aboutsummaryrefslogtreecommitdiff
path: root/template2
diff options
context:
space:
mode:
Diffstat (limited to 'template2')
-rw-r--r--template2/nginx/domain.conf.template19
-rw-r--r--template2/nginx/global/client-max-body-size.conf1
-rw-r--r--template2/nginx/global/forbid-unknown-domain.conf8
-rw-r--r--template2/nginx/global/ssl.conf.template17
-rw-r--r--template2/nginx/global/websocket.conf4
-rw-r--r--template2/nginx/http/444.segment3
-rw-r--r--template2/nginx/http/redirect-to-https.segment3
-rw-r--r--template2/nginx/https/redirect.segment.template7
-rw-r--r--template2/nginx/https/reverse-proxy.segment.template10
-rw-r--r--template2/nginx/https/static-file.no-strip-prefix.segment.template3
-rw-r--r--template2/nginx/https/static-file.segment.template3
-rw-r--r--template2/nginx/server.schema.json96
-rw-r--r--template2/nginx/server.ts66
-rw-r--r--template2/server.json.template58
14 files changed, 0 insertions, 298 deletions
diff --git a/template2/nginx/domain.conf.template b/template2/nginx/domain.conf.template
deleted file mode 100644
index 7fa2d7a..0000000
--- a/template2/nginx/domain.conf.template
+++ /dev/null
@@ -1,19 +0,0 @@
-server {
- listen 443 ssl http2;
- listen [::]:443 ssl http2;
- server_name ${DOMAIN};
-
-${HTTPS_SEGMENT}
-}
-
-server {
- listen 80;
- listen [::]:80;
- server_name ${DOMAIN};
-
-${HTTP_SEGMENT}
-
- location /.well-known/acme-challenge {
- root /srv/acme;
- }
-}
diff --git a/template2/nginx/global/client-max-body-size.conf b/template2/nginx/global/client-max-body-size.conf
deleted file mode 100644
index a2b1c00..0000000
--- a/template2/nginx/global/client-max-body-size.conf
+++ /dev/null
@@ -1 +0,0 @@
-client_max_body_size 5G;
diff --git a/template2/nginx/global/forbid-unknown-domain.conf b/template2/nginx/global/forbid-unknown-domain.conf
deleted file mode 100644
index ae96393..0000000
--- a/template2/nginx/global/forbid-unknown-domain.conf
+++ /dev/null
@@ -1,8 +0,0 @@
-server {
- listen 80 default_server;
- listen [::]:80 default_server;
- listen 443 ssl http2 default_server;
- listen [::]:443 ssl http2 default_server;
-
- return 444;
-}
diff --git a/template2/nginx/global/ssl.conf.template b/template2/nginx/global/ssl.conf.template
deleted file mode 100644
index ff70f5a..0000000
--- a/template2/nginx/global/ssl.conf.template
+++ /dev/null
@@ -1,17 +0,0 @@
-# This file contains important security parameters. If you modify this file
-# manually, Certbot will be unable to automatically provide future security
-# updates. Instead, Certbot will print and log an error message with a path to
-# the up-to-date file that you will need to refer to when manually updating
-# this file. Contents are based on https://ssl-config.mozilla.org
-
-ssl_certificate /etc/letsencrypt/live/${ROOT_DOMAIN}/fullchain.pem;
-ssl_certificate_key /etc/letsencrypt/live/${ROOT_DOMAIN}/privkey.pem;
-
-ssl_session_cache shared:le_nginx_SSL:10m;
-ssl_session_timeout 1440m;
-ssl_session_tickets off;
-
-ssl_protocols TLSv1.2 TLSv1.3;
-ssl_prefer_server_ciphers off;
-
-ssl_ciphers "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384";
diff --git a/template2/nginx/global/websocket.conf b/template2/nginx/global/websocket.conf
deleted file mode 100644
index 32af4c3..0000000
--- a/template2/nginx/global/websocket.conf
+++ /dev/null
@@ -1,4 +0,0 @@
-map $http_upgrade $connection_upgrade {
- default upgrade;
- '' close;
-}
diff --git a/template2/nginx/http/444.segment b/template2/nginx/http/444.segment
deleted file mode 100644
index fe490d4..0000000
--- a/template2/nginx/http/444.segment
+++ /dev/null
@@ -1,3 +0,0 @@
-location / {
- return 444;
-}
diff --git a/template2/nginx/http/redirect-to-https.segment b/template2/nginx/http/redirect-to-https.segment
deleted file mode 100644
index 56d095d..0000000
--- a/template2/nginx/http/redirect-to-https.segment
+++ /dev/null
@@ -1,3 +0,0 @@
-location / {
- return 301 https://$host$request_uri;
-}
diff --git a/template2/nginx/https/redirect.segment.template b/template2/nginx/https/redirect.segment.template
deleted file mode 100644
index 028f617..0000000
--- a/template2/nginx/https/redirect.segment.template
+++ /dev/null
@@ -1,7 +0,0 @@
-location = ${PATH} {
- return ${REDIRECT_CODE} ${REDIRECT_URL};
-}
-
-location ^${PATH}/(?<redirect_path>.*)$ {
- return ${REDIRECT_CODE} ${REDIRECT_URL}/$redirect_path;
-}
diff --git a/template2/nginx/https/reverse-proxy.segment.template b/template2/nginx/https/reverse-proxy.segment.template
deleted file mode 100644
index 85a942e..0000000
--- a/template2/nginx/https/reverse-proxy.segment.template
+++ /dev/null
@@ -1,10 +0,0 @@
-location ${PATH}/ {
- proxy_http_version 1.1;
- proxy_set_header Upgrade $http_upgrade;
- proxy_set_header Connection $connection_upgrade;
- proxy_set_header Host $host;
- proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
- proxy_set_header X-Forwarded-Proto $scheme;
- proxy_set_header X-Real-IP $remote_addr;
- proxy_pass http://${UPSTREAM};
-}
diff --git a/template2/nginx/https/static-file.no-strip-prefix.segment.template b/template2/nginx/https/static-file.no-strip-prefix.segment.template
deleted file mode 100644
index 4e829ba..0000000
--- a/template2/nginx/https/static-file.no-strip-prefix.segment.template
+++ /dev/null
@@ -1,3 +0,0 @@
-location ${PATH}/ {
- root ${ROOT};
-}
diff --git a/template2/nginx/https/static-file.segment.template b/template2/nginx/https/static-file.segment.template
deleted file mode 100644
index 683cad3..0000000
--- a/template2/nginx/https/static-file.segment.template
+++ /dev/null
@@ -1,3 +0,0 @@
-location ${PATH}/ {
- alias ${ROOT};
-}
diff --git a/template2/nginx/server.schema.json b/template2/nginx/server.schema.json
deleted file mode 100644
index a19c131..0000000
--- a/template2/nginx/server.schema.json
+++ /dev/null
@@ -1,96 +0,0 @@
-{
- "$schema": "http://json-schema.org/draft-07/schema#",
- "definitions": {
- "RedirectService": {
- "properties": {
- "code": {
- "type": "number"
- },
- "path": {
- "type": "string"
- },
- "to": {
- "type": "string"
- },
- "type": {
- "enum": [
- "redirect"
- ],
- "type": "string"
- }
- },
- "type": "object"
- },
- "ReverseProxyService": {
- "properties": {
- "path": {
- "type": "string"
- },
- "type": {
- "enum": [
- "reverse-proxy"
- ],
- "type": "string"
- },
- "upstream": {
- "type": "string"
- }
- },
- "type": "object"
- },
- "StaticFileService": {
- "properties": {
- "no_strip_prefix": {
- "type": "boolean"
- },
- "path": {
- "type": "string"
- },
- "root": {
- "type": "string"
- },
- "type": {
- "enum": [
- "static-file"
- ],
- "type": "string"
- }
- },
- "type": "object"
- },
- "SubDomain": {
- "properties": {
- "name": {
- "type": "string"
- },
- "services": {
- "items": {
- "anyOf": [
- {
- "$ref": "#/definitions/RedirectService"
- },
- {
- "$ref": "#/definitions/StaticFileService"
- },
- {
- "$ref": "#/definitions/ReverseProxyService"
- }
- ]
- },
- "type": "array"
- }
- },
- "type": "object"
- }
- },
- "properties": {
- "domains": {
- "items": {
- "$ref": "#/definitions/SubDomain"
- },
- "type": "array"
- }
- },
- "type": "object"
-}
-
diff --git a/template2/nginx/server.ts b/template2/nginx/server.ts
deleted file mode 100644
index ffd64b7..0000000
--- a/template2/nginx/server.ts
+++ /dev/null
@@ -1,66 +0,0 @@
-// Used to generate json schema.
-
-// path should start with "/", end without "/" and contain no special characters in regex.
-// the special case is root path "/", which is allowed.
-
-// For example:
-// Given
-// path: /a/b
-// to: http://c.com/d
-// Then (no_strip_prefix is false)
-// url: /a/b/c
-// redirect to: http://c.com/d/c (/a/b is removed)
-// Note:
-// Contrary to reverse proxy, you would always want to strip the prefix path.
-// Because there is no meaning to redirect to the new page with the original path.
-// If you want a domain-only redirect, just specify the path as "/".
-export interface RedirectService {
- type: "redirect";
- path: string; // must be a path, should start with "/", end without "/"
- to: string; // must be a url, should start with scheme (http:// or https://), end without "/"
- code?: number; // default to 307
-}
-
-// For example:
-// Given
-// path: /a/b
-// root: /e/f
-// Then (no_strip_prefix is false)
-// url: /a/b/c/d
-// file path: /e/f/c/d (/a/b is removed)
-// Or (no_strip_prefix is true)
-// url: /a/b/c/d
-// file path: /e/f/a/b/c/d
-export interface StaticFileService {
- type: "static-file";
- path: string; // must be a path, should start with "/", end without "/"
- root: string; // must be a path (directory), should start with "/", end without "/"
- no_strip_prefix?: boolean; // default to false. If true, the path prefix is not removed from the url when finding the file.
-}
-
-// For example:
-// Given
-// path: /a/b
-// upstream: another-server:1234
-// Then
-// url: /a/b/c/d
-// proxy to: another-server:1234/a/b/c/d
-// Note:
-// Contrary to redirect, you would always want to keep the prefix path.
-// Because the upstream server will mess up the path handling if the prefix is not kept.
-export interface ReverseProxyService {
- type: "reverse-proxy";
- path: string; // must be a path, should start with "/", end without "/"
- upstream: string; // should be a [host]:[port], like "localhost:1234"
-}
-
-export type Service = RedirectService | StaticFileService | ReverseProxyService;
-
-export interface SubDomain {
- name: string; // @ for root domain
- services: Service[];
-}
-
-export interface Server {
- domains: SubDomain[];
-}
diff --git a/template2/server.json.template b/template2/server.json.template
deleted file mode 100644
index 22f1251..0000000
--- a/template2/server.json.template
+++ /dev/null
@@ -1,58 +0,0 @@
-{
- "$schema": "./server.schema.json",
- "domains": [
- {
- "name": "@",
- "services": [
- {
- "type": "static-file",
- "path": "/",
- "root": "/srv/www"
- },
- {
- "type": "redirect",
- "path": "/github",
- "to": "https://github.com/crupest"
- },
- {
- "type": "reverse-proxy",
- "path": "/_${V2RAY_PATH}",
- "upstream": "crupest-v2ray:10000"
- }
- ]
- },
- {
- "name": "code",
- "services": [
- {
- "type": "reverse-proxy",
- "path": "/",
- "upstream": "code-server:8080"
- }
- ]
- },
- {
- "name": "timeline",
- "services": [
- {
- "type": "reverse-proxy",
- "path": "/",
- "upstream": "timeline:5000"
- }
- ]
- },
- {
- "name": "blog",
- "services": [
- {
- "type": "static-file",
- "path": "/",
- "root": "/srv/blog"
- }
- ]
- },
- {
- "name": "mail"
- }
- ]
-} \ No newline at end of file
generated by cgit v1.2.3 (git 2.39.1) at 2025-04-08 05:19:40 +0000