From 05072cb766a6200e859a402258ccf1fde1b1adec Mon Sep 17 00:00:00 2001
From: Yuqian Yang <crupest@crupest.life>
Date: Sun, 9 Mar 2025 17:31:21 +0800
Subject: feat(service): mv config to docker imagei, better pri/pub git.

---
 services/docker/nginx/configs/common/acme-challenge | 3 +++
 services/docker/nginx/configs/common/http-listen    | 2 ++
 services/docker/nginx/configs/common/https-listen   | 3 +++
 services/docker/nginx/configs/common/https-redirect | 3 +++
 services/docker/nginx/configs/common/proxy-common   | 7 +++++++
 5 files changed, 18 insertions(+)
 create mode 100644 services/docker/nginx/configs/common/acme-challenge
 create mode 100644 services/docker/nginx/configs/common/http-listen
 create mode 100644 services/docker/nginx/configs/common/https-listen
 create mode 100644 services/docker/nginx/configs/common/https-redirect
 create mode 100644 services/docker/nginx/configs/common/proxy-common

(limited to 'services/docker/nginx/configs/common')

diff --git a/services/docker/nginx/configs/common/acme-challenge b/services/docker/nginx/configs/common/acme-challenge
new file mode 100644
index 0000000..26054b8
--- /dev/null
+++ b/services/docker/nginx/configs/common/acme-challenge
@@ -0,0 +1,3 @@
+location /.well-known/acme-challenge {
+    root /srv/acme;
+}
diff --git a/services/docker/nginx/configs/common/http-listen b/services/docker/nginx/configs/common/http-listen
new file mode 100644
index 0000000..76cb18d
--- /dev/null
+++ b/services/docker/nginx/configs/common/http-listen
@@ -0,0 +1,2 @@
+listen 80;
+listen [::]:80;
diff --git a/services/docker/nginx/configs/common/https-listen b/services/docker/nginx/configs/common/https-listen
new file mode 100644
index 0000000..db2f68e
--- /dev/null
+++ b/services/docker/nginx/configs/common/https-listen
@@ -0,0 +1,3 @@
+listen 443 ssl;
+listen [::]:443 ssl;
+http2 on;
diff --git a/services/docker/nginx/configs/common/https-redirect b/services/docker/nginx/configs/common/https-redirect
new file mode 100644
index 0000000..56d095d
--- /dev/null
+++ b/services/docker/nginx/configs/common/https-redirect
@@ -0,0 +1,3 @@
+location / {
+    return 301 https://$host$request_uri;
+}
diff --git a/services/docker/nginx/configs/common/proxy-common b/services/docker/nginx/configs/common/proxy-common
new file mode 100644
index 0000000..4193548
--- /dev/null
+++ b/services/docker/nginx/configs/common/proxy-common
@@ -0,0 +1,7 @@
+proxy_http_version 1.1;
+proxy_set_header Upgrade $http_upgrade;
+proxy_set_header Connection $connection_upgrade;
+proxy_set_header Host $host;
+proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+proxy_set_header X-Forwarded-Proto $scheme;
+proxy_set_header X-Real-IP $remote_addr;
-- 
cgit v1.2.3