OpenPunk/openpunk-ansible
1
0
Fork 0
mirror of https://github.com/CPunch/openpunk-ansible.git synced 2024-11-24 08:01:05 +00:00
Code Issues Packages Projects Releases Wiki Activity

nginx/tor: fix http proxy listen

Browse Source
This commit is contained in:
CPunch 2024-02-24 15:50:32 -06:00
parent 74e55ef1b9
commit 454d91977c
1 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
roles/nginx/tasks/main.yml
View File

@ -20,13 +20,14 @@
include_role: include_role:
name: geerlingguy.nginx name: geerlingguy.nginx
vars: vars:
nginx_listen_ipv6: true nginx_listen_ipv6: false
nginx_vhosts: nginx_vhosts:
- listen: "443 ssl http2" - listen: "443 ssl http2"
server_name: "{{ domain }}" server_name: "{{ domain }}"
root: "/var/www/{{ domain }}/public" root: "/var/www/{{ domain }}/public"
index: "index.html index.htm" index: "index.html index.htm"
extra_parameters: | extra_parameters: |
listen [::]:443 ssl http2;
location / { location / {
add_header Permissions-Policy interest-cohort=(); add_header Permissions-Policy interest-cohort=();
try_files $uri $uri/ =404; try_files $uri $uri/ =404;
@ -39,6 +40,7 @@
server_name: "git.{{ domain }}" server_name: "git.{{ domain }}"
client_max_body_size: "100M" client_max_body_size: "100M"
extra_parameters: | extra_parameters: |
listen [::]:443 ssl http2;
location / { location / {
add_header Permissions-Policy interest-cohort=(); add_header Permissions-Policy interest-cohort=();
proxy_pass http://localhost:{{ giteaPort }}; proxy_pass http://localhost:{{ giteaPort }};
@ -47,7 +49,7 @@
ssl_certificate_key /etc/letsencrypt/live/{{ domain }}/privkey.pem; ssl_certificate_key /etc/letsencrypt/live/{{ domain }}/privkey.pem;
ssl_protocols TLSv1.1 TLSv1.2 TLSv1.3; ssl_protocols TLSv1.1 TLSv1.2 TLSv1.3;
ssl_ciphers HIGH:!aNULL:!MD5; ssl_ciphers HIGH:!aNULL:!MD5;
- listen: "2171" - listen: "127.0.0.1:2171"
server_name: "{{ onionDomain }}" server_name: "{{ onionDomain }}"
root: "/var/www/{{ domain }}/tor" root: "/var/www/{{ domain }}/tor"
index: "index.html index.htm" index: "index.html index.htm"