Corrections for HTTPS, SMTP settings added

This commit is contained in:
Marwolf
2018-08-04 11:30:26 -04:00
parent b1b71e56da
commit 352c546f2a
2 changed files with 7 additions and 34 deletions

View File

@@ -33,40 +33,6 @@ server {
rewrite ^ https://$host$request_uri? permanent;
}
####### Proxies #######
# Ghost proxy
location ~ {
proxy_set_header X-Forwarded-Host $host;
proxy_set_header X-Forwarded-Server $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_pass http://ghost:2368;
}
# Tomcat proxy
location ~ \.(do|jspa|obr|jsp|txt|zip) {
proxy_set_header X-Forwarded-Host $host;
proxy_set_header X-Forwarded-Server $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_pass http://tomcat:8080;
}
####### Protections and efficiencies #######
# Deny access to files beginning with .ht, such as .htaccess and .htpasswd
location ~ /\.ht {
deny all;
}
# Instructs visitor browser to cache files for 1 month
location ~* \.(jpg|jpeg|png|gif|ico|css|js)$ {
expires 1M;
}
# Deny access to version control system directories.
location ~ /\.git {
deny all;
internal;
}
# Certbot for HTTPS cert renewal
location ^~ /.well-known {
allow all;