edb4c397df
Upstream: https://github.com/YunoHost/yunohost @ 3a5f8bac8301c450897b96cbd43a4c7d3ba750fb But (José) : transformer tout le code en bions + ploxions du xerboxion. La carte de digestion vit au labo : /yunohost-digest.json
36 lines
1.1 KiB
Plaintext
36 lines
1.1 KiB
Plaintext
server {
|
|
listen 80 default_server;
|
|
listen [::]:80 default_server;
|
|
|
|
include /etc/nginx/conf.d/default.d/*.conf;
|
|
}
|
|
|
|
server {
|
|
|
|
{% if tls_passthrough_enabled != "True" %}
|
|
listen 443 ssl http2 default_server;
|
|
listen [::]:443 ssl http2 default_server;
|
|
{% else %}
|
|
listen 127.0.0.1:444 ssl http2 default_server;
|
|
# Prevent 301/302 rewrite/redirect from including the 444 port
|
|
port_in_redirect off;
|
|
{% endif %}
|
|
|
|
include /etc/nginx/conf.d/security.conf.inc;
|
|
|
|
ssl_certificate /etc/yunohost/certs/yunohost.org/crt.pem;
|
|
ssl_certificate_key /etc/yunohost/certs/yunohost.org/key.pem;
|
|
|
|
more_set_headers "Strict-Transport-Security : max-age=63072000; includeSubDomains; preload";
|
|
more_set_headers "Referrer-Policy : 'same-origin'";
|
|
|
|
location /yunohost {
|
|
# Redirect most of 404 to maindomain.tld/yunohost/sso
|
|
access_by_lua_file /usr/share/ssowat/access.lua;
|
|
}
|
|
|
|
include /etc/nginx/conf.d/yunohost_admin.conf.inc;
|
|
include /etc/nginx/conf.d/yunohost_api.conf.inc;
|
|
include /etc/nginx/conf.d/default.d/*.conf;
|
|
}
|