From d745d87255ac18c7aaae2840f665cc8b88b9acf4 Mon Sep 17 00:00:00 2001 From: inference Date: Sat, 10 Jun 2023 12:38:22 +0100 Subject: [PATCH] Update git.inferencium.net redirect webpage from version 0.0.0.0 to 0.0.1.2. --- server/xb000-0/nginx/redirect-git.conf | 71 ++++++++++++++++++++++++++ 1 file changed, 71 insertions(+) create mode 100644 server/xb000-0/nginx/redirect-git.conf diff --git a/server/xb000-0/nginx/redirect-git.conf b/server/xb000-0/nginx/redirect-git.conf new file mode 100644 index 0000000..16565a0 --- /dev/null +++ b/server/xb000-0/nginx/redirect-git.conf @@ -0,0 +1,71 @@ +# Inferencium - xb000-0 +# Nginx - Configuration - Redirect - git.inferencium.net + +# Copyright 2023 Jake Winters +# SPDX-License-Identifier: BSD-3-Clause + +# Version: 0.0.1.2 + + +# Server (unencrypted) +server { + # General + server_name git.inferencium.net; + listen 80; +# listen [::]:80; + rewrite ^/(.*)$ https://inferencium.net/redirect-git.html permanent; + rewrite ^(/.*)\.html(\?.*)?$ $1$2 permanent; + rewrite ^/(.*)/$ /$1 permanent; +} + +# Server (TLS) +server { + # General + server_name git.inferencium.net; + listen 443 ssl http2; +# listen [::]:443 ssl http2; + rewrite ^/(.*)$ https://inferencium.net/redirect-git.html permanent; + rewrite ^(/.*)\.html(\?.*)?$ $1$2 permanent; + rewrite ^/(.*)/$ /$1 permanent; + + # Security + ssl_trusted_certificate /etc/letsencrypt/live/inferencium.net/chain.pem; + ssl_certificate /etc/letsencrypt/live/inferencium.net/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/inferencium.net/privkey.pem; + ssl_protocols TLSv1.3; + ssl_ciphers "ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256"; + ssl_conf_command Ciphersuites "TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256"; + ssl_conf_command Options PrioritizeChaCha; + ssl_prefer_server_ciphers on; + ssl_ecdh_curve X25519; + ssl_stapling on; + ssl_stapling_verify on; + ssl_session_timeout 1d; + ssl_session_cache shared:MozSSL:10m; + ssl_session_cache shared:ssl_session_cache:10m; + ssl_session_tickets off; + add_header Strict-Transport-Security "max-age=126200000; includeSubDomains; preload"; + add_header X-Frame-Options "DENY"; + add_header X-Content-Type-Options nosniff; + add_header Content-Security-Policy "default-src 'self'; img-src 'self'; media-src 'self'; object-src 'none'; script-src 'none'; connect-src 'none'; frame-src 'none'; style-src 'self'; font-src 'self'"; + add_header Referrer-Policy no-referrer; + + client_max_body_size 16m; + ignore_invalid_headers off; + + proxy_http_version 1.1; + proxy_set_header Upgrade $http_upgrade; + proxy_set_header Connection "upgrade"; + proxy_set_header Host $http_host; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; +} + +# MIME types +types { + text/html html; + text/css css; + text/xml xml; + text/plain txt; + image/png png; + image/jpeg jpg; +}