Matrix-Mirrors/matrix.grapheneos.org
1
0
Fork 0
mirror of https://github.com/GrapheneOS/matrix.grapheneos.org.git synced 2024-10-01 04:45:34 -04:00
Code Issues Packages Projects Releases Wiki Activity

switch to certbot webroot plugin

Browse Source
This commit is contained in:
Daniel Micay 2022-02-19 08:17:14 -05:00
parent 5571abff90
commit 218927ac6e
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
nginx/nginx.conf
View File

@ -109,6 +109,10 @@ http {
return 301 https://grapheneos.org/articles/grapheneos-servers#matrix.grapheneos.org; return 301 https://grapheneos.org/articles/grapheneos-servers#matrix.grapheneos.org;
} }
location ^~ /.well-known/acme-challenge/ {
root /srv/certbot;
}
location ~ ^(?:/_matrix|/_synapse/client) { location ~ ^(?:/_matrix|/_synapse/client) {
# remove security headers that are statically set to the strictest possible values below # remove security headers that are statically set to the strictest possible values below
proxy_hide_header Referrer-Policy; proxy_hide_header Referrer-Policy;
@ -150,6 +154,10 @@ http {
add_header X-Frame-Options "SAMEORIGIN" always; add_header X-Frame-Options "SAMEORIGIN" always;
add_header X-Robots-Tag "none"; add_header X-Robots-Tag "none";
location ^~ /.well-known/acme-challenge/ {
root /srv/certbot;
}
location ~ '\.(?:css|html|ico|js|json|map|svg|txt|wasm|xml)$' { location ~ '\.(?:css|html|ico|js|json|map|svg|txt|wasm|xml)$' {
gzip_static on; gzip_static on;
brotli_static on; brotli_static on;