%PDF- %PDF-
Direktori : /etc/nginx/sites-enabled/ |
Current File : //etc/nginx/sites-enabled/00_default |
# You may add here your # server { # ... # } # statements for each of your virtual hosts # server { ## listen for ipv4 # listen [::]:80 default; ## listen for ipv6 server_name vserver.varak.net mrazitko.varak.net; location / { root /var/www/; index index.html index.htm index.php; autoindex on; autoindex_exact_size off; } # location /music { # alias /www/music/; # autoindex on; # autoindex_exact_size off; # # } location /down { alias /data/down; gzip off; autoindex on; autoindex_exact_size off; # deny all; # allow 10.27.27.5; # allow 127.0.0.1; auth_basic "Downloads"; auth_basic_user_file /www/varak.net/catalog.varak.net/.passwd; } location /suave { alias /home/suave/www/; autoindex on; autoindex_exact_size off; } # location /munin { # alias /var/cache/munin/www/; # # } location ~ \.php$ { include fastcgi_params; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php; fastcgi_param SCRIPT_FILENAME /var/www/$fastcgi_script_name; } location ~ \.pl$ { # include fastcgi_params; # fastcgi_pass 127.0.0.1:8001; # fastcgi_index index.pl; # fastcgi_param SCRIPT_FILENAME /var/www/$fastcgi_script_name; proxy_pass http://127.0.0.1:8001; } location /cddb { proxy_redirect off; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; client_max_body_size 10m; client_body_buffer_size 128k; proxy_connect_timeout 90; proxy_send_timeout 90; proxy_read_timeout 90; proxy_pass http://127.0.0.1:8001; } # location /~cddb { # proxy_pass http://freedb.musicbrainz.org; # proxy_set_header Host "freedb.musicbrainz.org"; # gzip_proxied any; # } location /nginx_status { stub_status on; access_log off; allow 46.13.67.223; allow 212.47.28.58; allow 147.229.212.244; allow 127.0.0.1; allow all; } listen 443 ssl; # managed by Certbot ssl_certificate /etc/letsencrypt/live/vserver.varak.net/fullchain.pem; # managed by Certbot ssl_certificate_key /etc/letsencrypt/live/vserver.varak.net/privkey.pem; # managed by Certbot include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot } server { listen 10.27.27.5:443 ssl http2; server_name vserver.varak.net; include ssl_params; ssl_certificate /etc/letsencrypt/live/vserver.varak.net/fullchain.pem; # managed by Certbot ssl_certificate_key /etc/letsencrypt/live/vserver.varak.net/privkey.pem; # managed by Certbot location / { root /var/www/; index index.html index.htm index.php; autoindex on; autoindex_exact_size off; } # location /music { # alias /www/music/; # autoindex on; # autoindex_exact_size off; # # } location /down { alias /data/down/; gzip off; autoindex on; autoindex_exact_size off; auth_basic "Downloads"; auth_basic_user_file /www/varak.net/catalog.varak.net/.passwd; } location /suave { alias /home/suave/www/; autoindex on; autoindex_exact_size off; } # location /munin { # alias /var/cache/munin/www/; # # } location ~ \.php$ { include fastcgi_params; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php; fastcgi_param SCRIPT_FILENAME /var/www/$fastcgi_script_name; } location ~ \.pl$ { # include fastcgi_params; # fastcgi_pass 127.0.0.1:8001; # fastcgi_index index.pl; # fastcgi_param SCRIPT_FILENAME /var/www/$fastcgi_script_name; proxy_pass http://127.0.0.1:8001; } location /cddb { proxy_redirect off; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; client_max_body_size 10m; client_body_buffer_size 128k; proxy_connect_timeout 90; proxy_send_timeout 90; proxy_read_timeout 90; proxy_pass http://127.0.0.1:8001; } # location /~cddb { # proxy_pass http://freedb.musicbrainz.org; # proxy_set_header Host "freedb.musicbrainz.org"; # gzip_proxied any; # } location /nginx_status { stub_status on; access_log off; allow 46.13.67.223; allow 212.47.28.58; allow 147.229.212.244; allow 127.0.0.1; allow all; } } server { listen 10.27.27.5:80; listen 127.0.0.1; ## listen for ipv4 server_name auction.varak.net; # access_log /var/log/nginx/auction.varak.net.access.log gzip; location / { root /www/auction/; index index.html index.htm index.php; } location /static/ { root /www/auction/; add_header Cache-Control public; expires 24h; } location ~ \.php$ { include fastcgi_params; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php; fastcgi_param SCRIPT_FILENAME /www/auction/$fastcgi_script_name; } location /data/ { proxy_pass http://127.0.0.1:8071; gzip_proxied any; add_header Cache-Control public; expires 1h; } rewrite "^/([^/]+?)/item/([0-9]+)" "/index.php?action=item&realm=$1&item=$2"; rewrite "^/([^/]+?)/search/(.+)$" "/index.php?action=search&realm=$1&query=$2"; #error_page 404 /404.html; # redirect server error pages to the static page /50x.html # #error_page 500 502 503 504 /50x.html; #location = /50x.html { # root /var/www/nginx-default; #} # proxy the PHP scripts to Apache listening on 127.0.0.1:80 # #location ~ \.php$ { #proxy_pass http://127.0.0.1; #} # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000 # #location ~ \.php$ { #fastcgi_pass 127.0.0.1:9000; #fastcgi_index index.php; #fastcgi_param SCRIPT_FILENAME /scripts$fastcgi_script_name; #includefastcgi_params; #} # deny access to .htaccess files, if Apache's document root # concurs with nginx's one # #location ~ /\.ht { #deny all; #} } # another virtual host using mix of IP-, name-, and port-based configuration # #server { #listen 8000; #listen somename:8080; #server_name somename alias another.alias; #location / { #root html; #index index.html index.htm; #} #} # HTTPS server # #server { #listen 10.27.27.5:443 ssl http2; #server_name localhost; #ssl on; #ssl_certificate cert.pem; #ssl_certificate_key cert.key; #ssl_session_timeout 5m; #ssl_protocols TLSv1.2 TLSv1.1 TLSv1; #ssl_ciphers ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES128-SHA; #ssl_prefer_server_ciphers on; #location / { #root html; #index index.html index.htm; #} #} server { listen 10.27.27.5:80; listen 127.0.0.1; ## listen for ipv4 server_name drevarna.varak.net; location / { root /www/varak.net/drevarna.varak.net; index index.html index.htm index.php; autoindex on; autoindex_exact_size off; } location ~ \.php$ { include fastcgi_params; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php; fastcgi_param SCRIPT_FILENAME /www/varak.net/drevarna.varak.net$fastcgi_script_name; } } server { listen 10.27.27.5:443 ssl http2; server_name drevarna.varak.net; ssl_certificate /etc/letsencrypt/live/varak.net-0001/fullchain.pem; # managed by Certbot ssl_certificate_key /etc/letsencrypt/live/varak.net-0001/privkey.pem; # managed by Certbot ssl_session_timeout 5m; ssl_protocols TLSv1.2 TLSv1.1 TLSv1; ssl_ciphers ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES128-SHA; ssl_prefer_server_ciphers on; location / { root /www/varak.net/drevarna.varak.net; index index.html index.htm index.php; autoindex on; autoindex_exact_size off; } location ~ \.php$ { include fastcgi_params; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php; fastcgi_param SCRIPT_FILENAME /www/varak.net/drevarna.varak.net$fastcgi_script_name; } } #server { # listen 10.27.27.5:80; listen 127.0.0.1; ## listen for ipv4 # server_name img.varak.net; # # location / { # root /www/varak.net/img.varak.net; # index index.html index.htm index.php; # #autoindex off; # autoindex on; # autoindex_exact_size off; # } # location ~ \.php$ { # include fastcgi_params; # fastcgi_pass 127.0.0.1:9000; # fastcgi_index index.php; # fastcgi_param SCRIPT_FILENAME /www/varak.net/img.varak.net$fastcgi_script_name; # } #} server { listen 10.27.27.5:80; listen 127.0.0.1:80; server_name img.varak.net; rewrite ^/(.*) https://img.varak.net$request_uri permanent; } server { listen 10.27.27.5:443 ssl http2; server_name img.varak.net; ssl_certificate /etc/letsencrypt/live/varak.net-0001/fullchain.pem; # managed by Certbot ssl_certificate_key /etc/letsencrypt/live/varak.net-0001/privkey.pem; # managed by Certbot ssl_session_timeout 5m; ssl_protocols TLSv1.2 TLSv1.1 TLSv1; ssl_ciphers ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES128-SHA; ssl_prefer_server_ciphers on; location / { root /www/varak.net/img.varak.net; index index.html index.htm index.php; autoindex on; autoindex_exact_size off; } location ~ \.php$ { include fastcgi_params; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php; fastcgi_param SCRIPT_FILENAME /www/varak.net/img.varak.net$fastcgi_script_name; } } server { listen 10.27.27.5:80; server_name paste.varak.net; rewrite ^/(.*) https://paste.varak.net$request_uri permanent; } server { listen 10.27.27.5:443 ssl http2; server_name paste.varak.net; include ssl_params; ssl_certificate /etc/letsencrypt/live/varak.net-0001/fullchain.pem; # managed by Certbot ssl_certificate_key /etc/letsencrypt/live/varak.net-0001/privkey.pem; # managed by Certbot root /www/varak.net/paste.varak.net; index index.html index.htm index.php; autoindex on; autoindex_exact_size off; # deny [2a01:4f8:121:116d::2]; # location / { # if (!-e $request_filename) { # rewrite ^/(.*)\.html$ /?page=$1 break; # } # rewrite "^/([[:alnum:]]{8})/*$" /?page=paste&id=$1 break; # rewrite ^/([^-]*)/([^-]*)/$ /?page=$1&act=$2 break; # } # location /search { # rewrite ^/search/([^-]*)$ /?page=last-pastes&searchPaste=$1 break; # } location / { # Redirect Trailing Slashes... # if (!-d $request_filename) { # rewrite ^/(.+)/$ /$1 permanent; # } # Handle Front Controller... # if (!-e $request_filename) { # rewrite ^/(.*)$ /index.php?/$1 last; # break; # } } location ~ \.php$ { include fastcgi_params; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php; fastcgi_param SCRIPT_FILENAME /www/varak.net/paste.varak.net$fastcgi_script_name; } } server { listen 10.27.27.5:80; listen 127.0.0.1; ## listen for ipv4 server_name suave.varak.net; location / { root /www/varak.net/suave.varak.net; index index.html index.htm index.php; autoindex on; autoindex_exact_size off; } location ~ \.php$ { include fastcgi_params; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php; fastcgi_param SCRIPT_FILENAME /www/varak.net/suave.varak.net$fastcgi_script_name; } } server { listen 10.27.27.5:443 ssl http2; server_name suave.varak.net; include ssl_params; ssl_certificate /etc/letsencrypt/live/varak.net-0001/fullchain.pem; # managed by Certbot ssl_certificate_key /etc/letsencrypt/live/varak.net-0001/privkey.pem; # managed by Certbot location / { root /www/varak.net/suave.varak.net; index index.html index.htm index.php; autoindex on; autoindex_exact_size off; } location ~ \.php$ { include fastcgi_params; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php; fastcgi_param SCRIPT_FILENAME /www/varak.net/suave.varak.net$fastcgi_script_name; } } server { listen 10.27.27.5:80; listen 127.0.0.1; ## listen for ipv4 server_name suave_skola.varak.net; location / { root /www/varak.net/suave_skola.varak.net; index index.html index.htm index.php; autoindex on; autoindex_exact_size off; } location ~ \.php$ { include fastcgi_params; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php; fastcgi_param SCRIPT_FILENAME /www/varak.net/suave_skola.varak.net$fastcgi_script_name; } } server { listen 10.27.27.5:443 ssl http2; server_name suave_skola.varak.net; include ssl_params; ssl_certificate /home/waritko/cert/varak_net.pem; ssl_certificate_key /home/waritko/cert/varak_net.key; location / { root /www/varak.net/suave_skola.varak.net; index index.html index.htm index.php; autoindex on; autoindex_exact_size off; } location ~ \.php$ { include fastcgi_params; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php; fastcgi_param SCRIPT_FILENAME /www/varak.net/suave_skola.varak.net$fastcgi_script_name; } } server { listen 10.27.27.5:80; listen 127.0.0.1; ## listen for ipv4 server_name wow2.varak.net; location / { root /www/varak.net/wow2.varak.net; index index.html index.htm index.php; autoindex on; autoindex_exact_size off; } location ~ \.php$ { include fastcgi_params; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php; fastcgi_param SCRIPT_FILENAME /www/varak.net/wow2.varak.net$fastcgi_script_name; } } server { listen 10.27.27.5:443 ssl http2; server_name wow2.varak.net; include ssl_params; ssl_certificate /etc/letsencrypt/live/varak.net-0001/fullchain.pem; # managed by Certbot ssl_certificate_key /etc/letsencrypt/live/varak.net-0001/privkey.pem; # managed by Certbot location / { root /www/varak.net/wow2.varak.net; index index.html index.htm index.php; autoindex on; autoindex_exact_size off; } location ~ \.php$ { include fastcgi_params; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php; fastcgi_param SCRIPT_FILENAME /www/varak.net/wow2.varak.net$fastcgi_script_name; } } server { listen 10.27.27.5:80; listen 127.0.0.1; ## listen for ipv4 server_name wowinst.varak.net; location / { root /www/varak.net/wowinst.varak.net; index index.html index.htm index.php; autoindex on; autoindex_exact_size off; } location ~ \.php$ { include fastcgi_params; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php; fastcgi_param SCRIPT_FILENAME /www/varak.net/wowinst.varak.net$fastcgi_script_name; } } server { listen 10.27.27.5:443 ssl http2; server_name wowinst.varak.net; include ssl_params; ssl_certificate /etc/letsencrypt/live/varak.net-0001/fullchain.pem; # managed by Certbot ssl_certificate_key /etc/letsencrypt/live/varak.net-0001/privkey.pem; # managed by Certbot location / { root /www/varak.net/wowinst.varak.net; index index.html index.htm index.php; autoindex on; autoindex_exact_size off; } location ~ \.php$ { include fastcgi_params; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php; fastcgi_param SCRIPT_FILENAME /www/varak.net/wowinst.varak.net$fastcgi_script_name; } } server { listen 10.27.27.5:80; listen 127.0.0.1; ## listen for ipv4 server_name www.varak.net; location / { root /www/varak.net/www.varak.net; index index.html index.htm index.php; autoindex on; autoindex_exact_size off; } location ~ \.php$ { include fastcgi_params; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php; fastcgi_param SCRIPT_FILENAME /www/varak.net/www.varak.net$fastcgi_script_name; } } server { listen 10.27.27.5:443 ssl http2; server_name www.varak.net; include ssl_params; ssl_certificate /etc/letsencrypt/live/varak.net-0001/fullchain.pem; # managed by Certbot ssl_certificate_key /etc/letsencrypt/live/varak.net-0001/privkey.pem; # managed by Certbot location / { root /www/varak.net/www.varak.net; index index.html index.htm index.php; autoindex on; autoindex_exact_size off; } location ~ \.php$ { include fastcgi_params; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php; fastcgi_param SCRIPT_FILENAME /www/varak.net/www.varak.net$fastcgi_script_name; } } server { if ($host = mrazitko.varak.net) { return 301 https://$host$request_uri; } # managed by Certbot if ($host = vserver.varak.net) { return 301 https://$host$request_uri; } # managed by Certbot listen 10.27.27.5:80; listen 127.0.0.1; server_name vserver.varak.net mrazitko.varak.net; return 404; # managed by Certbot }