switch to certbot webroot plugin

This commit is contained in:
Daniel Micay 2022-02-19 08:17:14 -05:00
parent 5571abff90
commit 218927ac6e

View File

@ -109,6 +109,10 @@ http {
return 301 https://grapheneos.org/articles/grapheneos-servers#matrix.grapheneos.org;
}
location ^~ /.well-known/acme-challenge/ {
root /srv/certbot;
}
location ~ ^(?:/_matrix|/_synapse/client) {
# remove security headers that are statically set to the strictest possible values below
proxy_hide_header Referrer-Policy;
@ -150,6 +154,10 @@ http {
add_header X-Frame-Options "SAMEORIGIN" always;
add_header X-Robots-Tag "none";
location ^~ /.well-known/acme-challenge/ {
root /srv/certbot;
}
location ~ '\.(?:css|html|ico|js|json|map|svg|txt|wasm|xml)$' {
gzip_static on;
brotli_static on;