summaryrefslogtreecommitdiff
path: root/templates/etc/nginx/domain.erb
diff options
context:
space:
mode:
authorSilvio Rhatto <rhatto@riseup.net>2017-10-23 19:42:32 -0200
committerSilvio Rhatto <rhatto@riseup.net>2017-10-23 19:42:32 -0200
commit1bfffe2e0adff6e44ec33726988b64f95ea2f599 (patch)
treefaee925240714b633218448633c841f0de89dbe1 /templates/etc/nginx/domain.erb
parent5512c493e13998d4c83d7eab3d89e5a1c0836566 (diff)
downloaddebian-1bfffe2e0adff6e44ec33726988b64f95ea2f599.tar.gz
debian-1bfffe2e0adff6e44ec33726988b64f95ea2f599.tar.bz2
Squashed 'puppet/' changes from 8f7043a..59b7f11
59b7f11 Rollback sshd::print_motd 29e15a3 Set sshd::print_motd to yes 8a13cb5 Post-receive: git submodule sync d0d65d6 Ignore ssl, unignore modules 662bf5a Exclude also .git at provision_rsync_opts 745b98a Configure provision_rsync_opts at kvmxfile 1434057 Set default backupninja::keystore 36de179 Use scripts from /etc/puppet at kvmxfile provision_command fe2d343 Fixes provision_command at kvmxfile 0a45a48 Use puppet hostname at kvmxfile e3a3408 Updates kvmxfile 8648b94 Adds kvmxfile 07b03c2 Deploy: check for sudo config c6414a8 Removes examples 6507997 Cleanup manifests e867618 Fetch submodules using https ee8938e Use projects.list on mrconfig 9e67e02 Support for compiled config ceddd20 Cleanup TODO 6dad16a Adds modules folder 6f98b51 Updates hiera mount location 48f2491 Removes templates 319bdcb Cleanup modules folder 84516c6 Updates TODO a43c2f9 Updates README ca1735f Updates TODO a67e9d4 TODO: vagrant issues 2838e86 Updates TODO 9662168 Updates TODO afa676d Rename default box 58b18e5 Updates TODO 20858dc Updates TODO cd876e6 Default eyaml extension 3645ef8 Adds eyaml backend into hiera config 158f12a Adds hiera-eyaml into DEVELOP_DEPENDENCIES ec33fd1 Adds keys into .gitignore 490f2e2 Adds hiera-eyaml into DEPLOY_DEPENDENCIES 7d1fc96 Fix site_users inheritance 80088c7 Remove usb-utils from deployment dependencies 03764c2 Deploy: check for rsync 5eb3983 Updates git vhost 739c79f Test deployment without git reset c8a14ca Preload HSTS e096f08 Deploy: setup DEPLOY_DEPENDENCIES 0a4a8cc Config cleanup ace1840 Do not install storedconfigs dependencies on provision b83d85a Check for puppet.conf on provision 54c68a0 Default SSH config 56e4bea Updates TODO 51c1763 Comment wheezy dependencies specifics 3cc7d47 Removes key folder 41b8ef0 Fix deploy dependencies 64b8d70 Deploy dependencies, TODO update 6051509 Cleanup storedconfigs dependencies 1cf6e4b TODO ordering 9de3634 Updates TODO 2cf2a3b Drop pear 4048095 Get rid of storedconfigs 2eeb10b Updates TODO e678885 Fix manifest lookup on deployment 9078cac Updates Vagrantfile with new config folder 0cb845b Updates TODO b75d0f3 Rename 'hiera' to 'config' ae7cfbd Updates TODO 28e3e25 Cleanup unused, old and broken submodules deaf0de Updates TODO c33d108 Updates TODO 15abd2e Removes post-update hook 8a14f6d Deploy: dependency: augeas-tools c71aa65 Updates TODO 4c5f117 Development dependencies 73d6006 Deploy: dependencies in a single place 364912a Adds examples 85d41ce Hiera cleanup e4d5f1b Updates TODO 08bd8b7 Deploy fixes 15c0293 TODO cleanup 51b910e Updates TODO 4580c2e Updates TODO 69d46bf More TODO cleanup 0c91d41 More TODO cleanup cee91df More TODO cleanup 082c901 Updates TODO cleanup d088390 Updates TODO d721391 Updates TODO 6ec4ac1 Updates TODO ebfed6b About collected resources patch 3529cff Updates TODO 701ed3b Removes post-update hook 4a684e7 Updates TODO 4b85c5e Updates TODO b50dbb6 Removes icecast module 907ffde Deploy: support for default.pp dc8de77 Cleanup proxy template git-subtree-dir: puppet git-subtree-split: 59b7f114e4db75aa3d134b8d2d8a3a36271f37d7
Diffstat (limited to 'templates/etc/nginx/domain.erb')
-rw-r--r--templates/etc/nginx/domain.erb173
1 files changed, 0 insertions, 173 deletions
diff --git a/templates/etc/nginx/domain.erb b/templates/etc/nginx/domain.erb
deleted file mode 100644
index 8beff14..0000000
--- a/templates/etc/nginx/domain.erb
+++ /dev/null
@@ -1,173 +0,0 @@
-# <%= domain %> proxy config
-
-# Set the max size for file uploads
-client_max_body_size 100M;
-
-# SNI Configuration
-server {
- listen 443 default;
- server_name _;
- ssl on;
- ssl_certificate /etc/ssl/certs/blank.crt;
- ssl_certificate_key /etc/ssl/private/blank.pem;
- return 403;
-}
-
-server {
- # see config tips at
- # http://blog.taragana.com/index.php/archive/nginx-hacking-tips/
-
- # Don't log anything
- access_log /dev/null;
- error_log /dev/null;
-
- # simple reverse-proxy
- listen 80;
- server_name *.<%= domain %> <%= domain %>
-
- # enable HSTS header
- add_header Strict-Transport-Security "max-age=15768000; includeSubdomains";
-
- # https redirection by default
- rewrite ^(.*) https://$host$1 redirect;
-
- # rewrite rules for backups.<%= domain %>
- #if ($host ~* ^backups\.<%= domain %>$) {
- # rewrite ^(.*) https://$host$1 redirect;
- # break;
- #}
-
- # rewrite rules for admin.<%= domain %>
- #if ($host ~* ^admin\.<%= domain %>$) {
- # rewrite ^(.*) https://$host$1 redirect;
- # break;
- #}
-
- # rewrite rules for munin.<%= domain %>
- #if ($host ~* ^munin\.<%= domain %>$) {
- # rewrite ^(.*) https://$host$1 redirect;
- # break;
- #}
-
- # rewrite rules for trac.<%= domain %>
- #if ($host ~* ^trac\.<%= domain %>$) {
- # rewrite ^(.*) https://$host$1 redirect;
- # break;
- #}
-
- # rewrite rules for nagios.<%= domain %>
- #if ($host ~* ^nagios\.<%= domain %>$) {
- # rewrite ^(.*) https://$host$1 redirect;
- # break;
- #}
-
- # rewrite rules for htpasswd.<%= domain %>
- #if ($host ~* ^htpasswd\.<%= domain %>$) {
- # rewrite ^(.*) https://$host$1 redirect;
- # break;
- #}
-
- # rewrite rules for postfixadmin.<%= domain %>
- #if ($host ~* ^postfixadmin\.<%= domain %>$) {
- # rewrite ^(.*) https://$host$1 redirect;
- # break;
- #}
-
- # rewrite rules for mail.<%= domain %>
- #if ($host ~* ^mail\.<%= domain %>$) {
- # rewrite ^(.*) https://$host$1 redirect;
- # break;
- #}
-
- # rewrite rules for lists.<%= domain %>
- #if ($host ~* ^lists\.<%= domain %>$) {
- # rewrite ^(.*) https://$host$1 redirect;
- # break;
- #}
-
- # pass requests for dynamic content
- location / {
- proxy_set_header Host $http_host;
- proxy_pass http://weblocal:80;
- }
-
-}
-
-server {
- # https reverse proxy
- listen 443;
- server_name *.<%= domain %> <%= domain %>;
-
- # Don't log anything
- access_log /dev/null;
- error_log /dev/null;
-
- ssl on;
- ssl_certificate /etc/ssl/certs/cert.crt;
- ssl_certificate_key /etc/ssl/private/cert.pem;
-
- ssl_session_timeout 5m;
-
- ssl_protocols SSLv3 TLSv1;
- ssl_ciphers HIGH:MEDIUM:!aNULL:!SSLv2:!MD5:@STRENGTH;
- ssl_prefer_server_ciphers on;
- ssl_dhparam /etc/ssl/dhparams/dhparams_2048.pem;
-
- # Set the max size for file uploads
- client_max_body_size 100M;
-
- location / {
- # preserve http header and set forwarded proto
- proxy_set_header Host $http_host;
- proxy_set_header X-Forwarded-Proto https;
-
- proxy_read_timeout 120;
- proxy_connect_timeout 120;
-
- # rewrite rules for admin.<%= domain %>
- if ($host ~* ^admin\.<%= domain %>$) {
- proxy_pass http://admin:80;
- break;
- }
-
- # rewrite rules for munin.<%= domain %>
- if ($host ~* ^munin\.<%= domain %>$) {
- proxy_pass http://admin:80;
- break;
- }
-
- # rewrite rules for trac.<%= domain %>
- if ($host ~* ^trac\.<%= domain %>$) {
- proxy_pass http://admin:80;
- break;
- }
-
- # rewrite rules for nagios.<%= domain %>
- if ($host ~* ^nagios\.<%= domain %>$) {
- proxy_pass http://admin:80;
- break;
- }
-
- # rewrite rules for postfixadmin.<%= domain %>
- if ($host ~* ^postfixadmin\.<%= domain %>$) {
- proxy_pass http://mail:80;
- break;
- }
-
- # rewrite rules for mail.<%= domain %>
- if ($host ~* ^mail\.<%= domain %>$) {
- proxy_pass http://mail:80;
- break;
- }
-
- # rewrite rules for lists.<%= domain %>
- if ($host ~* ^lists\.<%= domain %>$) {
- proxy_pass http://mail:80;
- break;
- }
-
- # default proxy pass
- proxy_pass http://weblocal:80;
- }
-
-}