From a7ab571ff2b6ba63aed4ac5190706ea28c59f4da Mon Sep 17 00:00:00 2001 From: inference Date: Sun, 19 Feb 2023 17:42:26 +0000 Subject: [PATCH] Add Inferencium xa000-0 Nginx Gitea configuration file. --- server/xa000-0/nginx/gitea.conf | 47 +++++++++++++++++++++++++++++++++ 1 file changed, 47 insertions(+) create mode 100644 server/xa000-0/nginx/gitea.conf diff --git a/server/xa000-0/nginx/gitea.conf b/server/xa000-0/nginx/gitea.conf new file mode 100644 index 0000000..a22e066 --- /dev/null +++ b/server/xa000-0/nginx/gitea.conf @@ -0,0 +1,47 @@ +# Inferencium - xa000-0 +# Nginx - Configuration - Gitea + +# Copyright 2022-2023 Jake Winters +# SPDX-License-Identifier: GPL-3.0-or-later + +# Version: 0.0.1.1 + + +# Server (unencrypted) +server { + # General + server_name int.git.inferencium.net; + listen 80; + listen [::]:80; + + # Location + location / { + return 301 https://$server_name$request_uri; + } +} + +# Server (TLS) +server { + # General + server_name int.git.inferencium.net; + listen 443 ssl http2; + listen [::]:443 ssl http2; + + # Security + ssl_certificate /etc/ssl/int.git.inferencium.net/int.git.inferencium.net.crt; + ssl_certificate_key /etc/ssl/int.git.inferencium.net/privkey.pem; + ssl_protocols TLSv1.3; + ssl_ciphers "ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305"; + ssl_conf_command Ciphersuites "TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256"; + ssl_conf_command Options PrioritizeChaCha; + ssl_prefer_server_ciphers on; + + # Location + location / { + proxy_pass http://unix:/run/gitea/gitea.socket; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + } +}