mirror of
https://github.com/CPunch/openpunk-ansible.git
synced 2024-11-24 08:01:05 +00:00
nginx/tor: fix http proxy listen
This commit is contained in:
parent
74e55ef1b9
commit
454d91977c
@ -20,13 +20,14 @@
|
||||
include_role:
|
||||
name: geerlingguy.nginx
|
||||
vars:
|
||||
nginx_listen_ipv6: true
|
||||
nginx_listen_ipv6: false
|
||||
nginx_vhosts:
|
||||
- listen: "443 ssl http2"
|
||||
server_name: "{{ domain }}"
|
||||
root: "/var/www/{{ domain }}/public"
|
||||
index: "index.html index.htm"
|
||||
extra_parameters: |
|
||||
listen [::]:443 ssl http2;
|
||||
location / {
|
||||
add_header Permissions-Policy interest-cohort=();
|
||||
try_files $uri $uri/ =404;
|
||||
@ -39,6 +40,7 @@
|
||||
server_name: "git.{{ domain }}"
|
||||
client_max_body_size: "100M"
|
||||
extra_parameters: |
|
||||
listen [::]:443 ssl http2;
|
||||
location / {
|
||||
add_header Permissions-Policy interest-cohort=();
|
||||
proxy_pass http://localhost:{{ giteaPort }};
|
||||
@ -47,7 +49,7 @@
|
||||
ssl_certificate_key /etc/letsencrypt/live/{{ domain }}/privkey.pem;
|
||||
ssl_protocols TLSv1.1 TLSv1.2 TLSv1.3;
|
||||
ssl_ciphers HIGH:!aNULL:!MD5;
|
||||
- listen: "2171"
|
||||
- listen: "127.0.0.1:2171"
|
||||
server_name: "{{ onionDomain }}"
|
||||
root: "/var/www/{{ domain }}/tor"
|
||||
index: "index.html index.htm"
|
||||
|
Loading…
Reference in New Issue
Block a user