Corrections for HTTPS, SMTP settings added
This commit is contained in:
@@ -106,6 +106,13 @@ services:
|
|||||||
NODE_ENV: production
|
NODE_ENV: production
|
||||||
privacy__useUpdateCheck: 0
|
privacy__useUpdateCheck: 0
|
||||||
url: 'http://localhost' #change this!
|
url: 'http://localhost' #change this!
|
||||||
|
#mail__from: OpenRSC Emailer <openrsc.emailer@gmail.com>
|
||||||
|
#mail__transport: SMTP
|
||||||
|
#mail__transport__options__host: smtp.gmail.com
|
||||||
|
#mail__transport__options__secureConnection: 1
|
||||||
|
#mail__transport__options__port: 465
|
||||||
|
#mail__transport__options__auth_user: openrsc.emailer@gmail.com
|
||||||
|
#mail__transport__options__auth_pass: OFF
|
||||||
# logging:
|
# logging:
|
||||||
# driver: splunk
|
# driver: splunk
|
||||||
# options:
|
# options:
|
||||||
|
|||||||
@@ -33,40 +33,6 @@ server {
|
|||||||
rewrite ^ https://$host$request_uri? permanent;
|
rewrite ^ https://$host$request_uri? permanent;
|
||||||
}
|
}
|
||||||
|
|
||||||
####### Proxies #######
|
|
||||||
# Ghost proxy
|
|
||||||
location ~ {
|
|
||||||
proxy_set_header X-Forwarded-Host $host;
|
|
||||||
proxy_set_header X-Forwarded-Server $host;
|
|
||||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
||||||
proxy_pass http://ghost:2368;
|
|
||||||
}
|
|
||||||
|
|
||||||
# Tomcat proxy
|
|
||||||
location ~ \.(do|jspa|obr|jsp|txt|zip) {
|
|
||||||
proxy_set_header X-Forwarded-Host $host;
|
|
||||||
proxy_set_header X-Forwarded-Server $host;
|
|
||||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
||||||
proxy_pass http://tomcat:8080;
|
|
||||||
}
|
|
||||||
|
|
||||||
####### Protections and efficiencies #######
|
|
||||||
# Deny access to files beginning with .ht, such as .htaccess and .htpasswd
|
|
||||||
location ~ /\.ht {
|
|
||||||
deny all;
|
|
||||||
}
|
|
||||||
|
|
||||||
# Instructs visitor browser to cache files for 1 month
|
|
||||||
location ~* \.(jpg|jpeg|png|gif|ico|css|js)$ {
|
|
||||||
expires 1M;
|
|
||||||
}
|
|
||||||
|
|
||||||
# Deny access to version control system directories.
|
|
||||||
location ~ /\.git {
|
|
||||||
deny all;
|
|
||||||
internal;
|
|
||||||
}
|
|
||||||
|
|
||||||
# Certbot for HTTPS cert renewal
|
# Certbot for HTTPS cert renewal
|
||||||
location ^~ /.well-known {
|
location ^~ /.well-known {
|
||||||
allow all;
|
allow all;
|
||||||
|
|||||||
Reference in New Issue
Block a user