| 123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899 |
- # Upstream sites for proxy-ing
- upstream craft {
- server 138.68.233.29:8080;
- }
- upstream freehand {
- server 138.68.233.29:8082;
- }
-
- ### FREEHAND ###
- server {
- listen 80;
- listen [::]:80;
-
- server_name freehand.com www.freehand.com;
-
- return 301 https://$host$request_uri;
- }
- ### SSL Stuff
- server {
- listen 443 ssl http2;
- listen [::]:443 ssl http2;
-
- server_name freehand.com www.freehand.com;
-
- include snippets/letsencrypt-freehand.conf;
- include snippets/ssl-params-freehand.conf;
-
- root /var/www/html;
- index index.html index.htm index.php index.nginx-debian.html;
-
- location / {
- #blocks blank user_agents
- if ($http_user_agent = "") { return 301 $scheme://www.google.com/; }
-
- proxy_set_header Host $host;
- proxy_set_header X-Forwarded-Host $host;
- proxy_set_header X-Forwarded-Server $host;
- proxy_set_header X-Forwarded-Proto $scheme;
- proxy_set_header X-Real-IP $remote_addr;
- proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
- proxy_set_header Accept-Encoding "";
- proxy_set_header Proxy "";
-
- proxy_pass_request_headers on;
- proxy_pass http://freehand;
- proxy_redirect off;
-
- proxy_connect_timeout 300;
- proxy_send_timeout 300;
- proxy_read_timeout 300;
- }
-
- location ~/\.ht {
- deny all;
- }
- }
-
- ### CRAFT IN AMERICA ###
- ### Redirect regular traffic to SSL
- server {
- listen 80;
- listen [::]:80;
-
- server_name craftinamerica.org www.craftinamerica.org;
-
- return 301 https://$host$request_uri;
- }
- ### SSL Stuff
- server {
- listen 443 ssl http2;
- listen [::]:443 ssl http2;
-
- server_name craftinamerica.org www.craftinamerica.org;
-
- include snippets/letsencrypt.conf;
- include snippets/ssl-params.conf;
-
- root /var/www/html;
- index index.html index.htm index.php index.nginx-debian.html;
-
- location / {
- #blocks blank user_agents
- if ($http_user_agent = "") { return 301 $scheme://www.google.com/; }
-
- proxy_set_header Host $host;
- proxy_set_header X-Real-IP $remote_addr;
- proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
- proxy_set_header X-Forwarded-Proto $scheme;
- proxy_set_header Accept-Encoding "";
- proxy_set_header Proxy "";
-
- proxy_pass http://craft;
- proxy_redirect off;
- }
-
- location ~/\.ht {
- deny all;
- }
- }
|