Nginx

From Kicksecure
Revision as of 15:49, 21 January 2022 by Patrick (talk | contribs) (Created page with "== /etc/nginx/sites-available/00100.conf == <pre> ## default_server, apex domain (non-subdomain) or invalid subdomain catch-all ## redirect plaintext clearnet non-subdomain...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigation Jump to search

/etc/nginx/sites-available/00100.conf

## default_server, apex domain (non-subdomain) or invalid subdomain catch-all

## redirect plaintext clearnet non-subdomain to TLS non-subdomain
server {
   listen 80 default_server;
   listen [::]:80 default_server;
   return 301 https://whonix.org$request_uri;
}

## redirect TLS clearnet non-subdomain to TLS www subdomain
server {
   listen 443 ssl http2 default_server;
   listen [::]:443 ssl http2 default_server;

   ssl_certificate /etc/letsencrypt/live/whonix.org/fullchain.pem;
   ssl_certificate_key /etc/letsencrypt/live/whonix.org/privkey.pem;
   ssl_trusted_certificate /etc/letsencrypt/live/whonix.org/fullchain.pem;
   include /etc/nginx/conf.d/hsts;

   return 301 https://www.whonix.org$request_uri;
}

## redirect onion non-subdomain to www subdomain
server {
   listen 127.0.0.1:70;
   server_name dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion;

   return 301 http://www.dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion$request_uri;
}

/etc/nginx/sites-available/www.conf

## http clearnet port 80 unencrypted listener
server {
   listen 80;
   listen [::]:80;
   server_name www.whonix.org;
   return 301 https://www.whonix.org$request_uri;
}

## clearnet www
server {
   listen 443 ssl http2;
   listen [::]:443 ssl http2;
   server_name www.whonix.org;

   ssl_certificate /etc/letsencrypt/live/whonix.org/fullchain.pem;
   ssl_certificate_key /etc/letsencrypt/live/whonix.org/privkey.pem;
   ssl_trusted_certificate /etc/letsencrypt/live/whonix.org/fullchain.pem;
   include /etc/nginx/conf.d/hsts;

   more_set_headers "Onion-Location: http://www.dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion$request_uri";

   include /etc/nginx/conf.d/www;
}

## onion www
server {
   listen 127.0.0.1:70;
   server_name www.dds6qkxpwdeubwucdiaord2xgbbeyds25rbsgr73tbfpqpt4a6vjwsyd.onion;

   more_set_headers "X-Robots-Tag: noindex, nofollow";

   include /etc/nginx/conf.d/www;
}
Retrieved from "https://www.kicksecure.com/w/index.php?title=Nginx&oldid=54186"