam /etc/ssl/keys/bitwarden.format.hu/dhparam.pem; -ssl_certificate /etc/ssl/keys/bitwarden.format.hu/fullchain.pem; - ssl_certificate_key /etc/ssl/keys/bitwarden.format.hu/key.pem; -ssl_protocols TLSv1 TLSv1.1 TLSv1.2; - ssl_prefer_server_ciphers on; - ssl_ciphers "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH+aRSA+RC4 EECDH EDH+aRSA RC4 !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS !RC4 !kDHE"; -ssl_session_cache shared:SSL:50m; -ssl_session_timeout 5m; -ssl_stapling on; -location / { - proxy_pass http://bitwardenapp:80; - proxy_set_header Host $http_host; - proxy_set_header X-Real-IP $remote_addr; - proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; - proxy_set_header X-Forwarded-Proto $scheme; - proxy_set_header Upgrade $http_upgrade; - proxy_cookie_path / /; - proxy_set_header Connection $http_connection; - proxy_connect_timeout 300; - proxy_send_timeout 300; - proxy_read_timeout 300; - proxy_next_upstream off; - access_log off; - proxy_redirect off; - proxy_buffering off; -} -} diff --git a/nginx/config b/nginx/config deleted file mode 100644 index b2dfd0f..0000000 --- a/nginx/config +++ /dev/null @@ -1,115 +0,0 @@ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - diff --git a/nginx/doc.fat.hu.conf b/nginx/doc.fat.hu.conf deleted file mode 100644 index 5218885..0000000 --- a/nginx/doc.fat.hu.conf +++ /dev/null @@ -1,43 +0,0 @@ -server { -listen 80 proxy_protocol; -server_name doc.fat.hu; -set_real_ip_from 0.0.0.0/0; -real_ip_header proxy_protocol; -rewrite_log on; -return 301 https://doc.fat.hu; -} -server { -listen 443 ssl proxy_protocol; -set_real_ip_from 0.0.0.0/0; -real_ip_header proxy_protocol; -server_name doc.fat.hu; -client_max_body_size 512M; -rewrite_log on; -proxy_ssl_server_name on; - ssl_dhparam /etc/ssl/keys/doc.fat.hu/dhparam.pem; -ssl_certificate /etc/ssl/keys/doc.fat.hu/fullchain.pem; - ssl_certificate_key /etc/ssl/keys/doc.fat.hu/key.pem; -ssl_protocols TLSv1 TLSv1.1 TLSv1.2; - ssl_prefer_server_ciphers on; - ssl_ciphers "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH+aRSA+RC4 EECDH EDH+aRSA RC4 !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS !RC4 !kDHE"; -ssl_session_cache shared:SSL:50m; -ssl_session_timeout 5m; -ssl_stapling on; -location / { - proxy_pass http://nextcloudnginx:80; - proxy_set_header Host $http_host; - proxy_set_header X-Real-IP $remote_addr; - proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; - proxy_set_header X-Forwarded-Proto $scheme; - proxy_set_header Upgrade $http_upgrade; - proxy_cookie_path / /; - proxy_set_header Connection $http_connection; - proxy_connect_timeout 300; - proxy_send_timeout 300; - proxy_read_timeout 300; - proxy_next_upstream off; - access_log off; - proxy_redirect off; - proxy_buffering off; -} -} diff --git a/nginx/remote.fat.hu.conf b/nginx/remote.fat.hu.conf deleted file mode 100644 index c0a7a89..0000000 --- a/nginx/remote.fat.hu.conf +++ /dev/null @@ -1,44 +0,0 @@ -server { -listen 80 proxy_protocol; -server_name remote.fat.hu; -set_real_ip_from 0.0.0.0/0; -real_ip_header proxy_protocol; -rewrite_log on; -return 301 https://remote.fat.hu; -} -server { -listen 443 ssl proxy_protocol; -set_real_ip_from 0.0.0.0/0; -real_ip_header proxy_protocol; -server_name remote.fat.hu; -client_max_body_size 512M; -rewrite_log on; -proxy_ssl_server_name on; - ssl_dhparam /etc/ssl/keys/remote.fat.hu/dhparam.pem; -ssl_certificate /etc/ssl/keys/remote.fat.hu/fullchain.pem; - ssl_certificate_key /etc/ssl/keys/remote.fat.hu/key.pem; -ssl_protocols TLSv1 TLSv1.1 TLSv1.2; - ssl_prefer_server_ciphers on; - ssl_ciphers "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH+aRSA+RC4 EECDH EDH+aRSA RC4 !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS !RC4 !kDHE"; -ssl_session_cache shared:SSL:50m; -ssl_session_timeout 5m; -ssl_stapling on; -location / { - proxy_pass http://guacamoletomcat:8080/guacamole/; - proxy_set_header Host $http_host; - proxy_set_header X-Real-IP $remote_addr; - proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; - proxy_set_header X-Forwarded-Proto $scheme; - proxy_set_header Upgrade $http_upgrade; - proxy_cookie_path / /; - proxy_set_header Connection $http_connection; - proxy_connect_timeout 300; - proxy_send_timeout 300; - proxy_read_timeout 300; - proxy_next_upstream off; - access_log off; - proxy_redirect off; - proxy_buffering off; -} -# first location end -}