29 Commits

Author SHA1 Message Date
Tommy
5106e34fb6
Add add.txt & disable unnecessary logging 2024-10-13 14:46:21 -07:00
Tommy
4408d67d35
Add robots handling 2024-10-13 13:46:37 -07:00
Tommy
ba554095f1
Add X-Permitted-Cross-Domain-Policies
Signed-off-by: Tommy <contact@tommytran.io>
2024-10-13 07:33:28 -07:00
Tommy
11189cffe7
Proper permission policies for WebAuthn
Signed-off-by: Tommy <contact@tommytran.io>
2024-10-13 07:30:24 -07:00
Tommy
85ce409081
Remove publickey-credentials-get=()
FIDO2 is used almost everywhere now

Signed-off-by: Tommy <contact@tommytran.io>
2024-10-13 07:27:04 -07:00
Tommy
9d671fb07e
Disable server_tokens 2024-10-13 05:49:48 -07:00
Tommy
1678b0861d
Hide X-Powered-By 2024-10-13 05:15:14 -07:00
Tommy
fd996d1a02
Remove unnecessary comment 2024-10-13 03:41:17 -07:00
Tommy
c374b5ef86
Fix listen directives 2024-10-13 03:32:03 -07:00
Tommy
d938584c21
Add vaultwarden 2024-10-13 03:30:33 -07:00
Tommy
2db0611650
Add Nextcloud 2024-10-13 03:27:54 -07:00
Tommy
95881525c4
Avoid confusion with proxy_pass 2024-10-13 02:59:28 -07:00
Tommy
3bbe3ea3a3
Use http_host for Host
Signed-off-by: Tommy <contact@tommytran.io>
2024-10-13 01:26:11 -07:00
Tommy
673f533643
Add extra headers
Signed-off-by: Tommy <contact@tommytran.io>
2024-10-13 01:25:32 -07:00
Tommy
7036022071
Use http_host
Signed-off-by: Tommy <contact@tommytran.io>
2024-10-12 23:54:54 -07:00
Tommy
3833fd16eb
Remove unnecessary OCSP stapling config
Signed-off-by: Tommy <contact@tommytran.io>
2024-09-26 07:26:02 -07:00
Tommy
4e61156e94
Fix certbot-renew override 2024-07-26 07:16:18 -07:00
Tommy
faa35bf11b
Remove OCSP stapling
https://letsencrypt.org/2024/07/23/replacing-ocsp-with-crls.html
2024-07-26 06:52:58 -07:00
Tommy
5a3ac8cbd7
Miniflux needs form-action 'self'
Signed-off-by: Tommy <contact@tommytran.io>
2024-06-30 12:37:44 -07:00
Tommy
b5a6386526
Reorganize Miniflux CSP
Signed-off-by: Tommy <contact@tommytran.io>
2024-06-29 16:54:37 -07:00
Tommy
e48e0a1096
Add Miniflux 2024-06-29 14:59:18 -07:00
Tommy
616669f832
Put reuseport into the default site config 2024-06-29 14:56:28 -07:00
Tommy
8aa5abae84
Add quotation marks 2024-06-25 15:17:43 -07:00
Tommy
4f1b4b6dcb
Restrict CORP 2024-06-25 15:15:59 -07:00
Tommy
03149c183c
Split out cross origin security headers 2024-06-25 15:10:02 -07:00
Tommy
e64e242e42
Always use 'always' 2024-06-25 14:57:55 -07:00
Tommy
687dfae6b2
Add brackets for consistency
Signed-off-by: Tommy <contact@tommytran.io>
2024-06-24 23:54:23 -07:00
Tommy
b8c460073a
Make /var/lib/nginx optional
So it's easier to reuse this in distros like Ubuntu

Signed-off-by: Tommy <contact@tommytran.io>
2024-06-24 23:47:16 -07:00
Tommy
1bf7d1835f
Initial file upload
Signed-off-by: Tommy <contact@tommytran.io>
2024-06-24 10:21:29 -07:00