aboutsummaryrefslogtreecommitdiff
path: root/templates/nginx
diff options
context:
space:
mode:
authorYuqian Yang <crupest@crupest.life>2025-02-22 18:11:35 +0800
committerYuqian Yang <crupest@crupest.life>2025-02-23 01:36:11 +0800
commit1e9b2436eaffa4130f6a69c3a108f6feb9dd4ac8 (patch)
tree585b6124b0100371b4bd8a291c4a59fbb5fbf1fe /templates/nginx
parenta931457d61b053682d5e89a0cfb411e43e5e21c7 (diff)
downloadcrupest-1e9b2436eaffa4130f6a69c3a108f6feb9dd4ac8.tar.gz
crupest-1e9b2436eaffa4130f6a69c3a108f6feb9dd4ac8.tar.bz2
crupest-1e9b2436eaffa4130f6a69c3a108f6feb9dd4ac8.zip
feat(services): refactor structure.
Diffstat (limited to 'templates/nginx')
-rw-r--r--templates/nginx/common/acme-challenge3
-rw-r--r--templates/nginx/common/http-listen2
-rw-r--r--templates/nginx/common/https-listen3
-rw-r--r--templates/nginx/common/https-redirect3
-rw-r--r--templates/nginx/common/proxy-common7
-rw-r--r--templates/nginx/conf.d/code.conf.template6
-rw-r--r--templates/nginx/conf.d/forbid_unknown_domain.conf9
-rw-r--r--templates/nginx/conf.d/mail.conf.template25
-rw-r--r--templates/nginx/conf.d/root.conf.template36
-rw-r--r--templates/nginx/conf.d/ssl.conf.template17
-rw-r--r--templates/nginx/conf.d/timeline.conf.template6
-rw-r--r--templates/nginx/conf.d/websocket.conf4
12 files changed, 0 insertions, 121 deletions
diff --git a/templates/nginx/common/acme-challenge b/templates/nginx/common/acme-challenge
deleted file mode 100644
index 26054b8..0000000
--- a/templates/nginx/common/acme-challenge
+++ /dev/null
@@ -1,3 +0,0 @@
-location /.well-known/acme-challenge {
- root /srv/acme;
-}
diff --git a/templates/nginx/common/http-listen b/templates/nginx/common/http-listen
deleted file mode 100644
index 76cb18d..0000000
--- a/templates/nginx/common/http-listen
+++ /dev/null
@@ -1,2 +0,0 @@
-listen 80;
-listen [::]:80;
diff --git a/templates/nginx/common/https-listen b/templates/nginx/common/https-listen
deleted file mode 100644
index db2f68e..0000000
--- a/templates/nginx/common/https-listen
+++ /dev/null
@@ -1,3 +0,0 @@
-listen 443 ssl;
-listen [::]:443 ssl;
-http2 on;
diff --git a/templates/nginx/common/https-redirect b/templates/nginx/common/https-redirect
deleted file mode 100644
index 56d095d..0000000
--- a/templates/nginx/common/https-redirect
+++ /dev/null
@@ -1,3 +0,0 @@
-location / {
- return 301 https://$host$request_uri;
-}
diff --git a/templates/nginx/common/proxy-common b/templates/nginx/common/proxy-common
deleted file mode 100644
index 4193548..0000000
--- a/templates/nginx/common/proxy-common
+++ /dev/null
@@ -1,7 +0,0 @@
-proxy_http_version 1.1;
-proxy_set_header Upgrade $http_upgrade;
-proxy_set_header Connection $connection_upgrade;
-proxy_set_header Host $host;
-proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-proxy_set_header X-Forwarded-Proto $scheme;
-proxy_set_header X-Real-IP $remote_addr;
diff --git a/templates/nginx/conf.d/code.conf.template b/templates/nginx/conf.d/code.conf.template
deleted file mode 100644
index 35f74d8..0000000
--- a/templates/nginx/conf.d/code.conf.template
+++ /dev/null
@@ -1,6 +0,0 @@
-server {
- server_name code.@@CRUPEST_DOMAIN@@;
- include common/http-listen;
-
- include common/acme-challenge;
-}
diff --git a/templates/nginx/conf.d/forbid_unknown_domain.conf b/templates/nginx/conf.d/forbid_unknown_domain.conf
deleted file mode 100644
index 515942b..0000000
--- a/templates/nginx/conf.d/forbid_unknown_domain.conf
+++ /dev/null
@@ -1,9 +0,0 @@
-server {
- listen 80 default_server;
- listen [::]:80 default_server;
- listen 443 ssl default_server;
- listen [::]:443 ssl default_server;
- http2 on;
-
- return 444;
-}
diff --git a/templates/nginx/conf.d/mail.conf.template b/templates/nginx/conf.d/mail.conf.template
deleted file mode 100644
index 2eb53d7..0000000
--- a/templates/nginx/conf.d/mail.conf.template
+++ /dev/null
@@ -1,25 +0,0 @@
-server {
- server_name mail.@@CRUPEST_DOMAIN@@;
- include common/https-listen;
-
- location / {
- include common/proxy-common;
- proxy_pass http://roundcubemail:80/;
- }
-
- location /rspamd/ {
- include common/proxy-common;
- proxy_pass http://mailserver:11334/;
- }
-
- client_max_body_size 5G;
-}
-
-
-server {
- server_name mail.@@CRUPEST_DOMAIN@@;
- include common/http-listen;
-
- include common/https-redirect;
- include common/acme-challenge;
-}
diff --git a/templates/nginx/conf.d/root.conf.template b/templates/nginx/conf.d/root.conf.template
deleted file mode 100644
index 8cd9174..0000000
--- a/templates/nginx/conf.d/root.conf.template
+++ /dev/null
@@ -1,36 +0,0 @@
-server {
- server_name @@CRUPEST_DOMAIN@@;
- include common/https-listen;
-
- location / {
- root /srv/www;
- }
-
- location /2fa/ {
- include common/proxy-common;
- proxy_pass http://2fauth:8000/;
- }
-
- location /git/ {
- include common/proxy-common;
- proxy_pass http://git-server:80;
- }
-
- location /_@@CRUPEST_V2RAY_PATH@@ {
- if ($http_upgrade != "websocket") {
- return 404;
- }
-
- proxy_redirect off;
- include common/proxy-common;
- proxy_pass http://v2ray:10000;
- }
-}
-
-server {
- server_name @@CRUPEST_DOMAIN@@;
- include common/http-listen;
-
- include common/https-redirect;
- include common/acme-challenge;
-}
diff --git a/templates/nginx/conf.d/ssl.conf.template b/templates/nginx/conf.d/ssl.conf.template
deleted file mode 100644
index 181a1af..0000000
--- a/templates/nginx/conf.d/ssl.conf.template
+++ /dev/null
@@ -1,17 +0,0 @@
-# This file contains important security parameters. If you modify this file
-# manually, Certbot will be unable to automatically provide future security
-# updates. Instead, Certbot will print and log an error message with a path to
-# the up-to-date file that you will need to refer to when manually updating
-# this file. Contents are based on https://ssl-config.mozilla.org
-
-ssl_certificate /etc/letsencrypt/live/@@CRUPEST_DOMAIN@@/fullchain.pem;
-ssl_certificate_key /etc/letsencrypt/live/@@CRUPEST_DOMAIN@@/privkey.pem;
-
-ssl_session_cache shared:le_nginx_SSL:10m;
-ssl_session_timeout 1440m;
-ssl_session_tickets off;
-
-ssl_protocols TLSv1.2 TLSv1.3;
-ssl_prefer_server_ciphers off;
-
-ssl_ciphers "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384";
diff --git a/templates/nginx/conf.d/timeline.conf.template b/templates/nginx/conf.d/timeline.conf.template
deleted file mode 100644
index df4edf8..0000000
--- a/templates/nginx/conf.d/timeline.conf.template
+++ /dev/null
@@ -1,6 +0,0 @@
-server {
- server_name timeline.@@CRUPEST_DOMAIN@@;
- include common/http-listen;
-
- include common/acme-challenge;
-}
diff --git a/templates/nginx/conf.d/websocket.conf b/templates/nginx/conf.d/websocket.conf
deleted file mode 100644
index 32af4c3..0000000
--- a/templates/nginx/conf.d/websocket.conf
+++ /dev/null
@@ -1,4 +0,0 @@
-map $http_upgrade $connection_upgrade {
- default upgrade;
- '' close;
-}