From 82942a542d3f17c13ed02b6bd64edf8f6a97b826 Mon Sep 17 00:00:00 2001 From: zino Date: Sun, 10 Dec 2023 13:38:43 +0100 Subject: [PATCH] m --- docker-compose.yml | 1 + volumes/conf.d/autocutbot.zinomedia.de.conf | 46 +++++++++++++++++++++ 2 files changed, 47 insertions(+) create mode 100644 volumes/conf.d/autocutbot.zinomedia.de.conf diff --git a/docker-compose.yml b/docker-compose.yml index eb51235..28c10e6 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -20,6 +20,7 @@ services: - /etc/letsencrypt:/etc/letsencrypt - ../docker-wordpress-4netplayers/volumes/wordpress:/usr/share/nginx/html/4netplayers.zinomedia.de - ../docker-wordpress-zinomedia/volumes/wordpress:/usr/share/nginx/html/zinomedia.de + - ../docker-wordpress-autocutbot/volumes/wordpress:/usr/share/nginx/html/autocutbot.zinomedia.de networks: web: diff --git a/volumes/conf.d/autocutbot.zinomedia.de.conf b/volumes/conf.d/autocutbot.zinomedia.de.conf new file mode 100644 index 0000000..344b132 --- /dev/null +++ b/volumes/conf.d/autocutbot.zinomedia.de.conf @@ -0,0 +1,46 @@ +server { + listen 443 ssl; + listen [::]:443 ssl; + server_name autocutbot.zinomedia.de; + + #access_log /var/log/nginx/access.log; + error_log /var/log/nginx/error.log error; + access_log off; + + root /usr/share/nginx/html/autocutbot.zinomedia.de; + + index index.php; + + ssl_certificate /etc/letsencrypt/live/autocutbot.zinomedia.de/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/autocutbot.zinomedia.de/privkey.pem; + + include "snippets/ssl-optimizations.conf"; + include "snippets/wordpress-optimizations.conf"; + + add_header Content-Security-Policy "default-src 'unsafe-inline' 'unsafe-eval' data: blob: *; script-src 'unsafe-inline' 'unsafe-eval' data: blob: *; img-src 'unsafe-inline' data: blob: *; style-src 'unsafe-inline' data: blob: *; font-src 'unsafe-inline' data: blob: *;" always; + + client_max_body_size 0; + + location / { + resolver 127.0.0.11; + set $upstream "autocutbot-wordpress:80"; + + try_files $uri $uri/ /index.php?$args; + + proxy_set_header X-Forwarded-Host $host; + proxy_set_header X-Forwarded-Server $host; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header Host $host; + proxy_set_header X-Forwarded-Proto https; + + proxy_pass http://$upstream; + } +} + +server { + listen 80; + listen [::]:80; + server_name autocutbot.zinomedia.de; + return 301 https://$host$request_uri; +}