12 files changed, 0 insertions, 167 deletions
diff --git a/template/nginx/2fa.conf.template b/template/nginx/2fa.conf.template
deleted file mode 100644
index aad66c1..0000000
--- a/template/nginx/2fa.conf.template
+++ /dev/null
@@ -1,19 +0,0 @@
-server {
-    listen 443 ssl http2;
-    listen [::]:443 ssl http2;
-    server_name 2fa.${CRUPEST_DOMAIN};
-    
-    location / {
-        include common/proxy-common;
-        proxy_pass http://2fauth:8000/;
-    }
-}
-
-server {
-    listen 80;
-    listen [::]:80;
-    server_name 2fa.${CRUPEST_DOMAIN};
-
-    include common/https-redirect;
-    include common/acme-challenge;
-}
diff --git a/template/nginx/code.conf.template b/template/nginx/code.conf.template
deleted file mode 100644
index a67500d..0000000
--- a/template/nginx/code.conf.template
+++ /dev/null
@@ -1,22 +0,0 @@
-server {
-    listen 443 ssl http2;
-    listen [::]:443 ssl http2;
-    server_name code.${CRUPEST_DOMAIN};
-    
-    location / {
-        include common/proxy-common;
-        proxy_pass http://debian-dev:8080/;
-    }
-
-    client_max_body_size 5G;
-}
-
-
-server {
-    listen 80;
-    listen [::]:80;
-    server_name code.${CRUPEST_DOMAIN};
-
-    include common/https-redirect;
-    include common/acme-challenge;
-}
diff --git a/template/nginx/common/acme-challenge b/template/nginx/common/acme-challenge
deleted file mode 100644
index 26054b8..0000000
--- a/template/nginx/common/acme-challenge
+++ /dev/null
@@ -1,3 +0,0 @@
-location /.well-known/acme-challenge {
-    root /srv/acme;
-}
diff --git a/template/nginx/common/https-redirect b/template/nginx/common/https-redirect
deleted file mode 100644
index 56d095d..0000000
--- a/template/nginx/common/https-redirect
+++ /dev/null
@@ -1,3 +0,0 @@
-location / {
-    return 301 https://$host$request_uri;
-}
diff --git a/template/nginx/common/proxy-common b/template/nginx/common/proxy-common
deleted file mode 100644
index 4193548..0000000
--- a/template/nginx/common/proxy-common
+++ /dev/null
@@ -1,7 +0,0 @@
-proxy_http_version 1.1;
-proxy_set_header Upgrade $http_upgrade;
-proxy_set_header Connection $connection_upgrade;
-proxy_set_header Host $host;
-proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-proxy_set_header X-Forwarded-Proto $scheme;
-proxy_set_header X-Real-IP $remote_addr;
diff --git a/template/nginx/forbid_unknown_domain.conf b/template/nginx/forbid_unknown_domain.conf
deleted file mode 100644
index ae96393..0000000
--- a/template/nginx/forbid_unknown_domain.conf
+++ /dev/null
@@ -1,8 +0,0 @@
-server {
-    listen 80 default_server;
-    listen [::]:80 default_server;
-    listen 443 ssl http2 default_server;
-    listen [::]:443 ssl http2 default_server;
-
-    return 444;
-}
diff --git a/template/nginx/git.conf.template b/template/nginx/git.conf.template
deleted file mode 100644
index ea2a627..0000000
--- a/template/nginx/git.conf.template
+++ /dev/null
@@ -1,22 +0,0 @@
-server {
-    listen 443 ssl http2;
-    listen [::]:443 ssl http2;
-    server_name git.${CRUPEST_DOMAIN};
-    
-    location / {
-        include common/proxy-common;
-        proxy_pass http://forgejo:3000/;
-    }
-
-    client_max_body_size 5G;
-}
-
-
-server {
-    listen 80;
-    listen [::]:80;
-    server_name git.${CRUPEST_DOMAIN};
-
-    include common/https-redirect;
-    include common/acme-challenge;
-}
diff --git a/template/nginx/mail.conf.template b/template/nginx/mail.conf.template
deleted file mode 100644
index ba2e44e..0000000
--- a/template/nginx/mail.conf.template
+++ /dev/null
@@ -1,27 +0,0 @@
-server {
-    listen 443 ssl http2;
-    listen [::]:443 ssl http2;
-    server_name mail.${CRUPEST_DOMAIN};
-    
-    location / {
-        include common/proxy-common;
-        proxy_pass http://roundcubemail:80/;
-    }
-
-    location /rspamd/ {
-        include common/proxy-common;
-        proxy_pass http://mailserver:11334/;
-    }
-
-    client_max_body_size 5G;
-}
-
-
-server {
-    listen 80;
-    listen [::]:80;
-    server_name mail.${CRUPEST_DOMAIN};
-
-    include common/https-redirect;
-    include common/acme-challenge;
-}
diff --git a/template/nginx/root.conf.template b/template/nginx/root.conf.template
deleted file mode 100644
index 3f20cf1..0000000
--- a/template/nginx/root.conf.template
+++ /dev/null
@@ -1,28 +0,0 @@
-server {
-    listen 443 ssl http2;
-    listen [::]:443 ssl http2;
-    server_name ${CRUPEST_DOMAIN};
-
-    location / {
-        root /srv/www;
-    }
-
-    location /_$CRUPEST_V2RAY_PATH {
-        if ($http_upgrade != "websocket") {
-            return 404;
-        }
-
-        proxy_redirect off;
-        include common/proxy-common;
-        proxy_pass http://v2ray:10000;
-    }
-}
-
-server {
-    listen 80;
-    listen [::]:80;
-    server_name ${CRUPEST_DOMAIN};
-
-    include common/https-redirect;
-    include common/acme-challenge;
-}
diff --git a/template/nginx/ssl.conf.template b/template/nginx/ssl.conf.template
deleted file mode 100644
index 54205f1..0000000
--- a/template/nginx/ssl.conf.template
+++ /dev/null
@@ -1,17 +0,0 @@
-# This file contains important security parameters. If you modify this file
-# manually, Certbot will be unable to automatically provide future security
-# updates. Instead, Certbot will print and log an error message with a path to
-# the up-to-date file that you will need to refer to when manually updating
-# this file. Contents are based on https://ssl-config.mozilla.org
-
-ssl_certificate /etc/letsencrypt/live/${CRUPEST_DOMAIN}/fullchain.pem;
-ssl_certificate_key /etc/letsencrypt/live/${CRUPEST_DOMAIN}/privkey.pem;
-
-ssl_session_cache shared:le_nginx_SSL:10m;
-ssl_session_timeout 1440m;
-ssl_session_tickets off;
-
-ssl_protocols TLSv1.2 TLSv1.3;
-ssl_prefer_server_ciphers off;
-
-ssl_ciphers "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384";
diff --git a/template/nginx/timeline.conf.template b/template/nginx/timeline.conf.template
deleted file mode 100644
index db908e8..0000000
--- a/template/nginx/timeline.conf.template
+++ /dev/null
@@ -1,7 +0,0 @@
-server {
-    listen 80;
-    listen [::]:80;
-    server_name timeline.${CRUPEST_DOMAIN};
-
-    include common/acme-challenge;
-}
diff --git a/template/nginx/websocket.conf b/template/nginx/websocket.conf
deleted file mode 100644
index 32af4c3..0000000
--- a/template/nginx/websocket.conf
+++ /dev/null
@@ -1,4 +0,0 @@
-map $http_upgrade $connection_upgrade {
-    default upgrade;
-    ''      close;
-}