aboutsummaryrefslogtreecommitdiffstats
path: root/services/nginx/fs/etc/nginx/templates/default.conf.template
diff options
context:
space:
mode:
Diffstat (limited to 'services/nginx/fs/etc/nginx/templates/default.conf.template')
-rw-r--r--services/nginx/fs/etc/nginx/templates/default.conf.template46
1 files changed, 46 insertions, 0 deletions
diff --git a/services/nginx/fs/etc/nginx/templates/default.conf.template b/services/nginx/fs/etc/nginx/templates/default.conf.template
new file mode 100644
index 0000000..f90b61a
--- /dev/null
+++ b/services/nginx/fs/etc/nginx/templates/default.conf.template
@@ -0,0 +1,46 @@
+server {
+ listen 80;
+ listen [::]:80;
+
+ server_name ${NGINX__HOST}
+ www.${NGINX__HOST}
+ dav.${NGINX__HOST}
+ git.${NGINX__HOST}
+ sync.${NGINX__HOST};
+
+ # Prevent nginx HTTP Server Detection
+ server_tokens off;
+
+ return 301 https://$host$request_uri;
+}
+
+server {
+ listen 443 ssl;
+ listen [::]:443 ssl;
+
+ server_name ${NGINX__HOST} www.${NGINX__HOST};
+
+ ssl_certificate /run/secrets/server.crt;
+ ssl_certificate_key /run/secrets/server.key;
+
+ location / {
+ root /srv;
+ }
+}
+
+server {
+ listen 443 ssl default_server;
+ listen [::]:443 ssl default_server;
+
+ server_name _;
+
+ ssl_certificate /run/secrets/server.crt;
+ ssl_certificate_key /run/secrets/server.key;
+
+ return 444;
+}
+
+# Docker embedded DNS server
+resolver 127.0.0.11 valid=2s;
+
+include /etc/nginx/conf.d/services/*.conf;