diff options
Diffstat (limited to 'nginx')
| -rw-r--r-- | nginx/nginx.conf | 21 |
1 files changed, 14 insertions, 7 deletions
diff --git a/nginx/nginx.conf b/nginx/nginx.conf index 9e49ae7..9767a66 100644 --- a/nginx/nginx.conf +++ b/nginx/nginx.conf @@ -4,7 +4,7 @@ server { listen 80; listen [::]:80; - server_name swave.lol; + server_name swave.lol blog.swave.lol; location / { rewrite ^ https://$host$request_uri? permanent; @@ -21,7 +21,7 @@ server { listen 443 ssl http2; listen [::]:443 ssl http2; - server_name swave.com; + server_name swave.lol blog.swave.lol; server_tokens off; @@ -32,10 +32,10 @@ server { ssl_dhparam /etc/ssl/certs/dhparam-2048.pem; - ssl_protocols TLSv1.2 TLSv1.1 TLSv1; + ssl_protocols TLSv1.2 TLSv1.3; ssl_prefer_server_ciphers on; - ssl_ciphers ECDH+AESGCM:ECDH+AES256:ECDH+AES128:DH+3DES:!ADH:!AECDH:!MD5; + ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384; ssl_ecdh_curve secp384r1; ssl_session_tickets off; @@ -45,8 +45,15 @@ server { ssl_stapling_verify on; resolver 8.8.8.8; - - # Define the specified charset to the “Content-Type” response header field + # Define the specified charset to the "Content-Type" response header field charset utf-8; -} + # Reverse proxy to Ghost + location / { + proxy_pass http://ghost:2368; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + } +} |