diff options
author | Patrick Spek <p.spek@tyil.nl> | 2022-04-18 08:53:56 +0200 |
---|---|---|
committer | Patrick Spek <p.spek@tyil.nl> | 2022-04-18 08:53:56 +0200 |
commit | f64cadd81fbaebeb8496f3cd9053764fec06a64e (patch) | |
tree | 33a2c3bb7fb6c37da2b0266f7b7084dec5c4bcf0 /playbooks.d/webserver/share/sites.d/https/nl.tyil | |
parent | 342d8ef5e1d988877efbd1bc5d333640d7523570 (diff) |
Various fixes to make the webserver playbook work
Diffstat (limited to 'playbooks.d/webserver/share/sites.d/https/nl.tyil')
-rw-r--r-- | playbooks.d/webserver/share/sites.d/https/nl.tyil | 24 |
1 files changed, 24 insertions, 0 deletions
diff --git a/playbooks.d/webserver/share/sites.d/https/nl.tyil b/playbooks.d/webserver/share/sites.d/https/nl.tyil new file mode 100644 index 0000000..f80c4b6 --- /dev/null +++ b/playbooks.d/webserver/share/sites.d/https/nl.tyil @@ -0,0 +1,24 @@ +server { + listen 443 ssl http2; + listen [::]:443 ssl http2; + + server_name tyil.nl; + + ssl_certificate /etc/letsencrypt/live/tyil.nl/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/tyil.nl/privkey.pem; + + include /etc/nginx/snippets.d/certbot.conf; + include /etc/nginx/snippets.d/headers.conf; + include /etc/nginx/snippets.d/ssl.conf; + + location ~ ^/.well-known/openpgpkey(.+)$ { + add_header Access-Control-Allow-Origin *; + + root /var/wkd/nl.tyil; + try_files $1 =404; + } + + location / { + return 301 https://www.tyil.nl$request_uri; + } +} |