summaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)AuthorFilesLines
2019-07-31Turns out it's not necessary, and was due to another error..Johannes Löthberg1-3/+0
Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>
2019-07-31Another attemptJohannes Löthberg1-4/+3
Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>
2019-07-31matrix: Hide ACAO/ACAM proxy headersJohannes Löthberg1-0/+2
Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>
2019-07-31matrix: Set ACAO/ACAMJohannes Löthberg1-0/+2
Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>
2019-07-29matrix: Use 8449 for trusting X-Forwarded-ForJohannes Löthberg1-1/+1
Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>
2019-05-30Remuve duplicate kyriasis.com server_nameJohannes Löthberg1-1/+1
Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>
2019-05-30Remove redundant ssl directivoseJohannes Löthberg10-10/+0
Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>
2019-05-30repsys: use security headers snippetJohannes Löthberg1-12/+3
Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>
2019-05-30Fix quoting againJohannes Löthberg1-5/+5
Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>
2019-05-30Add missing quotesJohannes Löthberg1-1/+1
Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>
2019-05-30Add nginx snippet with security headersJohannes Löthberg1-0/+18
Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>
2019-05-30Update to nginx formula >1.0.0Johannes Löthberg11-569/+558
Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>
2019-05-30repsys: Add http2Johannes Löthberg1-0/+40
Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>
2019-05-30Add initial repsys entryJohannes Löthberg2-0/+20
Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>
2019-03-21Apparently some synapse endpoints return CORS headers, some don't...Johannes Löthberg2-7/+5
Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>
2019-03-21nginx: Fix CORS quotingJohannes Löthberg2-6/+6
Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>
2019-03-21nginx: Remove semicolonsJohannes Löthberg2-4/+4
Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>
2019-03-21Add CORSJohannes Löthberg2-1/+7
Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>
2019-03-21nginx/matrix: Fix upstream portJohannes Löthberg1-1/+1
Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>
2019-03-21nginx/kyriasis: Add https and proxy matrix well-knownJohannes Löthberg1-0/+44
Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>
2019-03-21Add kyriasis.com to nginxJohannes Löthberg2-0/+20
Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>
2019-03-21Proxy matrixJohannes Löthberg1-2/+13
Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>
2019-03-21Fix quotingJohannes Löthberg1-1/+1
Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>
2019-03-21nginx/matrix: Set static json string for well-known discoveryJohannes Löthberg1-5/+3
Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>
2019-02-15nginx/matrix: Proxy well-known/matrixJohannes Löthberg1-0/+6
Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>
2019-01-02grafana: add proxy to grafana-serverJohannes Löthberg1-0/+36
Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>
2019-01-02opensmtpd/theos: Change cert pathsJohannes Löthberg1-2/+2
Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>
2019-01-02TypoJohannes Löthberg1-1/+1
Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>
2019-01-02Forgot to include it..Johannes Löthberg1-0/+1
Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>
2019-01-02Add grafana without sslJohannes Löthberg1-0/+19
Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>
2018-11-03nginx: Put https redirect in location /Johannes Löthberg7-7/+14
Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>
2018-08-22remmy.io: Not default_serverJohannes Löthberg1-2/+2
Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>
2018-08-19Add remmy.ioJohannes Löthberg3-3/+64
Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>
2018-08-18opensmtd: Update interfacesJohannes Löthberg1-3/+3
2018-04-07Add updated smtpd configJohannes Löthberg1-42/+13
Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>
2018-04-07Add miniflux nginx confJohannes Löthberg2-0/+64
Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>
2018-04-07Update nginx configsJohannes Löthberg2-7/+5
Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>
2017-01-10nginx: base: set up site config requirements up properlyJohannes Löthberg1-2/+4
Make the server{-available,-enabled} directiories require the server configs so that the enabled ones won't be removed. Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>
2017-01-10nginx: base: Clean servers directoriesJohannes Löthberg1-0/+8
All sites should be managed with salt so they can be nuked properly when removed. Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>
2017-01-10nginx: matrix: nuke synapse upstreamJohannes Löthberg1-4/+0
Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>
2017-01-10Move opensmtpd configs to own directoryJohannes Löthberg2-1/+1
Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>
2017-01-10Reorganize nginx configsJohannes Löthberg8-11/+8
Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>
2017-01-10Add matrix and riot nginx configJohannes Löthberg2-0/+132
Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>
2017-01-10Bump theos nginx confJohannes Löthberg1-10/+12
Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>
2017-01-10nginx: git: set error_logJohannes Löthberg1-0/+3
Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>
2017-01-10nginx: Sett STS, X-Frame-Options, and XCTO everywhereJohannes Löthberg2-0/+20
Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>
2017-01-10nginx: set the acme-challenge wels-known path properly for everythingJohannes Löthberg3-2/+17
Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>
2017-01-10Remove gerrit nginx confJohannes Löthberg2-46/+2
Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>
2017-01-10nginx: Don't set charset for jsonJohannes Löthberg1-1/+1
RFC says it doesn't take any arguments. Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>
2017-01-10nginx: gzip everythingJohannes Löthberg1-1/+2
Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>