| @@ -0,0 +1,35 @@ | |||
| 1 | + | # /etc/nginx/sites-enabled/air.meson.in | |
| 2 | + | # | |
| 3 | + | # Nextcloud vhost — air.meson.in | |
| 4 | + | # Requires: /etc/nginx/conf.d/log-maps.conf | |
| 5 | + | # /etc/nginx/conf.d/php-upstream.conf | |
| 6 | + | # /etc/nginx/nextcloud-common.conf | |
| 7 | + | server { | |
| 8 | + | listen 80; | |
| 9 | + | listen [::]:80; | |
| 10 | + | server_name air.meson.in; | |
| 11 | + | server_tokens off; | |
| 12 | + | access_log off; | |
| 13 | + | return 301 https://$server_name$request_uri; | |
| 14 | + | } | |
| 15 | + | server { | |
| 16 | + | # HTTP/2 over TCP | |
| 17 | + | listen 443 ssl; | |
| 18 | + | listen [::]:443 ssl; | |
| 19 | + | # HTTP/3 over QUIC/UDP | |
| 20 | + | listen 443 quic reuseport; | |
| 21 | + | listen [::]:443 quic reuseport; | |
| 22 | + | http2 on; | |
| 23 | + | http3 on; | |
| 24 | + | add_header Alt-Svc 'h3=":443"; ma=86400' always; | |
| 25 | + | server_name air.meson.in; | |
| 26 | + | root /var/www/air.meson.in; | |
| 27 | + | access_log /var/log/nginx/air.meson.in.log nextcloud if=$loggable; | |
| 28 | + | error_log /var/log/nginx/_error_air.meson.in.log warn; | |
| 29 | + | include /etc/letsencrypt/options-ssl-nginx.conf; | |
| 30 | + | ssl_certificate /etc/letsencrypt/live/air.meson.in/fullchain.pem; | |
| 31 | + | ssl_certificate_key /etc/letsencrypt/live/air.meson.in/privkey.pem; | |
| 32 | + | ssl_dhparam /etc/letsencrypt/dh/chi.pem; | |
| 33 | + | set $fpm_upstream "php-fpm-air"; | |
| 34 | + | include /etc/nginx/_nextcloud.conf; | |
| 35 | + | } | |
meson / [CiCADA] air.meson.in
Last active 2 weeks ago
meson revised this gist 2 weeks ago · d177c80
1 file changed, 35 insertions