diff --git a/docker-compose.yml b/docker-compose.yml index 87b1ea3..386fd4a 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -24,6 +24,7 @@ services: - ../docker-wordpress-pokerstarsbot/volumes/wordpress:/usr/share/nginx/html/pokerstarsbot.zinomedia.de - ../docker-wordpress-pokerstarsbotx/volumes/wordpress:/usr/share/nginx/html/pokerstarsbotx.zinomedia.de - ../docker-wordpress-seatmapv2/volumes/wordpress:/usr/share/nginx/html/seatmapv2.zinomedia.de + - ../docker-wordpress-terminsnipe/volumes/wordpress:/usr/share/nginx/html/terminsnipe.zinomedia.de networks: web: diff --git a/volumes/conf.d/terminsnipe.zinomedia.de.conf b/volumes/conf.d/terminsnipe.zinomedia.de.conf new file mode 100644 index 0000000..e3a04b5 --- /dev/null +++ b/volumes/conf.d/terminsnipe.zinomedia.de.conf @@ -0,0 +1,45 @@ +server { + listen 443 ssl; + listen [::]:443 ssl; + server_name terminsnipe.zinomedia.de; + + error_log /var/log/nginx/error.log error; + access_log off; + + root /usr/share/nginx/html/terminsnipe.zinomedia.de; + + index index.php; + + ssl_certificate /etc/letsencrypt/live/terminsnipe.zinomedia.de/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/terminsnipe.zinomedia.de/privkey.pem; + + include "snippets/ssl-optimizations.conf"; + include "snippets/wordpress-optimizations.conf"; + + add_header Content-Security-Policy "default-src 'unsafe-inline' 'unsafe-eval' data: blob: *; script-src 'unsafe-inline' 'unsafe-eval' data: blob: *; img-src 'unsafe-inline' data: blob: *; style-src 'unsafe-inline' data: blob: *; font-src 'unsafe-inline' data: blob: *;" always; + + client_max_body_size 0; + + location / { + resolver 127.0.0.11; + set $upstream "terminsnipe-wordpress:80"; + + try_files $uri $uri/ /index.php?$args; + + proxy_set_header X-Forwarded-Host $host; + proxy_set_header X-Forwarded-Server $host; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header Host $host; + proxy_set_header X-Forwarded-Proto https; + + proxy_pass http://$upstream; + } +} + +server { + listen 80; + listen [::]:80; + server_name terminsnipe.zinomedia.de; + return 301 https://$host$request_uri; +}