zino/docker-nginx
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

modified

Browse Source
This commit is contained in:
zino
2023-12-05 15:12:53 +01:00
parent 058e9cdd2a
commit e6786b4e56
2 changed files with 10 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
volumes/conf.d/code.zinomedia.de.conf
View File

@@ -10,12 +10,12 @@ server {
ssl_certificate_key /etc/letsencrypt/live/code.zinomedia.de/privkey.pem; ssl_certificate_key /etc/letsencrypt/live/code.zinomedia.de/privkey.pem;
# SSL Optimizations # SSL Optimizations
ssl_protocols TLSv1.2 TLSv1.3; #ssl_protocols TLSv1.2 TLSv1.3;
ssl_session_cache shared:SSL:10m; #ssl_session_cache shared:SSL:10m;
ssl_session_timeout 10m; #ssl_session_timeout 10m;
ssl_prefer_server_ciphers on; #ssl_prefer_server_ciphers on;
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always; #add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' data:;" always; add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' data:;" always;
# Vouch # Vouch
@@ -57,7 +57,7 @@ server {
#proxy_pass $upstream; #proxy_pass $upstream;
# redirect to Vouch Proxy for login # redirect to Vouch Proxy for login
return 302 https://vouch.armos.zinomedia.de:9090/login?url=$scheme://$http_host$request_uri&vouch-failcount=$auth_resp_failcount&X-Vouch-Token=$auth_resp_jwt&error=$auth_resp_err; return 302 https://vouch.armos.zinomedia.de/login?url=$scheme://$http_host$request_uri&vouch-failcount=$auth_resp_failcount&X-Vouch-Token=$auth_resp_jwt&error=$auth_resp_err;
} }

8
volumes/conf.d/vouch.armos.zinomedia.de.conf
View File

@@ -10,11 +10,11 @@ server {
ssl_certificate_key /etc/letsencrypt/live/vouch.armos.zinomedia.de/privkey.pem; ssl_certificate_key /etc/letsencrypt/live/vouch.armos.zinomedia.de/privkey.pem;
# SSL Optimizations # SSL Optimizations
ssl_protocols TLSv1.2 TLSv1.3; #ssl_protocols TLSv1.2 TLSv1.3;
ssl_session_cache shared:SSL:10m; #ssl_session_cache shared:SSL:10m;
ssl_session_timeout 10m; #ssl_session_timeout 10m;
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always; #add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
location / { location / {
#resolver 127.0.0.11; #resolver 127.0.0.11;