X-Git-Url: https://plomlompom.com/repos/?a=blobdiff_plain;f=systemfiles%2Fnginx.conf;h=3def78da74abf407fcd91de8a0b62c137931ecef;hb=1e8e425dc22b77823519753a4df977964ae472ec;hp=601b67bb351a9826ffb1b33da1620a615b666325;hpb=94b3161208467dad8f712c49d83fe874ed2d8715;p=config diff --git a/systemfiles/nginx.conf b/systemfiles/nginx.conf index 601b67b..3def78d 100644 --- a/systemfiles/nginx.conf +++ b/systemfiles/nginx.conf @@ -12,9 +12,11 @@ http { text/html html htm shtml; text/css css; text/xml xml; - text/plain txt; - text/plain sh; + text/plain txt sh rst md; application/xhtml+xml xhtml; + application/pdf pdf; + image/jpeg jpg jpeg; + image/png png; } default_type application/octet_stream; charset utf-8; @@ -23,13 +25,32 @@ http { access_log /var/log/nginx/access.log; error_log /var/log/nginx/error.log; - # IRC logs server + # enforce https + server { + listen 80; + return 301 https://$host$request_uri; + } + + # IRC logs server { listen 443 ssl; server_name dump.plomlompom.com; ssl_certificate /etc/letsencrypt/live/dump.plomlompom.com/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/dump.plomlompom.com/privkey.pem; root /var/www/html/; + location /zettel/ { + # rewrite non-suffixed filenames to .html ones + rewrite ^(/zettel/(.*/)*[^./]+)$ $1.html; + autoindex on; + } + location /dump/ { + autoindex on; + } + location /geheim/ { + auth_basic "geheim geheim"; + auth_basic_user_file /var/www/password_geheim; + autoindex on; + } location /irclogs/zrolaps/ { auth_basic "#zrolaps logs"; auth_basic_user_file /var/www/password_irclogs_zrolaps; @@ -40,11 +61,28 @@ http { auth_basic_user_file /var/www/password_irclogs_nodrama_de; autoindex on; } + location /irclogs/freakazoid/ { + auth_basic "#freakazoid logs"; + auth_basic_user_file /var/www/password_irclogs_freakazoid; + autoindex on; + } + location /lesekreis/ { + auth_basic "Quellen Lesekreis"; + auth_basic_user_file /var/www/password_lesekreis; + autoindex on; + } + location /uwsgi/ { + include uwsgi_params; + uwsgi_pass 127.0.0.1:3031; + } } # htwtxt server { + listen 443 ssl; server_name htwtxt.plomlompom.com; + ssl_certificate /etc/letsencrypt/live/htwtxt.plomlompom.com/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/htwtxt.plomlompom.com/privkey.pem; location / { proxy_pass http://127.0.0.1:8000; }