Fixes fuer zentrale Instancen-Verwaltung

This commit is contained in:
phil 2021-06-26 01:45:06 +02:00
parent e63c995f11
commit b33a014729
12 changed files with 72 additions and 70 deletions

View file

@ -1,21 +1,20 @@
server {
listen 80;
server_name {{ nextcloud_domain }};
server_name {{ instance.domain }};
include snippets/letsencrypt.conf;
location / { return 301 https://$http_host$request_uri; }
}
server {
server_name {{ nextcloud_domain }};
server_name {{ instance.domain }};
listen 443 ssl http2;
ssl_certificate /var/lib/dehydrated/certs/{{ nextcloud_domain }}/fullchain.pem;
ssl_certificate_key /var/lib/dehydrated/certs/{{ nextcloud_domain }}/privkey.pem;
ssl_certificate /var/lib/dehydrated/certs/{{ instance.domain }}/fullchain.pem;
ssl_certificate_key /var/lib/dehydrated/certs/{{ instance.domain }}/privkey.pem;
include /etc/nginx/proxy_params;
add_header Referrer-Policy $referrerpolicy;
add_header Strict-Transport-Security $sts;
add_header X-Content-Type-Options $xcontentoptions;
add_header X-XSS-Protection $xxssprotection;
# include /etc/nginx/snippets/hpkp.conf;
location ~ /.well-known/(carddav|caldav) {
return 301 $scheme://$host/remote.php/dav;

View file

@ -1,4 +1,4 @@
[{{ common_name }}]
[{{ instance.user }}]
;prefix = /path/to/pools/$pool
user = $pool
group = www-data