m

2025-11-19 23:12:38 +01:00 · 2025-11-19 22:16:51 +01:00 · 2025-09-23 10:30:25 +02:00 · 2025-09-23 10:29:21 +02:00 · 2025-09-23 10:26:15 +02:00 · 2025-09-23 10:21:32 +02:00
53 changed files with 1317 additions and 117 deletions
--- a/.gitignore
+++ b/.gitignore
@@ -1,5 +1,20 @@
-# Ignore everything in the volume folder
-#volume/*
+# Ignore everything in the volumes/html directory
+volumes/html/*

-# But not the .gitkeep file
-!volume/.gitkeep
+# But not these directories
+!volumes/html/dl.zinomedia.de
+!volumes/html/pkrstarsbot.zinomedia.de
+!volumes/logs/
+!volumes/html/registry.zinomedia.de
+!volumes/html/registryui.zinomedia.de
+!volumes/html/mtail.zinomedia.de
+!volumes/html/metrics.registry.zinomedia.de
+!volumes/html/etherpad.zinomedia.de
+
+# Ignore contents of these directories
+volumes/html/dl.zinomedia.de/*
+volumes/html/pkrstarsbot.zinomedia.de/*
+volumes/logs/*
+
+# Do not ignore a special file name
+!.gitkeep
--- a/config/50x.html
+++ b/config/50x.html
@@ -1,28 +0,0 @@
-<!DOCTYPE html>
-<html>
-
-<head>
-    <title>Error</title>
-    <style>
-        html {
-            color-scheme: light dark;
-        }
-
-        body {
-            width: 35em;
-            margin: 0 auto;
-            font-family: Tahoma, Verdana, Arial, sans-serif;
-        }
-    </style>
-</head>
-
-<body>
-    <h1>An error occurred.</h1>
-    <p>Sorry, the page you are looking for is currently unavailable.<br />
-        Please try again later.</p>
-    <p>If you are the system administrator of this resource then you should check
-        the error log for details.</p>
-    <p><em>Faithfully yours, nginx.</em></p>
-</body>
-
-</html>
--- a/config/index.html
+++ b/config/index.html
@@ -1,33 +0,0 @@
-<!DOCTYPE html>
-<html>
-
-<head>
-    <title>Welcome to nginx!</title>
-    <style>
-        html {
-            color-scheme: light dark;
-        }
-
-        body {
-            width: 35em;
-            margin: 0 auto;
-            font-family: Tahoma, Verdana, Arial, sans-serif;
-        }
-    </style>
-</head>
-
-<body>
-    <h1>Welcome to nginx!</h1>
-    <p>If you see this page, the nginx web server is successfully installed and
-        working. Further configuration is required.</p>
-
-    <p>For online documentation and support please refer to
-        <a href="http://nginx.org/">nginx.org</a>.<br />
-        Commercial support is available at
-        <a href="http://nginx.com/">nginx.com</a>.
-    </p>
-
-    <p><em>Thank you for using nginx.</em></p>
-</body>
-
-</html>
--- a/config/nginx.conf
+++ b/config/nginx.conf
@@ -1,31 +0,0 @@
-user  nginx;
-worker_processes  auto;
-
-error_log  /var/log/nginx/error.log notice;
-pid        /var/run/nginx.pid;
-
-
-events {
-    worker_connections  1024;
-}
-
-
-http {
-    include       /etc/nginx/mime.types;
-    default_type  application/octet-stream;
-
-    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
-                      '$status $body_bytes_sent "$http_referer" '
-                      '"$http_user_agent" "$http_x_forwarded_for"';
-
-    access_log  /var/log/nginx/access.log  main;
-
-    sendfile        on;
-    #tcp_nopush     on;
-
-    keepalive_timeout  65;
-
-    #gzip  on;
-
-    include /etc/nginx/conf.d/*.conf;
-}
--- a/config/portainer.armos.zinomedia.de.conf
+++ b/config/portainer.armos.zinomedia.de.conf
@@ -1,18 +0,0 @@
-server {
-    server_name portainer.armos.zinomedia.de;
-
-    location / {
-        add_header Content-Security-Policy "font-src * data: blob: 'unsafe-inline'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline';" always;
-        proxy_set_header X-Forwarded-Host $host:$server_port;
-        proxy_set_header X-Forwarded-Server $host;
-        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-        proxy_pass http://127.0.0.1:9000;
-    }
-
-}
-
-server {
-    listen 80;
-    listen [::]:80;
-    server_name portainer.armos.zinomedia.de;
-}
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -1,4 +1,3 @@
-version: '3.8'
 services:
  nginx:
    image: nginx:latest
@@ -6,15 +5,27 @@ services:
    restart: unless-stopped
    networks:
      - web
+    environment:
+      - TZ=Europe/Berlin
    ports:
      - 80:80
      - 443:443
    volumes:
      - ./volumes/conf.d:/etc/nginx/conf.d
+      - ./volumes/snippets:/etc/nginx/snippets
      - ./volumes/html:/usr/share/nginx/html
      - ./volumes/nginx.conf:/etc/nginx/nginx.conf
      - ./volumes/logs:/var/log/nginx
      - /etc/letsencrypt:/etc/letsencrypt
+      - ../docker-wordpress-4netplayers/volumes/wordpress:/usr/share/nginx/html/4netplayers.zinomedia.de
+      - ../docker-wordpress-zinomedia/volumes/wordpress:/usr/share/nginx/html/zinomedia.de
+      - ../docker-wordpress-autocutbot/volumes/wordpress:/usr/share/nginx/html/autocutbot.zinomedia.de
+      - ../docker-wordpress-pokerstarsbot/volumes/wordpress:/usr/share/nginx/html/pokerstarsbot.zinomedia.de
+      - ../docker-wordpress-pokerstarsbotx/volumes/wordpress:/usr/share/nginx/html/pokerstarsbotx.zinomedia.de
+      - ../docker-wordpress-seatmapv2/volumes/wordpress:/usr/share/nginx/html/seatmapv2.zinomedia.de
+      - ../docker-wordpress-terminsnipe/volumes/wordpress:/usr/share/nginx/html/terminsnipe.zinomedia.de
+    extra_hosts:
+      - "host.docker.internal:host-gateway"

 networks:
  web:
--- a/volumes/conf.d/4netplayers.zinomedia.de.conf
+++ b/volumes/conf.d/4netplayers.zinomedia.de.conf
@@ -0,0 +1,61 @@
+server {
+    listen 443 ssl;
+    listen [::]:443 ssl;
+    server_name 4netplayers.zinomedia.de;
+
+    access_log off;
+    error_log /var/log/nginx/error.log error;
+
+    root /usr/share/nginx/html/4netplayers.zinomedia.de;
+    index index.php;
+
+    client_max_body_size 32m;
+
+    ssl_certificate /etc/letsencrypt/live/4netplayers.zinomedia.de/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/4netplayers.zinomedia.de/privkey.pem;
+
+    include "snippets/ssl-optimizations.conf";
+
+    add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' data:;" always;
+
+    location ~ /(\.user\.ini|debug\.log) {
+        deny all;
+    }
+
+    location / {
+        resolver 127.0.0.11;
+        set $upstream "4netplayers-wordpress:80";
+
+        try_files $uri $uri/ /index.php?$args;
+
+        proxy_set_header Host $http_host;
+        proxy_set_header X-Forwarded-Host $host:$server_port;
+        proxy_set_header X-Forwarded-Server $host;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_pass http://$upstream;
+        proxy_set_header X-Forwarded-Proto $scheme;
+    }
+
+    location = /favicon.ico {
+        log_not_found off;
+        access_log off;
+    }
+
+    location = /robots.txt {
+        allow all;
+        log_not_found off;
+        access_log off;
+    }
+
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico)$ {
+        expires max;
+        log_not_found off;
+    }
+}
+
+server {
+    listen 80;
+    listen [::]:80;
+    server_name 4netplayers.zinomedia.de;
+    return 301 https://$host$request_uri;
+}
--- a/volumes/conf.d/autocutbot.zinomedia.de.conf
+++ b/volumes/conf.d/autocutbot.zinomedia.de.conf
@@ -0,0 +1,46 @@
+server {
+    listen 443 ssl;
+    listen [::]:443 ssl;
+    server_name autocutbot.zinomedia.de;
+
+    #access_log /var/log/nginx/access.log;
+    error_log /var/log/nginx/error.log error;
+    access_log off;
+
+    root /usr/share/nginx/html/autocutbot.zinomedia.de;
+
+    index index.php;
+
+    ssl_certificate /etc/letsencrypt/live/autocutbot.zinomedia.de/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/autocutbot.zinomedia.de/privkey.pem;
+
+    include "snippets/ssl-optimizations.conf";
+    include "snippets/wordpress-optimizations.conf";
+
+    add_header Content-Security-Policy "default-src 'unsafe-inline' 'unsafe-eval' data: blob: *; script-src 'unsafe-inline' 'unsafe-eval' data: blob: *; img-src 'unsafe-inline' data: blob: *; style-src 'unsafe-inline' data: blob: *; font-src 'unsafe-inline' data: blob: *;" always;
+
+    client_max_body_size 0;
+
+    location / {
+        resolver 127.0.0.11;
+        set $upstream "autocutbot-wordpress:80";
+
+        try_files $uri $uri/ /index.php?$args;
+
+        proxy_set_header X-Forwarded-Host $host;
+        proxy_set_header X-Forwarded-Server $host;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header Host $host;
+        proxy_set_header X-Forwarded-Proto https;
+
+        proxy_pass http://$upstream;
+    }
+}
+
+server {
+    listen 80;
+    listen [::]:80;
+    server_name autocutbot.zinomedia.de;
+    return 301 https://$host$request_uri;
+}
--- a/volumes/conf.d/code.zinomedia.de.conf
+++ b/volumes/conf.d/code.zinomedia.de.conf
@@ -0,0 +1,36 @@
+server {
+    listen 443 ssl;
+    listen [::]:443 ssl;
+    server_name code.zinomedia.de;
+
+    access_log off;
+    error_log /var/log/nginx/error.log debug;
+
+    ssl_certificate /etc/letsencrypt/live/code.zinomedia.de/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/code.zinomedia.de/privkey.pem;
+
+    include "snippets/ssl-optimizations.conf";
+    include "snippets/enable-vouch.conf";
+
+    location / {
+        resolver 127.0.0.11;
+        set $upstream "http://code-server:8443";
+
+        proxy_http_version 1.1;
+        proxy_set_header Host $host;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Accept-Encoding gzip;
+        proxy_set_header Connection upgrade;
+        proxy_headers_hash_max_size 512;
+        proxy_headers_hash_bucket_size 128;
+        proxy_read_timeout 3600;
+        proxy_pass $upstream;
+    }
+}
+
+server {
+    listen 80;
+    listen [::]:80;
+    server_name code.zinomedia.de;
+    return 301 https://$host$request_uri;
+}
--- a/volumes/conf.d/default.conf.bak
+++ b/volumes/conf.d/default.conf.bak
--- a/volumes/conf.d/dl.zinomedia.de.conf
+++ b/volumes/conf.d/dl.zinomedia.de.conf
@@ -0,0 +1,31 @@
+server {
+    listen 443 ssl;
+    listen [::]:443 ssl;
+    server_name dl.zinomedia.de;
+
+    access_log off;
+    error_log /var/log/nginx/error.log error;
+
+    root /usr/share/nginx/html/dl.zinomedia.de;
+    autoindex off;
+
+    ssl_certificate /etc/letsencrypt/live/dl.zinomedia.de/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/dl.zinomedia.de/privkey.pem;
+
+    include "snippets/ssl-optimizations.conf";
+
+    add_header Content-Security-Policy "default-src 'self';" always;
+    add_header X-Content-Type-Options nosniff;
+    add_header X-Frame-Options SAMEORIGIN;
+    add_header X-Content-Type-Options "nosniff";
+
+    gzip on;
+    gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript;
+}
+
+server {
+    listen 80;
+    listen [::]:80;
+    server_name dl.zinomedia.de;
+    return 301 https://$host$request_uri;
+}
--- a/volumes/conf.d/drawio.zinomedia.de.conf
+++ b/volumes/conf.d/drawio.zinomedia.de.conf
@@ -0,0 +1,42 @@
+server {
+    listen *:443 ssl;
+    listen [::]:443 ssl;
+    server_name drawio.zinomedia.de;
+
+    access_log off;
+    error_log /var/log/nginx/error.log error;
+
+    ssl_certificate /etc/letsencrypt/live/drawio.zinomedia.de/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/drawio.zinomedia.de/privkey.pem;
+
+    include "snippets/ssl-optimizations.conf";
+    include "snippets/enable-vouch.conf";
+
+    add_header Content-Security-Policy "default-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; img-src 'self' data: http://drawio.zinomedia.de; style-src 'self' 'unsafe-inline'; font-src 'self' data:; connect-src *;" always;
+
+    location / {
+        resolver 127.0.0.11;
+        set $upstream "drawio:8080";
+
+        proxy_set_header X-Forwarded-Host $host;
+        proxy_set_header X-Forwarded-Server $host;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header Host $host;
+        proxy_set_header X-Forwarded-Proto https;
+
+        proxy_pass http://$upstream;
+        proxy_redirect off;
+        proxy_buffering on;
+        proxy_buffers 16 32k;
+        proxy_buffer_size 64k;
+    }
+
+}
+
+server {
+    server_name drawio.zinomedia.de;
+    listen 80;
+    listen [::]:80;
+    return 301 https://$host$request_uri;
+}
--- a/volumes/conf.d/etherpad.zinomedia.de.conf
+++ b/volumes/conf.d/etherpad.zinomedia.de.conf
@@ -0,0 +1,66 @@
+map $http_upgrade $connection_upgrade {
+    default upgrade;
+    '' close;
+}
+
+server {
+    listen 443 ssl;
+    listen [::]:443 ssl;
+    server_name etherpad.zinomedia.de;
+
+    access_log off;
+    error_log /var/log/nginx/error.log error;
+
+    ssl_certificate /etc/letsencrypt/live/etherpad.zinomedia.de/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/etherpad.zinomedia.de/privkey.pem;
+
+    include "snippets/ssl-optimizations.conf";
+
+    auth_basic "Protected";
+    auth_basic_user_file /usr/share/nginx/html/etherpad.zinomedia.de/.htpasswd;
+
+    location / {
+        resolver 127.0.0.11;
+        set $upstream "http://etherpad:9001";
+
+        rewrite ^/$ / break;
+        rewrite ^/locales/(.*) /locales/$1 break;
+        rewrite ^/locales.json /locales.json break;
+        rewrite ^/admin(.*) /admin$1 break;
+        rewrite ^/p/(.*) /p/$1 break;
+        rewrite ^/static/(.*) /static/$1 break;
+        rewrite ^/pluginfw/(.*) /pluginfw/$1 break;
+        rewrite ^/javascripts/(.*) /javascripts/$1 break;
+        rewrite ^/socket.io/(.*) /socket.io/$1 break;
+        rewrite ^/ep/(.*) /ep/$1 break;
+        rewrite ^/minified/(.*) /minified/$1 break;
+        rewrite ^/api/(.*) /api/$1 break;
+        rewrite ^/ro/(.*) /ro/$1 break;
+        rewrite ^/error/(.*) /error/$1 break;
+        rewrite ^/jserror(.*) /jserror$1 break;
+        rewrite ^/redirect(.*) /redirect$1 break;
+        rewrite ^/(.*\.js) /$1 break;
+        rewrite /favicon.ico /favicon.ico break;
+        rewrite /robots.txt /robots.txt break;
+        rewrite /(.*) /p/$1;
+
+        proxy_pass $upstream;
+
+        proxy_buffering off;
+        proxy_set_header Host $host;
+        proxy_pass_header Server;
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection $connection_upgrade;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+    }
+}
+
+server {
+    listen 80;
+    listen [::]:80;
+    server_name etherpad.zinomedia.de;
+    return 301 https://$host$request_uri;
+}
--- a/volumes/conf.d/git.zinomedia.de.conf
+++ b/volumes/conf.d/git.zinomedia.de.conf
@@ -0,0 +1,41 @@
+server {
+    listen 443 ssl;
+    listen [::]:443 ssl;
+    server_name git.zinomedia.de;
+
+    access_log off;
+    error_log /var/log/nginx/error.log error;
+
+    ssl_certificate /etc/letsencrypt/live/git.zinomedia.de/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/git.zinomedia.de/privkey.pem;
+
+    include "snippets/ssl-optimizations.conf";
+
+    # Gzip Compression
+    gzip on;
+    gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript;
+
+    location / {
+        resolver 127.0.0.11;
+        set $upstream "gitea:3000";
+
+        client_max_body_size 10000M; # Push large objects to gitea
+
+        proxy_set_header X-Forwarded-Host $host:$server_port;
+        proxy_set_header X-Forwarded-Server $host;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_pass http://$upstream;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_set_header Host $host;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection $http_connection;
+        proxy_set_header Connection $http_connection;
+    }
+}
+
+server {
+    listen 80;
+    listen [::]:80;
+    server_name git.zinomedia.de;
+    return 301 https://$host$request_uri;
+}
--- a/volumes/conf.d/ha.zinomedia.de.conf
+++ b/volumes/conf.d/ha.zinomedia.de.conf
@@ -0,0 +1,34 @@
+server {
+    listen 443 ssl;
+    listen [::]:443 ssl;
+    http2 on;
+    server_name ha.zinomedia.de;
+
+    ssl_certificate /etc/letsencrypt/live/ha.zinomedia.de/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/ha.zinomedia.de/privkey.pem;
+
+    include "snippets/ssl-optimizations.conf";
+
+    location / {
+        proxy_pass http://host.docker.internal:8123;
+        proxy_set_header Host $http_host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_set_header X-Frame-Options SAMEORIGIN;
+        proxy_set_header X-Content-Type-Options nosniff;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection "upgrade";
+        proxy_connect_timeout 15s;
+        proxy_read_timeout 30s;
+        proxy_send_timeout 30s;
+        send_timeout 30s;
+    }
+}
+
+server {
+    listen 80;
+    listen [::]:80;
+    server_name ha.zinomedia.de;
+    return 301 https://$host$request_uri;
+}
--- a/volumes/conf.d/joplin.zinomedia.de.conf
+++ b/volumes/conf.d/joplin.zinomedia.de.conf
@@ -0,0 +1,40 @@
+server {
+    listen 443 ssl;
+    listen [::]:443 ssl;
+    server_name joplin.zinomedia.de;
+
+    access_log off;
+    error_log /var/log/nginx/error.log error;
+
+    ssl_certificate /etc/letsencrypt/live/joplin.zinomedia.de/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/joplin.zinomedia.de/privkey.pem;
+
+    include "snippets/ssl-optimizations.conf";
+
+    # Gzip Compression
+    gzip on;
+    gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript;
+
+    location / {
+        resolver 127.0.0.11;
+        set $upstream "joplin:22300";
+
+        client_max_body_size 1000M; # allow large files
+
+        proxy_pass http://$upstream;
+        proxy_http_version 1.1;
+        proxy_set_header Host $host;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Accept-Encoding gzip;
+        proxy_headers_hash_max_size 512;
+        proxy_headers_hash_bucket_size 128;
+        proxy_read_timeout 3600;
+    }
+}
+
+server {
+    listen 80;
+    listen [::]:80;
+    server_name joplin.zinomedia.de;
+    return 301 https://$host$request_uri;
+}
--- a/volumes/conf.d/mail.zinomedia.de.conf
+++ b/volumes/conf.d/mail.zinomedia.de.conf
@@ -0,0 +1,54 @@
+server {
+    listen 443 ssl;
+    listen [::]:443 ssl;
+    http2 on;
+    server_name mail.zinomedia.de autodiscover.* autoconfig.*;
+
+    access_log off;
+    error_log /var/log/nginx/error.log error;
+
+    ssl_certificate /etc/letsencrypt/live/mail.zinomedia.de/cert.pem;
+    ssl_certificate_key /etc/letsencrypt/live/mail.zinomedia.de/privkey.pem;
+    ssl_session_timeout 1d;
+    ssl_session_cache shared:SSL:50m;
+    ssl_session_tickets off;
+
+    ssl_protocols TLSv1.2;
+    ssl_ciphers HIGH:!aNULL:!MD5:!SHA1:!kRSA;
+    ssl_prefer_server_ciphers off;
+
+    # resolver 127.0.0.11;
+
+    location /Microsoft-Server-ActiveSync {
+        proxy_pass http://host.docker.internal:8080/Microsoft-Server-ActiveSync;
+        proxy_set_header Host $http_host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_connect_timeout 75;
+        proxy_send_timeout 3650;
+        proxy_read_timeout 3650;
+        proxy_buffers 64 512k;
+        client_body_buffer_size 512k;
+        client_max_body_size 0;
+    }
+
+    location / {
+        proxy_pass http://host.docker.internal:8080/;
+        proxy_set_header Host $http_host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        client_max_body_size 0;
+        proxy_buffer_size 128k;
+        proxy_buffers 64 512k;
+        proxy_busy_buffers_size 512k;
+    }
+}
+
+server {
+    listen 80 default_server;
+    listen [::]:80 default_server;
+    server_name mail.zinomedia.de autodiscover.* autoconfig.*;
+    return 301 https://$host$request_uri;
+}
--- a/volumes/conf.d/metrics.registry.zinomedia.de.conf
+++ b/volumes/conf.d/metrics.registry.zinomedia.de.conf
@@ -0,0 +1,37 @@
+server {
+    listen 443 ssl;
+    listen [::]:443 ssl;
+    server_name metrics.registry.zinomedia.de;
+
+    access_log off;
+    error_log /var/log/nginx/error.log error;
+
+    # SSL Certificate Configuration
+    ssl_certificate /etc/letsencrypt/live/metrics.registry.zinomedia.de/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/metrics.registry.zinomedia.de/privkey.pem;
+
+    include "snippets/ssl-optimizations.conf";
+
+    # Password protect
+    auth_basic "Protected Area";
+    auth_basic_user_file /usr/share/nginx/html/metrics.registry.zinomedia.de/.htpasswd;
+
+    location / {
+        resolver 127.0.0.11;
+        set $upstream "http://registry:5001";
+        proxy_pass $upstream;
+
+        proxy_set_header Host $http_host; # required for docker client's sake
+        proxy_set_header X-Real-IP $remote_addr; # pass on real client's IP
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_read_timeout 900;
+    }
+}
+
+server {
+    listen 80;
+    listen [::]:80;
+    server_name metrics.registry.zinomedia.de;
+    return 301 https://$host$request_uri;
+}
--- a/volumes/conf.d/mtail.zinomedia.de.conf
+++ b/volumes/conf.d/mtail.zinomedia.de.conf
@@ -0,0 +1,38 @@
+server {
+    listen *:443 ssl;
+    listen [::]:443 ssl;
+    server_name mtail.zinomedia.de;
+
+    access_log off;
+    error_log /var/log/nginx/error.log error;
+
+    ssl_certificate /etc/letsencrypt/live/mtail.zinomedia.de/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/mtail.zinomedia.de/privkey.pem;
+
+    include "snippets/ssl-optimizations.conf";
+
+    location / {
+        resolver 127.0.0.11;
+        set $upstream "mtail:3903";
+
+        # Password protect
+        auth_basic "Protected";
+        auth_basic_user_file /usr/share/nginx/html/mtail.zinomedia.de/.htpasswd;
+
+        proxy_set_header X-Forwarded-Host $host:$server_port;
+        proxy_set_header X-Forwarded-Server $host;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_http_version 1.1;
+        proxy_read_timeout 300s;
+
+        proxy_pass http://$upstream;
+    }
+
+}
+
+server {
+    server_name mtail.zinomedia.de;
+    listen 80;
+    listen [::]:80;
+    return 301 https://$host$request_uri;
+}
--- a/volumes/conf.d/pkrstarsbot.zinomedia.de.conf
+++ b/volumes/conf.d/pkrstarsbot.zinomedia.de.conf
@@ -0,0 +1,41 @@
+server {
+    listen 443 ssl;
+    listen [::]:443 ssl;
+    server_name pkrstarsbot.zinomedia.de;
+
+    access_log off;
+    error_log /var/log/nginx/error.log error;
+
+    root /usr/share/nginx/html/pkrstarsbot.zinomedia.de/www/htdocs;
+    index index.php index.html;
+
+    # SSL Certificate Configuration
+    ssl_certificate /etc/letsencrypt/live/pkrstarsbot.zinomedia.de/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/pkrstarsbot.zinomedia.de/privkey.pem;
+
+    include "snippets/ssl-optimizations.conf";
+    include "snippets/enable-php-fpm.conf";
+    
+    add_header Content-Security-Policy "default-src 'self'; script-src 'self'; img-src 'self' data:; style-src 'self'; font-src 'self' data:;" always;
+
+    location / {
+        try_files $uri $uri/ =404;
+    }
+
+    # Password protect
+    auth_basic "Protected Area";
+    auth_basic_user_file /usr/share/nginx/html/pkrstarsbot.zinomedia.de/www/htdocs/.htpasswd;
+
+    # Static File Caching (Optional)
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+        expires 30d;
+        add_header Cache-Control "public, immutable";
+    }
+}
+
+server {
+    listen 80;
+    listen [::]:80;
+    server_name pkrstarsbot.zinomedia.de;
+    return 301 https://$host$request_uri;
+}
--- a/volumes/conf.d/pokerstarsbot.zinomedia.de.conf
+++ b/volumes/conf.d/pokerstarsbot.zinomedia.de.conf
@@ -0,0 +1,45 @@
+server {
+    listen 443 ssl;
+    listen [::]:443 ssl;
+    server_name pokerstarsbot.zinomedia.de;
+
+    error_log /var/log/nginx/error.log error;
+    access_log off;
+
+    root /usr/share/nginx/html/pokerstarsbot.zinomedia.de;
+
+    index index.php;
+
+    ssl_certificate /etc/letsencrypt/live/pokerstarsbot.zinomedia.de/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/pokerstarsbot.zinomedia.de/privkey.pem;
+
+    include "snippets/ssl-optimizations.conf";
+    include "snippets/wordpress-optimizations.conf";
+
+    add_header Content-Security-Policy "default-src 'unsafe-inline' 'unsafe-eval' data: blob: *; script-src 'unsafe-inline' 'unsafe-eval' data: blob: *; img-src 'unsafe-inline' data: blob: *; style-src 'unsafe-inline' data: blob: *; font-src 'unsafe-inline' data: blob: *;" always;
+
+    client_max_body_size 0;
+
+    location / {
+        resolver 127.0.0.11;
+        set $upstream "pokerstarsbot-wordpress:80";
+
+        try_files $uri $uri/ /index.php?$args;
+
+        proxy_set_header X-Forwarded-Host $host;
+        proxy_set_header X-Forwarded-Server $host;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header Host $host;
+        proxy_set_header X-Forwarded-Proto https;
+
+        proxy_pass http://$upstream;
+    }
+}
+
+server {
+    listen 80;
+    listen [::]:80;
+    server_name pokerstarsbot.zinomedia.de;
+    return 301 https://$host$request_uri;
+}
--- a/volumes/conf.d/pokerstarsbotx.zinomedia.de.conf
+++ b/volumes/conf.d/pokerstarsbotx.zinomedia.de.conf
@@ -0,0 +1,45 @@
+server {
+    listen 443 ssl;
+    listen [::]:443 ssl;
+    server_name pokerstarsbotx.zinomedia.de;
+
+    error_log /var/log/nginx/error.log error;
+    access_log off;
+
+    root /usr/share/nginx/html/pokerstarsbotx.zinomedia.de;
+
+    index index.php;
+
+    ssl_certificate /etc/letsencrypt/live/pokerstarsbotx.zinomedia.de/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/pokerstarsbotx.zinomedia.de/privkey.pem;
+
+    include "snippets/ssl-optimizations.conf";
+    include "snippets/wordpress-optimizations.conf";
+
+    add_header Content-Security-Policy "default-src 'unsafe-inline' 'unsafe-eval' data: blob: *; script-src 'unsafe-inline' 'unsafe-eval' data: blob: *; img-src 'unsafe-inline' data: blob: *; style-src 'unsafe-inline' data: blob: *; font-src 'unsafe-inline' data: blob: *;" always;
+
+    client_max_body_size 0;
+
+    location / {
+        resolver 127.0.0.11;
+        set $upstream "pokerstarsbotx-wordpress:80";
+
+        try_files $uri $uri/ /index.php?$args;
+
+        proxy_set_header X-Forwarded-Host $host;
+        proxy_set_header X-Forwarded-Server $host;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header Host $host;
+        proxy_set_header X-Forwarded-Proto https;
+
+        proxy_pass http://$upstream;
+    }
+}
+
+server {
+    listen 80;
+    listen [::]:80;
+    server_name pokerstarsbotx.zinomedia.de;
+    return 301 https://$host$request_uri;
+}
--- a/volumes/conf.d/portainer.armos.zinomedia.de.conf
+++ b/volumes/conf.d/portainer.armos.zinomedia.de.conf
@@ -0,0 +1,37 @@
+server {
+    listen *:443 ssl;
+    listen [::]:443 ssl;
+    server_name portainer.armos.zinomedia.de;
+
+    access_log off;
+    error_log /var/log/nginx/error.log error;
+
+    ssl_certificate /etc/letsencrypt/live/portainer.armos.zinomedia.de/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/portainer.armos.zinomedia.de/privkey.pem;
+
+    include "snippets/ssl-optimizations.conf";
+    include "snippets/enable-vouch.conf";
+
+    location / {
+        resolver 127.0.0.11;
+        set $upstream "portainer:9000";
+
+        add_header Content-Security-Policy "font-src * data: blob: 'unsafe-inline'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline';" always;
+        proxy_set_header X-Forwarded-Host $host:$server_port;
+        proxy_set_header X-Forwarded-Server $host;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection "upgrade";
+        proxy_read_timeout 300s;
+        proxy_pass http://$upstream;
+    }
+
+}
+
+server {
+    server_name portainer.armos.zinomedia.de;
+    listen 80;
+    listen [::]:80;
+    return 301 https://$host$request_uri;
+}
--- a/volumes/conf.d/registry.zinomedia.de.conf
+++ b/volumes/conf.d/registry.zinomedia.de.conf
@@ -0,0 +1,95 @@
+## Set a variable to help us decide if we need to add the
+## 'Docker-Distribution-Api-Version' header.
+## The registry always sets this header.
+## In the case of nginx performing auth, the header is unset
+## since nginx is auth-ing before proxying.
+map $upstream_http_docker_distribution_api_version $docker_distribution_api_version {
+    '' 'registry/2.0';
+}
+
+## Record actual registry push/pull traffic
+include "snippets/registry-transfer-logging.conf";
+
+server {
+    listen 443 ssl;
+    listen [::]:443 ssl;
+    server_name registry.zinomedia.de;
+
+    access_log /var/log/nginx/registry.zinomedia.de.access.log;
+    error_log /var/log/nginx/error.log;
+
+    # Record actual registry push/pull traffic
+    access_log /var/log/nginx/registry.zinomedia.de.access.json.log registry_json if=$is_transfer_loggable;
+
+    ssl_certificate /etc/letsencrypt/live/registry.zinomedia.de/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/registry.zinomedia.de/privkey.pem;
+
+    # Recommendations from https://raymii.org/s/tutorials/Strong_SSL_Security_On_nginx.html
+    ssl_protocols TLSv1.2 TLSv1.3;
+    ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH';
+    ssl_prefer_server_ciphers on;
+
+    # required to avoid HTTP 411: see Issue #1486 (https://github.com/moby/moby/issues/1486)
+    chunked_transfer_encoding on;
+
+    location / {
+        return 403;
+    }
+
+    location /v2/ {
+        # disable any limits to avoid HTTP 413 for large image uploads
+        client_max_body_size 0;
+
+        # Password protect
+        auth_basic "Protected Registry";
+        auth_basic_user_file /usr/share/nginx/html/registry.zinomedia.de/.htpasswd;
+
+        if ($request_method = OPTIONS) {
+            add_header 'Access-Control-Allow-Origin' 'https://registryui.zinomedia.de';
+            add_header 'Access-Control-Allow-Credentials' 'true';
+            add_header 'Access-Control-Allow-Headers' 'Authorization, Accept, Cache-Control';
+            add_header 'Access-Control-Allow-Methods' 'HEAD, GET, OPTIONS, DELETE';
+            add_header 'Content-Length' '0';
+            add_header 'Content-Type' 'text/plain charset=UTF-8';
+            return 204;
+        }
+
+        if ($request_method = DELETE) {
+            add_header 'Access-Control-Allow-Origin' 'https://registryui.zinomedia.de' always;
+            add_header 'Access-Control-Allow-Credentials' 'true' always;
+            add_header 'Access-Control-Allow-Headers' 'Authorization, Accept, Cache-Control' always;
+            add_header 'Access-Control-Allow-Methods' 'HEAD, GET, OPTIONS, DELETE' always;
+        }
+
+        add_header Access-Control-Allow-Origin "https://registryui.zinomedia.de";
+        add_header Access-Control-Allow-Credentials "true";
+        add_header Access-Control-Allow-Headers "Authorization, Accept, Cache-Control";
+        add_header Access-Control-Allow-Methods "HEAD, GET, OPTIONS, DELETE";
+
+        # Do not allow connections from docker 1.5 and earlier
+        if ($http_user_agent ~ "^(docker\/1\.(3|4|5(?!\.[0-9]-dev))|Go ).*$" ) {
+            return 404;
+        }
+
+        ## If $docker_distribution_api_version is empty, the header is not added.
+        ## See the map directive above where this variable is defined.
+        add_header 'Docker-Distribution-Api-Version' $docker_distribution_api_version always;
+
+        resolver 127.0.0.11;
+        set $upstream "http://registry:5000";
+        proxy_pass $upstream;
+
+        proxy_set_header Host $http_host; # required for docker client's sake
+        proxy_set_header X-Real-IP $remote_addr; # pass on real client's IP
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_read_timeout 900;
+    }
+}
+
+server {
+    listen 80;
+    listen [::]:80;
+    server_name registry.zinomedia.de;
+    return 301 https://$host$request_uri;
+}
--- a/volumes/conf.d/registryui.zinomedia.de.conf
+++ b/volumes/conf.d/registryui.zinomedia.de.conf
@@ -0,0 +1,42 @@
+server {
+    listen 443 ssl;
+    listen [::]:443 ssl;
+    server_name registryui.zinomedia.de;
+
+    access_log off;
+    error_log /var/log/nginx/error.log error;
+
+    root /usr/share/nginx/html/registryui.zinomedia.de/www/htdocs;
+    index index.php index.html;
+
+    # SSL Certificate Configuration
+    ssl_certificate /etc/letsencrypt/live/registryui.zinomedia.de/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/registryui.zinomedia.de/privkey.pem;
+
+    include "snippets/ssl-optimizations.conf";
+
+    # Password protect
+    auth_basic "Protected Area";
+    auth_basic_user_file /usr/share/nginx/html/registryui.zinomedia.de/.htpasswd;
+
+    location / {
+        add_header Content-Security-Policy "default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; img-src * data:; style-src * 'unsafe-inline'; font-src * data:;" always;
+
+        resolver 127.0.0.11;
+        set $upstream "http://registryui:80";
+        proxy_pass $upstream;
+
+        client_max_body_size 0;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-Host $server_name;
+    }
+}
+
+server {
+    listen 80;
+    listen [::]:80;
+    server_name registryui.zinomedia.de;
+    return 301 https://$host$request_uri;
+}
--- a/volumes/conf.d/seafile.zinomedia.de.conf
+++ b/volumes/conf.d/seafile.zinomedia.de.conf
@@ -0,0 +1,36 @@
+log_format seafileformat '$http_x_forwarded_for $remote_addr [$time_local] "$request" $status $body_bytes_sent "$http_referer" "$http_user_agent" $upstream_response_time';
+
+server {
+    listen 443 ssl;
+    listen [::]:443 ssl;
+    server_name seafile.zinomedia.de;
+
+    access_log off;
+    error_log /var/log/nginx/error.log error;
+
+    ssl_certificate /etc/letsencrypt/live/seafile.zinomedia.de/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/seafile.zinomedia.de/privkey.pem;
+
+    include "snippets/ssl-optimizations.conf";
+    
+    add_header Content-Security-Policy "default-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; img-src 'self' data: http://seafile.zinomedia.de; style-src 'self' 'unsafe-inline'; font-src 'self' data:;" always;
+
+    location / {
+        resolver 127.0.0.11;
+        set $upstream "http://seafile:80";
+        proxy_pass $upstream;
+
+        client_max_body_size 0;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-Host $server_name;
+    }
+}
+
+server {
+    listen 80;
+    listen [::]:80;
+    server_name seafile.zinomedia.de;
+    return 301 https://$host$request_uri;
+}
--- a/volumes/conf.d/seatmapv2.zinomedia.de.conf
+++ b/volumes/conf.d/seatmapv2.zinomedia.de.conf
@@ -0,0 +1,45 @@
+server {
+    listen 443 ssl;
+    listen [::]:443 ssl;
+    server_name seatmapv2.zinomedia.de;
+
+    error_log /var/log/nginx/error.log error;
+    access_log off;
+
+    root /usr/share/nginx/html/seatmapv2.zinomedia.de;
+
+    index index.php;
+
+    ssl_certificate /etc/letsencrypt/live/seatmapv2.zinomedia.de/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/seatmapv2.zinomedia.de/privkey.pem;
+
+    include "snippets/ssl-optimizations.conf";
+    include "snippets/wordpress-optimizations.conf";
+
+    add_header Content-Security-Policy "default-src 'unsafe-inline' 'unsafe-eval' data: blob: *; script-src 'unsafe-inline' 'unsafe-eval' data: blob: *; img-src 'unsafe-inline' data: blob: *; style-src 'unsafe-inline' data: blob: *; font-src 'unsafe-inline' data: blob: *;" always;
+
+    client_max_body_size 0;
+
+    location / {
+        resolver 127.0.0.11;
+        set $upstream "seatmapv2-wordpress:80";
+
+        try_files $uri $uri/ /index.php?$args;
+
+        proxy_set_header X-Forwarded-Host $host;
+        proxy_set_header X-Forwarded-Server $host;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header Host $host;
+        proxy_set_header X-Forwarded-Proto https;
+
+        proxy_pass http://$upstream;
+    }
+}
+
+server {
+    listen 80;
+    listen [::]:80;
+    server_name seatmapv2.zinomedia.de;
+    return 301 https://$host$request_uri;
+}
--- a/volumes/conf.d/simhub.zinomedia.de.conf
+++ b/volumes/conf.d/simhub.zinomedia.de.conf
@@ -0,0 +1,33 @@
+server {
+    listen 443 ssl;
+    listen [::]:443 ssl;
+    server_name simhub.zinomedia.de;
+
+    access_log off;
+    error_log /var/log/nginx/error.log error;
+
+    # SSL Certificate Configuration
+    ssl_certificate /etc/letsencrypt/live/simhub.zinomedia.de/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/simhub.zinomedia.de/privkey.pem;
+
+    include "snippets/ssl-optimizations.conf";
+
+    location / {
+        resolver 127.0.0.11;
+        set $upstream "http://simracing-telemetry-hub-workspace:8000";
+        proxy_pass $upstream;
+
+        proxy_set_header Host $http_host; # required for docker client's sake
+        proxy_set_header X-Real-IP $remote_addr; # pass on real client's IP
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_read_timeout 900;
+    }
+}
+
+server {
+    listen 80;
+    listen [::]:80;
+    server_name simhub.zinomedia.de;
+    return 301 https://$host$request_uri;
+}
--- a/volumes/conf.d/terminsnipe.zinomedia.de.conf
+++ b/volumes/conf.d/terminsnipe.zinomedia.de.conf
@@ -0,0 +1,45 @@
+server {
+    listen 443 ssl;
+    listen [::]:443 ssl;
+    server_name terminsnipe.zinomedia.de;
+
+    error_log /var/log/nginx/error.log error;
+    access_log off;
+
+    root /usr/share/nginx/html/terminsnipe.zinomedia.de;
+
+    index index.php;
+
+    ssl_certificate /etc/letsencrypt/live/terminsnipe.zinomedia.de/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/terminsnipe.zinomedia.de/privkey.pem;
+
+    include "snippets/ssl-optimizations.conf";
+    include "snippets/wordpress-optimizations.conf";
+
+    add_header Content-Security-Policy "default-src 'unsafe-inline' 'unsafe-eval' data: blob: *; script-src 'unsafe-inline' 'unsafe-eval' data: blob: *; img-src 'unsafe-inline' data: blob: *; style-src 'unsafe-inline' data: blob: *; font-src 'unsafe-inline' data: blob: *;" always;
+
+    client_max_body_size 0;
+
+    location / {
+        resolver 127.0.0.11;
+        set $upstream "terminsnipe-wordpress:80";
+
+        try_files $uri $uri/ /index.php?$args;
+
+        proxy_set_header X-Forwarded-Host $host;
+        proxy_set_header X-Forwarded-Server $host;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header Host $host;
+        proxy_set_header X-Forwarded-Proto https;
+
+        proxy_pass http://$upstream;
+    }
+}
+
+server {
+    listen 80;
+    listen [::]:80;
+    server_name terminsnipe.zinomedia.de;
+    return 301 https://$host$request_uri;
+}
--- a/volumes/conf.d/validate.vouch.armos.zinomedia.de.conf
+++ b/volumes/conf.d/validate.vouch.armos.zinomedia.de.conf
@@ -0,0 +1,34 @@
+#log_format custom '[$time_iso8601] VALIDATE | host: $host | request_uri: $request_uri | status: $status | http_host: $http_host | auth_resp_x_vouch_user: $auth_resp_x_vouch_user | upstream_http_x_vouch_user: $upstream_http_x_vouch_user | auth_resp_jwt: $auth_resp_jwt | upstream_http_x_vouch_jwt: $upstream_http_x_vouch_jwt | auth_resp_err: $auth_resp_err | upstream_http_x_vouch_err: $upstream_http_x_vouch_err | auth_resp_failcount: $auth_resp_failcount | upstream_http_x_vouch_failcount: $upstream_http_x_vouch_failcount';
+
+server {
+    listen 443 ssl;
+    listen [::]:443 ssl;
+    server_name validate.vouch.armos.zinomedia.de;
+
+    #access_log /var/log/nginx/access.log custom;
+    access_log off;
+    error_log /var/log/nginx/error.log error;
+
+    ssl_certificate /etc/letsencrypt/live/validate.vouch.armos.zinomedia.de/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/validate.vouch.armos.zinomedia.de/privkey.pem;
+
+    include "snippets/ssl-optimizations.conf";
+
+    location = /validate {
+        # forward the /validate request to Vouch Proxy
+        resolver 127.0.0.11;
+        set $upstream "http://vouch:9090/validate";
+        proxy_pass $upstream;
+
+        # be sure to pass the original host header
+        proxy_set_header Host $http_host;
+    }
+}
+
+server {
+    listen 80;
+    listen [::]:80;
+    server_name validate.vouch.armos.zinomedia.de;
+    return 301 https://$host$request_uri;
+}
+
--- a/volumes/conf.d/vouch.armos.zinomedia.de.conf
+++ b/volumes/conf.d/vouch.armos.zinomedia.de.conf
@@ -0,0 +1,30 @@
+#log_format vouch '[$time_iso8601] VOUCH | request_uri: $request_uri | status: $status | http_host: $http_host | auth_resp_x_vouch_user: $auth_resp_x_vouch_user | upstream_http_x_vouch_user: $upstream_http_x_vouch_user | auth_resp_jwt: $auth_resp_jwt | upstream_http_x_vouch_jwt: $upstream_http_x_vouch_jwt | auth_resp_err: $auth_resp_err | upstream_http_x_vouch_err: $upstream_http_x_vouch_err | auth_resp_failcount: $auth_resp_failcount | upstream_http_x_vouch_failcount: $upstream_http_x_vouch_failcount';
+
+
+server {
+    listen 443 ssl;
+    listen [::]:443 ssl;
+    server_name vouch.armos.zinomedia.de;
+
+    #access_log /var/log/nginx/access.log vouch;
+    access_log off;
+    error_log /var/log/nginx/error.log debug;
+
+    ssl_certificate /etc/letsencrypt/live/vouch.armos.zinomedia.de/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/vouch.armos.zinomedia.de/privkey.pem;
+
+    include "snippets/ssl-optimizations.conf";
+
+    location / {
+        resolver 127.0.0.11;
+        set $upstream "http://vouch:9090";
+        proxy_pass $upstream;
+    }
+}
+
+server {
+    listen 80;
+    listen [::]:80;
+    server_name vouch.armos.zinomedia.de;
+    return 301 https://$host$request_uri;
+}
--- a/volumes/conf.d/zinomedia.de.conf
+++ b/volumes/conf.d/zinomedia.de.conf
@@ -0,0 +1,56 @@
+# Dynamically set CORS headers based on the request origin.
+# Needed for legacy wordoress migrations
+map $http_origin $allow_origin {
+    ~^https://(.*\.)?zinomedia\.de$ $http_origin;
+    default "";
+}
+
+server {
+    listen 443 ssl;
+    listen [::]:443 ssl;
+    server_name zinomedia.de;
+
+    #access_log /var/log/nginx/access.log;
+    error_log /var/log/nginx/error.log error;
+    access_log off;
+
+    root /usr/share/nginx/html/zinomedia.de;
+
+    index index.php;
+
+    ssl_certificate /etc/letsencrypt/live/zinomedia.de/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/zinomedia.de/privkey.pem;
+
+    include "snippets/ssl-optimizations.conf";
+    include "snippets/wordpress-optimizations.conf";
+
+    add_header Content-Security-Policy "default-src 'unsafe-inline' 'unsafe-eval' data: blob: *; script-src 'unsafe-inline' 'unsafe-eval' data: blob: *; img-src 'unsafe-inline' data: blob: *; style-src 'unsafe-inline' data: blob: *; font-src 'unsafe-inline' data: blob: *;" always;
+
+    client_max_body_size 0;
+
+    # Dynamically set CORS headers based on the request origin.
+    add_header 'Access-Control-Allow-Origin' $allow_origin;
+
+    location / {
+        resolver 127.0.0.11;
+        set $upstream "zinomedia-wordpress:80";
+
+        try_files $uri $uri/ /index.php?$args;
+
+        proxy_set_header X-Forwarded-Host $host;
+        proxy_set_header X-Forwarded-Server $host;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header Host $host;
+        proxy_set_header X-Forwarded-Proto https;
+
+        proxy_pass http://$upstream;
+    }
+}
+
+server {
+    listen 80;
+    listen [::]:80;
+    server_name zinomedia.de;
+    return 301 https://$host$request_uri;
+}
--- a/volumes/html/dl.zinomedia.de/.gitkeep
+++ b/volumes/html/dl.zinomedia.de/.gitkeep
--- a/volumes/html/etherpad.zinomedia.de/.gitkeep
+++ b/volumes/html/etherpad.zinomedia.de/.gitkeep
--- a/volumes/html/etherpad.zinomedia.de/.htpasswd
+++ b/volumes/html/etherpad.zinomedia.de/.htpasswd
@@ -0,0 +1 @@
+zino:$apr1$XBzEVqBi$9SNhwAwBS2PJ47coYKoRH/
--- a/volumes/html/index.html
+++ b/volumes/html/index.html
@@ -2,7 +2,7 @@
 <html>

 <head>
-    <title>Welcome to nginx!</title>
+    <title>Welcome to nginx 1337!</title>
    <style>
        html {
            color-scheme: light dark;
--- a/volumes/html/metrics.registry.zinomedia.de/.gitkeep
+++ b/volumes/html/metrics.registry.zinomedia.de/.gitkeep
--- a/volumes/html/metrics.registry.zinomedia.de/.htpasswd
+++ b/volumes/html/metrics.registry.zinomedia.de/.htpasswd
@@ -0,0 +1 @@
+zino:$apr1$XBzEVqBi$9SNhwAwBS2PJ47coYKoRH/
--- a/volumes/html/mtail.zinomedia.de/.gitkeep
+++ b/volumes/html/mtail.zinomedia.de/.gitkeep
--- a/volumes/html/mtail.zinomedia.de/.htpasswd
+++ b/volumes/html/mtail.zinomedia.de/.htpasswd
@@ -0,0 +1 @@
+zino:$apr1$XBzEVqBi$9SNhwAwBS2PJ47coYKoRH/
--- a/volumes/html/pkrstarsbot.zinomedia.de/.gitkeep
+++ b/volumes/html/pkrstarsbot.zinomedia.de/.gitkeep
--- a/volumes/html/registry.zinomedia.de/.gitkeep
+++ b/volumes/html/registry.zinomedia.de/.gitkeep
--- a/volumes/html/registry.zinomedia.de/.htpasswd
+++ b/volumes/html/registry.zinomedia.de/.htpasswd
@@ -0,0 +1 @@
+zino:$apr1$XBzEVqBi$9SNhwAwBS2PJ47coYKoRH/
--- a/volumes/html/registryui.zinomedia.de/.gitkeep
+++ b/volumes/html/registryui.zinomedia.de/.gitkeep
--- a/volumes/html/registryui.zinomedia.de/.htpasswd
+++ b/volumes/html/registryui.zinomedia.de/.htpasswd
@@ -0,0 +1 @@
+zino:$apr1$XBzEVqBi$9SNhwAwBS2PJ47coYKoRH/
--- a/volumes/logs/.gitkeep
+++ b/volumes/logs/.gitkeep
--- a/volumes/snippets/.gitkeep
+++ b/volumes/snippets/.gitkeep
--- a/volumes/snippets/enable-php-fpm.conf
+++ b/volumes/snippets/enable-php-fpm.conf
@@ -0,0 +1,9 @@
+location ~ \.php$ {
+    resolver 127.0.0.11;
+    set $upstream "php-fpm:9000";
+
+    include fastcgi_params;
+    fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+    fastcgi_index index.php;
+    fastcgi_pass $upstream;
+}
--- a/volumes/snippets/enable-vouch-no-subdomain.conf
+++ b/volumes/snippets/enable-vouch-no-subdomain.conf
@@ -0,0 +1,31 @@
+
+# send all requests to the `/validate` endpoint for authorization
+auth_request /validate;
+
+location = /validate {
+    # forward the /validate request to Vouch Proxy
+    proxy_pass http://vouch:9090/validate;
+
+    # be sure to pass the original host header
+    proxy_set_header Host $http_host;
+
+    # Vouch Proxy only acts on the request headers
+    proxy_pass_request_body off;
+    proxy_set_header Content-Length "";
+
+    # optionally add X-Vouch-User as returned by Vouch Proxy along with the request
+    auth_request_set $auth_resp_x_vouch_user $upstream_http_x_vouch_user;
+
+    # these return values are used by the @error401 call
+    auth_request_set $auth_resp_jwt $upstream_http_x_vouch_jwt;
+    auth_request_set $auth_resp_err $upstream_http_x_vouch_err;
+    auth_request_set $auth_resp_failcount $upstream_http_x_vouch_failcount;
+}
+
+# if validate returns `401 not authorized` then forward the request to the error401block
+error_page 401 = @error401;
+
+location @error401 {
+    # redirect to Vouch Proxy for login
+    return 302 https://vouch.armos.zinomedia.de/login?url=$scheme://$http_host$request_uri&vouch-failcount=$auth_resp_failcount&X-Vouch-Token=$auth_resp_jwt&error=$auth_resp_err;
+}
--- a/volumes/snippets/enable-vouch.conf
+++ b/volumes/snippets/enable-vouch.conf
@@ -0,0 +1,27 @@
+# send all requests to the `/validate` endpoint for authorization
+auth_request /validate;
+
+location = /validate {
+    internal;
+    proxy_pass "https://validate.vouch.armos.zinomedia.de/validate";
+
+    # Vouch Proxy only acts on the request headers
+    proxy_pass_request_body off;
+    proxy_set_header Content-Length "";
+
+    # optionally add X-Vouch-User as returned by Vouch Proxy along with the request
+    auth_request_set $auth_resp_x_vouch_user $upstream_http_x_vouch_user;
+
+    # these return values are used by the @error401 call
+    auth_request_set $auth_resp_jwt $upstream_http_x_vouch_jwt;
+    auth_request_set $auth_resp_err $upstream_http_x_vouch_err;
+    auth_request_set $auth_resp_failcount $upstream_http_x_vouch_failcount;
+}
+
+# if validate returns `401 not authorized` then forward the request to the error401block
+error_page 401 = @error401;
+
+location @error401 {
+    # redirect to Vouch Proxy for login
+    return 302 https://vouch.armos.zinomedia.de/login?url=$scheme://$http_host$request_uri&vouch-failcount=$auth_resp_failcount&X-Vouch-Token=$auth_resp_jwt&error=$auth_resp_err;
+}
--- a/volumes/snippets/registry-transfer-logging.conf
+++ b/volumes/snippets/registry-transfer-logging.conf
@@ -0,0 +1,78 @@
+log_format registry_json escape=json
+'{'
+'"timestamp":"$time_iso8601",'
+'"msec":"$msec",'
+'"remote_address":"$remote_addr",'
+'"remote_user":"$remote_user",'
+'"request_id":"$request_id",'
+'"method":"$request_method",'
+'"path":"$uri",'
+'"query_string":"$args",'
+'"http_version":"$server_protocol",'
+'"status":$status,'
+'"bytes_sent":$bytes_sent,'
+'"body_bytes_sent":$body_bytes_sent,'
+'"request_length":$request_length,'
+'"request_time":$request_time,'
+'"upstream_status":"$upstream_status",'
+'"upstream_time":"$upstream_response_time",'
+'"upstream_addr":"$upstream_addr",'
+'"referer":"$http_referer",'
+'"user_agent":"$http_user_agent",'
+'"x_forwarded_for":"$http_x_forwarded_for",'
+'"range":"$http_range",'
+'"content_range":"$sent_http_content_range",'
+'"content_length":"$sent_http_content_length",'
+'"etag":"$sent_http_etag",'
+'"docker_content_digest":"$sent_http_docker_content_digest",'
+'"arg_digest":"$arg_digest",'
+'"upstream_range":"$upstream_http_range",'
+'"docker_upload_uuid":"$upstream_http_docker_upload_uuid",'
+'"docker_distribution_api_version":"$docker_distribution_api_version",'
+'"transfer_direction":"$transfer_direction"'
+'}';
+
+map $body_bytes_sent $has_body_bytes_sent {
+    default 0;
+    ~^[1-9][0-9]*$ 1;
+}
+
+map "$request_method$uri" $is_blob_get {
+    default 0;
+    ~^GET/v2/.+/blobs/sha256:[a-f0-9]+$ 1;
+}
+
+map "$is_blob_get$has_body_bytes_sent" $is_pull_transfer {
+    default 0;
+    ~^11$ 1;
+}
+
+map $upstream_http_range $has_upstream_range {
+    default 0;
+    ~^[0-9]+-[0-9]+$ 1;
+}
+
+map "$request_method$uri" $is_upload_patch {
+    default 0;
+    ~^PATCH/v2/.+/blobs/uploads/[a-f0-9-]+$ 1;
+}
+
+map "$is_upload_patch$has_upstream_range" $is_push_transfer {
+    default 0;
+    ~^11$ 1;
+}
+
+map "$is_pull_transfer$is_push_transfer" $is_transfer_loggable {
+    default 0;
+    ~1 1;
+}
+
+map "$is_pull_transfer$is_push_transfer" $transfer_direction {
+    default "-";
+    "10" "pull";
+    "01" "push";
+}
+
+map $upstream_http_docker_distribution_api_version $docker_distribution_api_version {
+    '' 'registry/2.0';
+}
--- a/volumes/snippets/ssl-optimizations.conf
+++ b/volumes/snippets/ssl-optimizations.conf
@@ -0,0 +1,5 @@
+
+ssl_protocols TLSv1.2 TLSv1.3;
+ssl_session_cache shared:SSL:50m;
+ssl_session_timeout 10m;
+add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
--- a/volumes/snippets/wordpress-optimizations.conf
+++ b/volumes/snippets/wordpress-optimizations.conf
@@ -0,0 +1,19 @@
+location ~ /(\.user\.ini|debug\.log) {
+    deny all;
+}
+
+location = /favicon.ico {
+    log_not_found off;
+    access_log off;
+}
+
+location = /robots.txt {
+    allow all;
+    log_not_found off;
+    access_log off;
+}
+
+location ~* \.(js|css|png|jpg|jpeg|gif|ico)$ {
+    expires max;
+    log_not_found off;
+}
Author	SHA1	Message	Date
zino	f105840565	m	2025-11-19 23:12:38 +01:00
zino	0590e7f1d8	m	2025-11-19 22:16:51 +01:00
zino	4f00b3efd5	m	2025-09-23 10:30:25 +02:00
zino	1041a238f6	m	2025-09-23 10:29:21 +02:00
zino	3da16e6864	m	2025-09-23 10:26:15 +02:00
zino	7050d4f407	m	2025-09-23 10:21:32 +02:00
zino	e484933cf5	m	2025-09-23 10:17:26 +02:00
zino	c98045595b	m	2025-09-23 10:13:12 +02:00
zino	32496343ba	m	2025-09-23 10:09:42 +02:00
zino	313e3f79a6	m	2025-09-23 10:07:42 +02:00
zino	33ea05f58f	m	2025-09-23 10:07:31 +02:00
zino	f98d5e6b44	m	2025-09-23 09:59:09 +02:00
zino	293e2ff735	m	2025-09-23 09:56:04 +02:00
zino	da25720404	m	2025-09-23 09:51:25 +02:00
zino	bbd5766662	m	2025-09-23 09:48:33 +02:00
zino	9550d5cb5a	m	2025-09-23 09:46:18 +02:00
zino	d6c3269505	m	2025-09-23 09:45:16 +02:00
zino	1edf2aff78	m	2025-09-23 09:42:39 +02:00
zino	202bb501dd	m	2025-09-23 09:40:57 +02:00
zino	17d7b206f7	m	2025-09-23 09:34:22 +02:00
zino	9f1e095b99	m	2025-09-23 09:29:29 +02:00
zino	509077d6ee	m	2025-09-23 09:28:35 +02:00
zino	5a1115626b	m	2025-08-18 10:05:01 +02:00
zino	5d173752ae	m	2025-08-14 12:50:10 +02:00
zino	162469c797	m	2025-08-14 10:48:29 +02:00
zino	4e39adf51a	m	2025-08-14 10:46:44 +02:00
zino	4eaf49ae7b	m	2025-08-14 10:45:38 +02:00
zino	2a1685303d	m	2025-08-14 10:37:09 +02:00
zino	a89dfa1d42	m	2025-08-14 10:03:12 +02:00
zino	92e6973843	m	2025-08-13 15:28:09 +02:00
zino	1361b6aa83	m	2025-08-13 14:58:02 +02:00
zino	9ef5d55414	m	2025-08-13 14:49:40 +02:00
zino	a50370e926	m	2025-08-13 14:24:29 +02:00
zino	b29ad5411c	m	2025-08-13 14:23:51 +02:00
zino	9190a8f1c5	m	2024-06-18 13:41:26 +02:00
zino	77d83d5b57	m	2024-06-18 13:40:17 +02:00
zino	c57985a721	m	2024-06-08 14:32:16 +02:00
zino	a3708ac4cd	m	2024-06-08 14:28:29 +02:00
zino	6993a5abfe	m	2024-06-08 14:27:04 +02:00
zino	9c5ad3b512	m	2024-06-08 14:24:57 +02:00
zino	dc7e6d8c61	m	2024-06-08 14:23:38 +02:00
zino	cc7a1ff8dc	m	2024-06-08 14:21:09 +02:00
zino	e1c749ad78	m	2024-06-08 14:12:17 +02:00
zino	3778d02139	m	2024-06-08 14:04:55 +02:00
zino	83ee779593	m	2024-06-08 13:49:15 +02:00
zino	b27d1a8f2c	m	2024-06-08 13:47:00 +02:00
zino	f99ff14243	m	2024-06-08 13:36:59 +02:00
zino	415953d4de	m	2024-06-08 13:33:18 +02:00
zino	223d6d470a	m	2024-06-08 13:31:31 +02:00
zino	0a84bc38be	m	2024-06-06 19:33:08 +02:00
zino	b57b52b3da	m	2024-06-06 19:28:08 +02:00
zino	5d05203457	m	2024-06-06 19:21:49 +02:00
zino	5376ede635	m	2024-06-06 19:15:12 +02:00
zino	04fc7a2ffa	m	2024-06-06 19:13:30 +02:00
zino	59d2ef4d0d	m	2024-04-01 18:26:17 +02:00
zino	32cd90cca0	m	2024-04-01 18:25:44 +02:00
zino	bf0bf654c5	m	2024-04-01 18:25:39 +02:00
zino	33337f83cc	m	2024-04-01 18:01:40 +02:00
zino	7a7429b610	m	2024-04-01 17:41:01 +02:00
zino	e557c3589c	m	2024-04-01 17:38:52 +02:00
zino	32f4be6957	m	2024-04-01 17:19:13 +02:00
zino	ab5e584008	m	2024-04-01 17:05:02 +02:00
zino	14dd20a34c	m	2024-04-01 17:04:20 +02:00
zino	17110d3c13	m	2024-04-01 16:52:43 +02:00
zino	0f47088789	m	2024-04-01 16:48:43 +02:00
zino	72f4d15726	m	2024-04-01 16:48:00 +02:00
zino	96ba0eb83d	m	2024-03-29 20:24:54 +01:00
zino	1f82e694da	m	2024-03-29 20:18:57 +01:00
zino	b2bf4bbf8d	m	2024-03-29 20:10:45 +01:00
zino	89875a56b5	m	2024-03-29 20:08:10 +01:00
zino	78310df861	m	2024-03-29 17:02:28 +01:00
zino	2a902d8b92	m	2024-03-29 16:59:28 +01:00
zino	5e52ddf28d	m	2024-03-29 16:50:55 +01:00
zino	1090d5922f	m	2024-03-29 16:48:14 +01:00
zino	2201bf5833	m	2024-03-29 16:41:05 +01:00
zino	1c34795e1e	m	2024-02-01 13:50:11 +01:00
zino	35db124803	m	2024-02-01 13:47:49 +01:00
zino	c2a973d564	m	2024-02-01 13:44:57 +01:00
zino	573aad3b1a	m	2024-02-01 13:42:49 +01:00
zino	f95abe349a	m	2024-01-21 16:34:51 +01:00
zino	ffcc1686ca	m	2024-01-21 16:32:26 +01:00
zino	1983901d53	,	2024-01-21 16:30:53 +01:00
zino	4ae773badd	m	2024-01-21 16:16:54 +01:00
zino	f6c9a445be	m	2024-01-21 16:14:55 +01:00
zino	ca3e3a7457	m	2024-01-21 16:12:05 +01:00
zino	131b1e2364	m	2024-01-21 16:03:00 +01:00
zino	83cba957a2	m	2024-01-21 15:59:57 +01:00
zino	08d5b72c91	m	2023-12-10 17:45:30 +01:00
zino	a5457db297	m	2023-12-10 17:31:30 +01:00
zino	0ee9123293	m	2023-12-10 17:14:24 +01:00
zino	b6250bed79	m	2023-12-10 16:38:19 +01:00
zino	fa773d78d5	m	2023-12-10 14:28:49 +01:00
zino	3a80e08fa3	m	2023-12-10 14:26:25 +01:00
zino	0cacf79f8d	m	2023-12-10 14:22:00 +01:00
zino	11232dc9d6	m	2023-12-10 14:20:39 +01:00
zino	d383725650	m	2023-12-10 14:19:07 +01:00
zino	5401c0133c	m	2023-12-10 14:17:38 +01:00
zino	d7b88e188a	m	2023-12-10 14:15:27 +01:00
zino	b45f4b1c56	m	2023-12-10 14:11:25 +01:00
zino	a705e8034a	m	2023-12-10 14:10:08 +01:00
zino	ac569bf453	m	2023-12-10 14:07:40 +01:00
zino	cbc07efa19	m	2023-12-10 13:54:25 +01:00
zino	6781ca3bbd	m	2023-12-10 13:50:42 +01:00
zino	82942a542d	m	2023-12-10 13:38:43 +01:00
zino	e79c96f2d6	m	2023-12-10 13:29:00 +01:00
zino	f349e1b923	m	2023-12-10 12:33:41 +01:00
zino	1fae2aa434	m	2023-12-10 02:38:26 +01:00
zino	c9b73dbd1a	m	2023-12-10 02:37:01 +01:00
zino	ffe433cf21	m	2023-12-10 02:28:09 +01:00
zino	ef6ef33754	m	2023-12-10 02:11:17 +01:00
zino	9d5a92211f	m	2023-12-10 02:02:00 +01:00
zino	1b0e308fa3	m	2023-12-10 01:58:30 +01:00
zino	4936768762	m	2023-12-10 01:57:23 +01:00
zino	6af3d1cc62	m	2023-12-10 01:48:53 +01:00
zino	0e601e54b6	m	2023-12-10 01:31:49 +01:00
zino	3c1bd28763	m	2023-12-10 01:31:03 +01:00
zino	3d47735381	m	2023-12-10 01:30:18 +01:00
zino	7c869ad8b3	m	2023-12-10 01:21:16 +01:00
zino	6a57711d47	m	2023-12-10 01:16:43 +01:00
zino	2a7f8f77cf	m	2023-12-09 21:04:40 +01:00
zino	957b9088b7	m	2023-12-09 21:03:13 +01:00
zino	312c5c506a	m	2023-12-09 20:36:02 +01:00
zino	974f7d993d	m	2023-12-09 20:35:08 +01:00
zino	9ae4a84978	m	2023-12-09 20:34:06 +01:00
zino	106a7e5f5b	m	2023-12-09 20:30:07 +01:00
zino	45e2bd87f3	m	2023-12-09 20:29:09 +01:00
zino	04d7f9ec8d	modified: docker-compose.yml modified: volumes/conf.d/zinomedia.de.conf	2023-12-09 20:23:46 +01:00
zino	4a3a71972f	m	2023-12-09 20:21:43 +01:00
zino	75dd2ef31f	m	2023-12-09 20:16:30 +01:00
zino	243eda8d3b	m	2023-12-09 20:15:51 +01:00
zino	84af1a3cf9	m	2023-12-09 20:14:38 +01:00
zino	06a8950ba8	m	2023-12-09 20:13:07 +01:00
zino	f7ad867bca	m	2023-12-09 20:07:39 +01:00
zino	df59b5f836	modified: volumes/conf.d/zinomedia.de.conf	2023-12-09 20:06:49 +01:00
zino	a739419274	m	2023-12-09 20:06:17 +01:00
zino	129b7915aa	m	2023-12-09 20:04:52 +01:00
zino	12c023fbf2	m	2023-12-09 19:57:12 +01:00
zino	e6070ea5bc	m	2023-12-09 19:51:16 +01:00
zino	289bb03d0e	modified: volumes/conf.d/zinomedia.de.conf	2023-12-09 19:46:17 +01:00
zino	0003cc9673	m	2023-12-09 19:41:10 +01:00
zino	39176fd161	m	2023-12-09 19:34:58 +01:00
zino	cd93a85f7c	m	2023-12-09 19:33:05 +01:00
zino	76b915244a	m	2023-12-09 19:31:00 +01:00
zino	6f5b2d26e6	m	2023-12-09 19:21:11 +01:00
zino	91ec9cf007	m	2023-12-09 19:19:17 +01:00
zino	5624a6b32d	m	2023-12-09 19:18:46 +01:00
zino	e780e4ffd7	m	2023-12-09 19:18:07 +01:00
zino	01aa1fa08a	m	2023-12-09 19:17:02 +01:00
zino	490a03856e	m	2023-12-09 19:15:58 +01:00
zino	59cee5bd51	m	2023-12-09 19:02:00 +01:00
zino	3e5021388f	m	2023-12-09 18:59:44 +01:00
zino	8197074b37	m	2023-12-09 18:59:09 +01:00
zino	e2f59e4715	m	2023-12-09 18:58:45 +01:00
zino	30b730dc65	modified: volumes/conf.d/zinomedia.de.conf	2023-12-09 18:58:00 +01:00
zino	ed1fa82748	m	2023-12-09 18:54:40 +01:00
zino	f149b0c3a4	m	2023-12-09 18:49:06 +01:00
zino	eb1469e086	m	2023-12-09 16:04:00 +01:00
zino	e4ee646ebf	m	2023-12-09 15:46:53 +01:00
zino	e94b35eb40	m	2023-12-09 15:43:01 +01:00
zino	340d210207	m	2023-12-09 15:38:36 +01:00
zino	addea7d3f4	m	2023-12-09 14:30:40 +01:00
zino	4d1c8d370e	m	2023-12-09 13:57:56 +01:00
zino	07a3d78137	m	2023-12-09 13:50:37 +01:00
zino	42295b30df	m	2023-12-06 00:39:12 +01:00
zino	99473d7d3f	m	2023-12-06 00:37:16 +01:00
zino	7d75283f8d	m	2023-12-06 00:35:27 +01:00
zino	16caafcd46	m	2023-12-06 00:34:40 +01:00
zino	82e27ef5e1	m	2023-12-06 00:33:03 +01:00
zino	c8e7eb665b	m	2023-12-06 00:30:34 +01:00
zino	a697ffe38a	m	2023-12-06 00:25:31 +01:00
zino	f5b1477205	m	2023-12-06 00:22:59 +01:00
zino	232a197661	m	2023-12-06 00:21:09 +01:00
zino	bce1cd6761	m	2023-12-06 00:19:25 +01:00
zino	d720b2734a	m	2023-12-06 00:12:53 +01:00
zino	22f863d23e	m	2023-12-06 00:11:51 +01:00
zino	d32b9f5942	m	2023-12-06 00:10:34 +01:00
zino	1e73551f4b	m	2023-12-06 00:10:25 +01:00
zino	0c1922d28e	m	2023-12-06 00:07:54 +01:00
zino	8539d591af	m	2023-12-06 00:05:37 +01:00
zino	2c2136f09c	m	2023-12-06 00:03:00 +01:00
zino	cbf7924e63	m	2023-12-06 00:01:24 +01:00
zino	850de71c4d	m	2023-12-05 23:59:52 +01:00
zino	3c270cdc1b	m	2023-12-05 23:58:34 +01:00
zino	8c209185f3	m	2023-12-05 23:56:47 +01:00
zino	874ac87455	m	2023-12-05 23:54:54 +01:00
zino	7ff2505784	m	2023-12-05 23:53:44 +01:00
zino	2cad294468	m	2023-12-05 23:53:03 +01:00
zino	8134bd0d5d	m	2023-12-05 23:46:21 +01:00
zino	81c1465902	m	2023-12-05 23:43:05 +01:00
zino	50467139ab	m	2023-12-05 23:31:42 +01:00
zino	a835451744	m	2023-12-05 23:30:14 +01:00
zino	9af967b5d3	m	2023-12-05 23:28:33 +01:00
zino	97477e8532	m	2023-12-05 23:27:33 +01:00
zino	45e9501a2f	m	2023-12-05 23:22:41 +01:00
zino	58f8995b94	m	2023-12-05 23:12:28 +01:00
zino	7c9f42f3a3	m	2023-12-05 23:03:32 +01:00
zino	772cf05ad6	m	2023-12-05 23:01:40 +01:00
zino	998a9ccbdc	m	2023-12-05 22:59:40 +01:00
zino	c9e2a3df4c	m	2023-12-05 22:57:17 +01:00
zino	2a8aa1576e	m	2023-12-05 22:54:07 +01:00
zino	c224ddd620	m	2023-12-05 22:52:01 +01:00
zino	2a72f493ae	m	2023-12-05 22:48:42 +01:00
zino	1cddf1bada	m	2023-12-05 22:45:40 +01:00
zino	aa90afcd7a	modified: volumes/conf.d/code.zinomedia.de.conf	2023-12-05 22:44:28 +01:00
zino	4e2b8f1892	m	2023-12-05 22:42:25 +01:00
zino	fe8598e0a9	m	2023-12-05 22:40:03 +01:00
zino	78ae074e6e	m	2023-12-05 22:38:09 +01:00
zino	be150c6baa	m	2023-12-05 22:36:32 +01:00
zino	c0fa42a606	m	2023-12-05 22:34:59 +01:00
zino	8bfe0ab236	m	2023-12-05 22:31:07 +01:00
zino	10d385452c	m	2023-12-05 22:27:12 +01:00
zino	a655588ad0	m	2023-12-05 22:26:08 +01:00
zino	36b2520261	m	2023-12-05 22:23:48 +01:00
zino	c658646a5d	m	2023-12-05 22:19:25 +01:00
zino	826c1b5b7c	m	2023-12-05 22:18:44 +01:00
zino	857d3bc5e3	m	2023-12-05 22:16:54 +01:00
zino	5646d816c6	m	2023-12-05 22:15:57 +01:00
zino	91b42de6ae	m	2023-12-05 22:15:20 +01:00
zino	ac7cc350df	m	2023-12-05 22:13:36 +01:00
zino	19f26e8b40	m	2023-12-05 22:12:57 +01:00
zino	8c441aa54e	m	2023-12-05 22:08:03 +01:00
zino	f2c938a1e7	m	2023-12-05 22:04:24 +01:00
zino	d9195c8478	m	2023-12-05 22:02:58 +01:00
zino	4d69fc170b	m	2023-12-05 21:59:50 +01:00
zino	1bb416ea1b	m	2023-12-05 21:58:18 +01:00
zino	c4e7238619	m	2023-12-05 21:54:46 +01:00
zino	53b045554f	m	2023-12-05 21:52:51 +01:00
zino	fff112ef6d	m	2023-12-05 21:45:44 +01:00
zino	b355952bcb	modified: volumes/conf.d/validate.vouch.armos.zinomedia.de.conf	2023-12-05 21:45:09 +01:00
zino	3fea8330b5	m	2023-12-05 21:43:35 +01:00
zino	0a545f5ad4	m	2023-12-05 21:40:25 +01:00
zino	7e93776892	m	2023-12-05 21:39:26 +01:00
zino	3910d84185	m	2023-12-05 21:38:15 +01:00
zino	f79e633cfc	m	2023-12-05 21:36:14 +01:00
zino	8ae65e0c24	m	2023-12-05 21:35:34 +01:00
zino	6c149b22df	m	2023-12-05 21:33:36 +01:00
zino	7bd9335116	m	2023-12-05 21:32:26 +01:00
zino	9462bb3fe1	m	2023-12-05 21:29:36 +01:00
zino	056d5e2fb2	m	2023-12-05 21:28:16 +01:00
zino	83430e30ab	m	2023-12-05 21:26:51 +01:00
zino	424a10e5bf	m	2023-12-05 21:24:43 +01:00
zino	38ff8b1ffa	m	2023-12-05 21:23:13 +01:00
zino	097d30eadd	m	2023-12-05 21:22:05 +01:00
zino	a12784be3c	m	2023-12-05 21:20:40 +01:00
zino	2279f1a9d0	m	2023-12-05 21:19:57 +01:00
zino	2c48af7639	m	2023-12-05 21:19:01 +01:00
zino	5d72d7e3ee	m	2023-12-05 21:17:54 +01:00
zino	989806f295	modified: volumes/snippets/enable-vouch-no-subdomain.conf	2023-12-05 21:13:23 +01:00
zino	8f9fcf7624	m	2023-12-05 21:11:38 +01:00
zino	7e2fb7f9e8	modified: volumes/snippets/enable-vouch-no-subdomain.conf	2023-12-05 21:11:06 +01:00
zino	263d8a0302	m	2023-12-05 21:10:28 +01:00
zino	4b984790d4	m	2023-12-05 21:05:34 +01:00
zino	c79a65d612	m	2023-12-05 21:02:58 +01:00
zino	157ae97d1b	m	2023-12-05 21:00:37 +01:00
zino	988a8ca9db	m	2023-12-05 20:58:56 +01:00
zino	72c6fea76d	m	2023-12-05 20:57:44 +01:00
zino	1c763ad402	m	2023-12-05 20:55:26 +01:00
zino	64d1e97d3a	m	2023-12-05 20:54:17 +01:00
zino	058d728e5c	m	2023-12-05 20:50:43 +01:00
zino	c2ebc521c3	m	2023-12-05 20:06:14 +01:00
zino	77e1c36348	m	2023-12-05 20:04:21 +01:00
zino	7722c453d8	m	2023-12-05 19:56:56 +01:00
zino	38677816dd	m	2023-12-05 19:47:22 +01:00
zino	908a84cb64	m	2023-12-05 19:45:13 +01:00
zino	5d58ecb1c8	m	2023-12-05 19:43:17 +01:00
zino	90a237c266	m	2023-12-05 19:41:30 +01:00
zino	c2d6671336	m	2023-12-05 19:34:14 +01:00
zino	e1993b63d0	m	2023-12-05 19:31:04 +01:00
zino	376de66f55	m	2023-12-05 19:22:59 +01:00
zino	18424240c4	m	2023-12-05 19:18:41 +01:00
zino	b6e9231ec8	m	2023-12-05 19:17:28 +01:00
zino	45274f6145	m	2023-12-05 19:16:21 +01:00
zino	67aa977e5b	m	2023-12-05 19:11:34 +01:00
zino	8cc3945534	m	2023-12-05 19:09:56 +01:00
zino	207697eb0c	m	2023-12-05 19:09:04 +01:00
zino	de88a941c8	m	2023-12-05 19:06:51 +01:00
zino	65c9b0224a	m	2023-12-05 19:04:25 +01:00
zino	007f6b95e7	modified: volumes/conf.d/pkrstarsbot.zinomedia.de.conf	2023-12-05 19:02:39 +01:00
zino	2473f94990	m	2023-12-05 19:00:07 +01:00
zino	cc157b1d5e	m	2023-12-05 18:58:17 +01:00
zino	f0df09fa67	m	2023-12-05 18:57:14 +01:00
zino	e97a9f309e	m	2023-12-05 18:54:25 +01:00
zino	fb022a345e	m	2023-12-05 18:53:10 +01:00
zino	94efeecb48	m	2023-12-05 18:47:18 +01:00
zino	ed78c6c3e3	m	2023-12-05 18:46:06 +01:00
zino	2cc03cde5f	m	2023-12-05 18:44:34 +01:00
zino	94fc90b172	m	2023-12-05 18:41:44 +01:00
zino	5cf5e9bc09	m	2023-12-05 18:38:36 +01:00
zino	01293576da	m	2023-12-05 18:37:28 +01:00
zino	5b7648436d	modified: volumes/conf.d/code.zinomedia.de.conf modified: volumes/conf.d/vouch.armos.zinomedia.de.conf	2023-12-05 18:35:21 +01:00
zino	09eba6d88b	m	2023-12-05 18:34:37 +01:00
zino	e80024ea92	m	2023-12-05 18:29:11 +01:00
zino	7b62635232	m	2023-12-05 18:28:22 +01:00
zino	d390bcad8a	m	2023-12-05 18:26:52 +01:00
zino	d13e5fb1cc	m	2023-12-05 18:26:00 +01:00
zino	ac6445e1b0	m	2023-12-05 18:21:47 +01:00
zino	063b84c491	m	2023-12-05 18:20:24 +01:00
zino	b0161665ff	m	2023-12-05 18:20:01 +01:00
zino	fc642c4bc3	m	2023-12-05 18:18:36 +01:00
zino	1c138829f3	m	2023-12-05 18:17:13 +01:00
zino	6d46c1b00f	m	2023-12-05 18:16:23 +01:00
zino	54e75b6256	m	2023-12-05 18:15:30 +01:00
zino	d845c7a25a	m	2023-12-05 18:14:21 +01:00
zino	5189cf55db	m	2023-12-05 18:13:10 +01:00
zino	f169a5e8f0	m	2023-12-05 18:11:53 +01:00
zino	ccb81d8b02	m	2023-12-05 18:10:01 +01:00
zino	d1797993d8	m	2023-12-05 18:09:33 +01:00
zino	ac69a4fc7a	m	2023-12-05 18:08:18 +01:00
zino	339e7b0f11	modified: volumes/conf.d/validate.vouch.armos.zinomedia.de.conf	2023-12-05 18:06:19 +01:00
zino	2e5e395c09	modified: volumes/conf.d/code.zinomedia.de.conf modified: volumes/conf.d/validate.vouch.armos.zinomedia.de.conf	2023-12-05 18:05:32 +01:00
zino	4aa1493d7e	m	2023-12-05 17:54:02 +01:00
zino	f1531333ef	m	2023-12-05 17:53:44 +01:00
zino	ece07dcec0	m	2023-12-05 17:49:16 +01:00
zino	964c36368c	modified: volumes/conf.d/code.zinomedia.de.conf	2023-12-05 17:47:20 +01:00
zino	77ef9e629b	m	2023-12-05 17:46:02 +01:00
zino	1cdb17ce42	m	2023-12-05 17:45:17 +01:00
zino	4a02409ceb	s modified: volumes/conf.d/code.zinomedia.de.conf	2023-12-05 17:42:52 +01:00
zino	b7e8f552e1	m	2023-12-05 17:37:09 +01:00
zino	f5b7a29ed3	m	2023-12-05 17:34:06 +01:00
zino	10f40557af	m	2023-12-05 17:23:56 +01:00
zino	f3a1ac6a8c	m	2023-12-05 17:20:04 +01:00
zino	f4a773ef07	m	2023-12-05 17:18:09 +01:00
zino	87f36664e3	m	2023-12-05 17:07:39 +01:00
zino	312f178c52	m	2023-12-05 17:05:30 +01:00
zino	a7441a5e39	m	2023-12-05 17:04:24 +01:00
zino	664e249fb5	m	2023-12-05 17:00:52 +01:00
zino	ec8a5cb8e5	m	2023-12-05 16:57:18 +01:00
zino	9586f4e1ed	m	2023-12-05 16:55:44 +01:00
zino	3018f6db60	m	2023-12-05 16:55:02 +01:00
zino	f1fcbc1f42	m	2023-12-05 16:51:47 +01:00
zino	8cdbbe3545	m	2023-12-05 16:48:52 +01:00
zino	3e7510ee73	m	2023-12-05 16:47:41 +01:00
zino	7be85fca96	m	2023-12-05 16:45:01 +01:00
zino	5b34809764	m	2023-12-05 16:43:11 +01:00
zino	ce34f828ca	m	2023-12-05 16:42:41 +01:00
zino	2dce9930d6	m	2023-12-05 16:36:42 +01:00
zino	fada0bb920	modified	2023-12-05 16:34:27 +01:00
zino	2d09924489	modified	2023-12-05 16:33:05 +01:00
zino	ee68174d97	m	2023-12-05 16:25:21 +01:00
zino	29b9951fad	m	2023-12-05 16:24:10 +01:00
zino	8b7303e0e1	m	2023-12-05 16:23:21 +01:00
zino	ecae942865	modified	2023-12-05 16:22:25 +01:00
zino	f4777e758f	modified	2023-12-05 16:21:41 +01:00
zino	627187c7d1	modified	2023-12-05 16:13:31 +01:00
zino	b57d9c4129	modified	2023-12-05 16:08:48 +01:00
zino	5ad08ee63f	modified	2023-12-05 16:07:18 +01:00
zino	f4600d1026	modified	2023-12-05 16:06:00 +01:00
zino	7bc63b8b20	modified	2023-12-05 16:04:01 +01:00
zino	4b6629e280	modified	2023-12-05 16:01:58 +01:00
zino	128b0a0162	modified	2023-12-05 15:33:03 +01:00
zino	e6786b4e56	modified	2023-12-05 15:12:53 +01:00
zino	058e9cdd2a	modified	2023-12-05 14:58:45 +01:00
zino	b81c213df4	modified	2023-12-05 14:55:02 +01:00
zino	b49537bfb8	modified	2023-12-05 14:35:23 +01:00
zino	0e09c53e00	modified	2023-12-05 14:10:17 +01:00
zino	5d3141c110	modified	2023-12-05 13:53:56 +01:00
zino	1904b1620d	modified	2023-12-05 13:53:24 +01:00
zino	fd1e21972f	modified	2023-12-05 13:51:24 +01:00
zino	d43a038d23	modified	2023-12-03 15:29:50 +01:00
zino	1a485f58a2	modifed	2023-12-03 15:11:31 +01:00
zino	ed8b18fbf3	modified	2023-12-03 14:22:01 +01:00
zino	971f160705	modified	2023-12-03 14:11:18 +01:00
zino	adbb93a25e	modified	2023-12-03 14:05:08 +01:00
zino	5a332c841c	modified	2023-12-03 14:04:29 +01:00
zino	d6ffea3494	modified	2023-12-03 14:03:58 +01:00
zino	bd4ed53d8d	modified	2023-12-03 14:02:45 +01:00
zino	2ba1ebb361	modified	2023-12-03 13:59:00 +01:00
zino	848468ca03	modified	2023-12-03 13:57:09 +01:00
zino	a9277c2a9f	modified	2023-12-03 13:54:41 +01:00
zino	d737ea6c85	modified: volumes/conf.d/seafile.zinomedia.de.conf	2023-12-03 13:42:14 +01:00
zino	095a244d51	modified	2023-12-03 13:39:30 +01:00
zino	d91e921ddc	modified	2023-12-03 13:38:13 +01:00
zino	d7b59ed693	modified	2023-12-03 13:37:31 +01:00
zino	49b3240f41	modified	2023-12-03 13:32:19 +01:00
zino	6e19e4c582	modified	2023-12-03 13:20:32 +01:00
zino	e194532d2e	modified	2023-11-29 15:41:57 +01:00
zino	606fdfe5b4	modified	2023-11-29 15:38:33 +01:00
zino	aa68602ad6	modified: volumes/conf.d/seafile.zinomedia.de.conf	2023-11-29 15:16:55 +01:00
zino	493e61c827	modified	2023-11-29 15:12:12 +01:00
zino	56065c02a8	modified	2023-11-29 14:50:42 +01:00
zino	f6c394b1bb	modified	2023-11-29 14:45:20 +01:00
zino	693a47fab8	modified	2023-11-29 14:38:50 +01:00
zino	1150d5292d	modified	2023-11-29 14:35:44 +01:00
zino	b7655a17e2	modified	2023-11-29 14:30:31 +01:00
zino	4c008724c4	modified: volumes/conf.d/seafile.zinomedia.de.conf	2023-11-29 14:27:52 +01:00
zino	45dae0ebae	modified	2023-11-29 14:17:26 +01:00
zino	45ff752717	modified	2023-11-29 13:11:11 +01:00
zino	73a8e42046	modified	2023-11-29 12:57:47 +01:00
zino	489d771859	modified	2023-11-29 12:44:18 +01:00
zino	f0e25b0bcc	modified	2023-11-29 12:43:35 +01:00
zino	66f429da4d	modified	2023-11-29 12:38:12 +01:00
zino	956474ed3a	modified	2023-11-29 12:36:29 +01:00
zino	29c45475f0	modified	2023-11-29 12:02:53 +01:00
zino	3b2d7e8967	modified	2023-11-29 11:30:50 +01:00
zino	d6d320176b	modified	2023-11-28 22:59:23 +01:00
zino	9d46128c3a	modified	2023-11-28 22:57:49 +01:00
zino	eb9f27b3ec	modified	2023-11-28 21:36:39 +01:00
zino	6d8bbc7ea8	modified	2023-11-28 19:54:58 +01:00
zino	f96209547d	modified	2023-11-28 19:48:06 +01:00
zino	4966ca2ceb	modified	2023-11-28 17:31:05 +01:00
zino	bc089757f5	modified	2023-11-28 17:15:13 +01:00
zino	9bd0ed9981	modified	2023-11-28 17:09:04 +01:00
zino	8b6819011e	modified	2023-11-28 17:05:59 +01:00
zino	c3b880ff54	modified	2023-11-28 17:05:09 +01:00
zino	bf8b87fb10	modified gitignore	2023-11-28 17:02:32 +01:00
acc@zinomedia.de	6f46be0650	modified server	2023-11-28 16:42:50 +01:00
acc@zinomedia.de	682f465450	modified	2023-11-28 14:18:08 +01:00
zino	14555229b2	modified	2023-11-27 18:04:50 +01:00
zino	4b92e30423	modified	2023-11-27 18:01:42 +01:00
zino	ab806a3429	modified	2023-11-27 17:57:40 +01:00
zino	2ff8a34482	modified	2023-11-27 17:56:14 +01:00
zino	4cab22d5f4	modified	2023-11-27 17:46:33 +01:00
zino	0135fee865	modified	2023-11-27 17:11:32 +01:00
zino	983dfbf78d	modified	2023-11-27 17:09:27 +01:00
zino	b95bba6bbe	modified	2023-11-27 15:47:31 +01:00
zino	2fcc10b4b2	modified	2023-11-27 15:33:21 +01:00
zino	3e06b01817	modified	2023-11-27 15:31:21 +01:00
zino	8c2c19aec4	modified	2023-11-27 15:14:46 +01:00
zino	1f3770547e	modified	2023-11-27 14:40:15 +01:00
zino	8c136cb32b	modified	2023-11-27 13:21:37 +01:00
zino	1f98082812	modified	2023-11-26 23:43:52 +01:00
zino	2e37cf5a64	modified	2023-11-26 23:43:42 +01:00
zino	55737b0a0c	modified	2023-11-26 23:31:35 +01:00
zino	52d2baad49	modified	2023-11-26 23:28:52 +01:00
zino	0809c35959	modified	2023-11-26 23:28:16 +01:00
zino	72d683fa20	modified	2023-11-26 23:09:35 +01:00