84d52a52d66a0a72415ecd45b5a8f8b8379f1e68
Dockerfile
... | ... | @@ -1,27 +0,0 @@ |
1 | -FROM ubuntu:22.04 |
|
2 | -## Apt |
|
3 | -RUN apt-get update |
|
4 | -RUN DEBIAN_FRONTEND="noninteractive" apt-get install -y ruby ruby-dev make zlib1g-dev libicu-dev build-essential git cmake |
|
5 | -RUN DEBIAN_FRONTEND="noninteractive" apt-get install -y libssl-dev asciidoc pkg-config nginx certbot python3-certbot-nginx apache2-utils |
|
6 | -RUN rm -rf /var/lib/apt/lists/* |
|
7 | - |
|
8 | -# Install |
|
9 | -RUN gem install github-markdown |
|
10 | -RUN gem install gollum |
|
11 | - |
|
12 | -COPY nginx.conf /etc/nginx/sites-available/spacewiki |
|
13 | -RUN rm /etc/nginx/sites-enabled/default |
|
14 | -RUN ln -s /etc/nginx/sites-available/spacewiki /etc/nginx/sites-enabled/spacewiki |
|
15 | - |
|
16 | -RUN useradd -ms /bin/bash gollum |
|
17 | -RUN mkdir -p /spacewiki |
|
18 | -RUN chown -R gollum /spacewiki |
|
19 | - |
|
20 | -COPY command.sh / |
|
21 | -RUN chmod +x /command.sh |
|
22 | -# Run |
|
23 | -EXPOSE 4567 80 443 |
|
24 | -WORKDIR /spacewiki |
|
25 | - |
|
26 | -#USER gollum |
|
27 | -ENTRYPOINT ["/command.sh"] |
README.md
... | ... | @@ -1,28 +1,15 @@ |
1 | 1 | # Spacewiki |
2 | 2 | |
3 | 3 | ## wiki |
4 | -docker build -t spacewiki:latest . |
|
5 | -docker run -d -v $(pwd):/spacewiki -p 4567:4567 spacewiki |
|
4 | +docker run -d -v -v $(pwd):/wiki -p 4567:4567 gollumwiki/gollum:master --css |
|
6 | 5 | |
7 | 6 | ## HTTPS Proxy |
8 | -1. run ngin |
|
9 | -## Cron |
|
10 | -`` |
|
11 | -# Backup script daily at 3 AM |
|
12 | -0 3 * * * /path/to/spacewiki/gitbackup.sh |
|
13 | -`` |
|
14 | - |
|
15 | -## Golum on nginx:lastest |
|
16 | -sudo apt update |
|
17 | -sudo apt install -y pkg-config ruby ruby-dev make zlib1g-dev libicu-dev build-essential git asciidoc cmake |
|
18 | - |
|
19 | -sudo apt-get install ruby ruby-dev make zlib1g-dev libicu-dev build-essential git cmake libssl-dev |
|
7 | +cd docker |
|
8 | +docker build -t nginx-proxy:build . |
|
9 | +docker run -v $(pwd)/letsencrypt:/etc/letsencrypt -d -p 80:80 -p 443:443 nginx-proxy:basic |
|
20 | 10 | |
21 | -sudo gem install gollum |
|
22 | - |
|
23 | -gem install gollum |
|
24 | -gem install github-markdown |
|
11 | +certbot --nginx -d stubbornspace.com |
|
25 | 12 | |
13 | +docker commit * nginx-proxy:certbot |
|
14 | +## Cron |
|
26 | 15 | |
27 | -apt-get install python3-pip libkrb5-dev |
|
28 | -pip install gssapi |
|
... | ... | \ No newline at end of file |
command.sh
... | ... | @@ -1,7 +0,0 @@ |
1 | -## start nginx & setup https if not configured |
|
2 | -htpasswd -b -c /etc/nginx/.htpasswd $1 $2 |
|
3 | -service nginx start |
|
4 | -certbot run -n --nginx --agree-tos -d stubbornspace.com -m stubbornspace@gmail.com --redirect |
|
5 | - |
|
6 | -## switch to gollum and gun gollum |
|
7 | -su -c "gollum --css --allow-uploads --port 4567" -s /bin/sh gollum |
|
... | ... | \ No newline at end of file |
custom.css
... | ... | @@ -61,8 +61,8 @@ max-width: 600px !important; |
61 | 61 | |
62 | 62 | .container-lg { |
63 | 63 | max-width: 860px; |
64 | -margin-right: auto; |
|
65 | -margin-left: auto; |
|
64 | +margin-right: 1rem; |
|
65 | +margin-left: 1rem; |
|
66 | 66 | padding-bottom: 3rem; |
67 | 67 | } |
68 | 68 |
docker/.DS_Store
... | ... | Binary files /dev/null and b/docker/.DS_Store differ |
docker/Dockerfile
... | ... | @@ -0,0 +1,9 @@ |
1 | +FROM nginx:1.20-alpine |
|
2 | + |
|
3 | +RUN apk add certbot certbot-nginx apache2-utils |
|
4 | +COPY letsencrypt /etc/letsencrypt |
|
5 | +#COPY htpasswd /etc/nginx/.htpasswd |
|
6 | + |
|
7 | +COPY proxy-default.conf /etc/nginx/conf.d/default.conf |
|
8 | + |
|
9 | +EXPOSE 80 443 |
|
... | ... | \ No newline at end of file |
docker/default.conf
... | ... | @@ -0,0 +1,14 @@ |
1 | +server { |
|
2 | + listen 80; |
|
3 | + server_name stubbornspace.com; |
|
4 | + |
|
5 | + location / { |
|
6 | + root /usr/share/nginx/html; |
|
7 | + index index.html index.htm; |
|
8 | + } |
|
9 | + |
|
10 | + error_page 500 502 503 504 /50x.html; |
|
11 | + location = /50x.html { |
|
12 | + root /usr/share/nginx/html; |
|
13 | + } |
|
14 | +} |
|
... | ... | \ No newline at end of file |
docker/docker-compose.yml
... | ... | @@ -0,0 +1,18 @@ |
1 | +version: '3' |
|
2 | + |
|
3 | +services: |
|
4 | + gollum: |
|
5 | + image: gollumwiki/gollum:latest |
|
6 | + ports: |
|
7 | + - 4567:4567 |
|
8 | + volumes: |
|
9 | + - /Users/solo/Spacewiki:/wiki |
|
10 | + command: --css |
|
11 | + |
|
12 | + proxy: |
|
13 | + image: nginx-proxy:1 |
|
14 | + ports: |
|
15 | + - 80:80 |
|
16 | + - 443:443 |
|
17 | + depends_on: |
|
18 | + - gollum |
|
... | ... | \ No newline at end of file |
docker/htpasswd
... | ... | @@ -0,0 +1 @@ |
1 | +spaceman:$apr1$9aK5CSon$CuuUwmwoNVbc058SkZBZi. |
|
... | ... | \ No newline at end of file |
docker/letsencrypt/.updated-options-ssl-nginx-conf-digest.txt
... | ... | @@ -0,0 +1 @@ |
1 | +108c4555058a087496a3893aea5d9e1cee0f20a3085d44a52dc1a66522299ac3 |
|
... | ... | \ No newline at end of file |
docker/letsencrypt/.updated-ssl-dhparams-pem-digest.txt
... | ... | @@ -0,0 +1 @@ |
1 | +9ba6429597aeed2d8617a7705b56e96d044f64b07971659382e426675105654b |
|
... | ... | \ No newline at end of file |
docker/letsencrypt/accounts/acme-v02.api.letsencrypt.org/directory/39160807fad0180a7c993422afac40f4/meta.json
... | ... | @@ -0,0 +1 @@ |
1 | +{"creation_dt": "2024-10-21T23:13:18Z", "creation_host": "bfdb0bcb5cd2"} |
|
... | ... | \ No newline at end of file |
docker/letsencrypt/accounts/acme-v02.api.letsencrypt.org/directory/39160807fad0180a7c993422afac40f4/private_key.json
... | ... | @@ -0,0 +1 @@ |
1 | +{"n": "ov1qYECkwYBhH-_gVi2pNgB9f84jSXxJkYmmFFXO-EikfyakOOCIOWLaSKhTVM8h7oHmb9KPmMqx1DOqDD6G-TaAwJiJKS2KEseRHG5ob9s_HJyVPEUkzFd3yXUhPVaSJToR-tTyQnotIJlay5zDfyyyO3hYVjNN3m6BQ7khr5nnnmXnc_Ha9b9PNSE4Jths0IlJ_-6RnppOxvf9-RGUPHA6JVqRwHJxP67EOovWlTLyvxfsr-mDvwzAI6VhgG5T-Fuf3jxkvtUdzRE5741FGmzTryUp2BrmB-6YG9SMLTeAMgnjQgOHClIoo3S52r46ikUt7Kl03gaI_eu8zP977w", "e": "AQAB", "d": "fX0TG8xpjTnkjYxIctFxCEzUU0RI0tlIYy9RmTJ_yZVUYTlFEy18dIJxgaNnlVJs049b9hhtyru0sqacdBToIpQeCSrn37ZaKh9Q0E0JR6XML6E3HVI3BMULSyZNU0aF-vd8xFyTsS8T85de2ol100J8b2E20hdqCqmWCKhPETz5DtRBIjgIRfPiW29RbjXNcfXnhM6WwxspyyrT-Q4ABGrVGR2LgYKG-_UMR9sKGAjg8eCahvPE_-HPKyFI-09dUO2PvndZ5YorlTPWPQ3SHzht15VbyVX9fJPmid_4nnx4P4lI9qEIS3uRoPA9dYDz9FuCy7R6DiuZzbH3YrfssQ", "p": "zxSs64DA1P-D57SqSgklhM4O_Ghi76qPmTbo4WE3esjULjKx-bjaEAXN12qJdJ_GrqFs7RmGp7HR3h4IkmV4mWElGneTmEVoCjb6QVKX_vojr6bh4CRMO44HCM5FxCspV-hZ2cMOhHTtRQ7JZMop77EeZ7i3SFE53buntkrChAs", "q": "yX5SH6pKBevcZ_EMOr-7G1rfPQx1kKJByGoOHyQDaawNpTgpoXs7Gwa8v-WoCy-PgxB6pUfq4Y2bPn9Vk30E7Qzsqt0hfGY_cIQkfWcwRehh_uJEJLkVu1FCMAX1IdE432v8r3Yo21o6Mdemj6e3sCO-wtaLyp4U5-6AwpyAki0", "dp": "Qu-r9XPo4PC28m6znLrYJdV1gqE7Wb0ILb5SCIgkJsxDyasZXF8kHYnCv57wT4JV9py3WOynWg1giSusGaYzFWERXTzJuK62spaSzgqklwbEAkMvQAR7n8SJAY-rfX12H7Q7Vuh2CNrC10-wSaQPaisWaPCMThPzYHkH_SStO4E", "dq": "CzKD6dKSzoVu-C_DGDizcy-3nDLnDaSWt0Z9hml_7w1qrLXUSm8It9XGA3wFvKll9kiiKDE48lPmPrDg1pNqBKplNJGZXMpp2Bzf0kA7xIbHe1yjoM7QUFqRrQ2Hs9tmp7PelPmiB56aAU8UqIMPiDBUV4uItTfXvZPZf_cmhfk", "qi": "DbiPZGcIjpz1kcr02stCyC7xm5Qevg6XOAowBnOTLUXgNsdEgGu43cxARmK7dK1kBAuHFk4VcwlC1ZNd5uu7Q0CUCXo1rmWK9e20ZNXQx5unlGzFOqpKmNkUC7zFQDHSkab93OduLZIv3P5pAXGJstnfVXp3BaTnOYn66tp3Yrs", "kty": "RSA"} |
|
... | ... | \ No newline at end of file |
docker/letsencrypt/accounts/acme-v02.api.letsencrypt.org/directory/39160807fad0180a7c993422afac40f4/regr.json
... | ... | @@ -0,0 +1 @@ |
1 | +{"body": {}, "uri": "https://acme-v02.api.letsencrypt.org/acme/acct/2013095367"} |
|
... | ... | \ No newline at end of file |
docker/letsencrypt/archive/stubbornspace.com/cert1.pem
... | ... | @@ -0,0 +1,29 @@ |
1 | +-----BEGIN CERTIFICATE----- |
|
2 | +MIIE8jCCA9qgAwIBAgISAw5gLlUoVZofXHlU3SzlLzS1MA0GCSqGSIb3DQEBCwUA |
|
3 | +MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD |
|
4 | +EwNSMTAwHhcNMjQxMDIxMjIxNDUzWhcNMjUwMTE5MjIxNDUyWjAcMRowGAYDVQQD |
|
5 | +ExFzdHViYm9ybnNwYWNlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC |
|
6 | +ggEBALWqu0ZqaGquecwe7DY/yJgd4NG5xAqqP7tQ+dJYVRbCUgElTU13QJEKGNrF |
|
7 | +vpaqBRT0ubtdJNvSyXgrYAHUqr7WAdI7zBYsJpuJrQpqKuEGmEg3s2wDmZh1buXa |
|
8 | +C1kxcqyb2B0hMV7CZVWg2/J7aBIIM+ggqCyZvv2Mlat9v9EnC0cPP9K+b9JcbVDN |
|
9 | +a6Z5q+Uy9YJRLkAhDVWkezjPk6qWQzFn2xhlXVtDUFwbs7wD9EwuCgfUbocArBrS |
|
10 | +UkWQliy1dwcXh1fnoBteEdFc9RLvtjG+AuIqSZspENmOGqDEIBI9MxnRbb76I9XB |
|
11 | +3+fnTMOr+8mu/YgdFHRRvyM3HHkCAwEAAaOCAhUwggIRMA4GA1UdDwEB/wQEAwIF |
|
12 | +oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAd |
|
13 | +BgNVHQ4EFgQUgkkHC3T3FQarXbBozx1/Tt7/ngswHwYDVR0jBBgwFoAUu7zDR6Xk |
|
14 | +vKnGw6RyDBCNojXhyOgwVwYIKwYBBQUHAQEESzBJMCIGCCsGAQUFBzABhhZodHRw |
|
15 | +Oi8vcjEwLm8ubGVuY3Iub3JnMCMGCCsGAQUFBzAChhdodHRwOi8vcjEwLmkubGVu |
|
16 | +Y3Iub3JnLzAcBgNVHREEFTATghFzdHViYm9ybnNwYWNlLmNvbTATBgNVHSAEDDAK |
|
17 | +MAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AKLjCuRF772tm344 |
|
18 | +7Udnd1PXgluElNcrXhssxLlQpEfnAAABkrFbTEAAAAQDAEcwRQIgYsUMG/Pmr2qQ |
|
19 | +/J2+PVPlnvAek4AZwnUFIiiAX0iNpccCIQCbaETD2PHFs+5iuUmQxywlkLHf58Kp |
|
20 | +Kqi+XN/0Tx9m0gB2AObSMWNAd4zBEEEG13G5zsHSQPaWhIb7uocyHf0eN45QAAAB |
|
21 | +krFbTEcAAAQDAEcwRQIgIAJQTpFtxI/fjCiA75WL9VlsYs6KNTiQz4ChFsVnXLAC |
|
22 | +IQCef0jGCaTmuOBIVQDS5zEC5VT8adxYMl3saGHnSVpzMzANBgkqhkiG9w0BAQsF |
|
23 | +AAOCAQEAuu8CBkKZ3XvFEdN51SBIe18C3E4zmDQBiJpM+UPuwOP2rAEMbIZhQdPm |
|
24 | +LtQxhV6S8KLrGp8HoCOs/o1q5R4+t78HOuRDZYqktTb10dLtw8wZ83sX+h9xf81B |
|
25 | +eHTaWbhgkeYmdro7sBfvBG13IBv9emfWGVlt3waC6KTEmWDwhN78+J+LIgzQ9Zcw |
|
26 | +d4wfZImez9a/VLWwJtQaDduMnVwE/5aPeWkTz5KlsVr8pp3N+VOQRjaKhh9vzm1K |
|
27 | +xcphGtvGgVVSb/2sX6mSFPKGxUCyZgU1bC0zpAZvUWXzJnQGga1SUmNI1dKaEPsm |
|
28 | +VFXoAcIud+pECUYZ2HB/QlGfx0xaEA== |
|
29 | +-----END CERTIFICATE----- |
docker/letsencrypt/archive/stubbornspace.com/chain1.pem
... | ... | @@ -0,0 +1,29 @@ |
1 | +-----BEGIN CERTIFICATE----- |
|
2 | +MIIFBTCCAu2gAwIBAgIQS6hSk/eaL6JzBkuoBI110DANBgkqhkiG9w0BAQsFADBP |
|
3 | +MQswCQYDVQQGEwJVUzEpMCcGA1UEChMgSW50ZXJuZXQgU2VjdXJpdHkgUmVzZWFy |
|
4 | +Y2ggR3JvdXAxFTATBgNVBAMTDElTUkcgUm9vdCBYMTAeFw0yNDAzMTMwMDAwMDBa |
|
5 | +Fw0yNzAzMTIyMzU5NTlaMDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBF |
|
6 | +bmNyeXB0MQwwCgYDVQQDEwNSMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK |
|
7 | +AoIBAQDPV+XmxFQS7bRH/sknWHZGUCiMHT6I3wWd1bUYKb3dtVq/+vbOo76vACFL |
|
8 | +YlpaPAEvxVgD9on/jhFD68G14BQHlo9vH9fnuoE5CXVlt8KvGFs3Jijno/QHK20a |
|
9 | +/6tYvJWuQP/py1fEtVt/eA0YYbwX51TGu0mRzW4Y0YCF7qZlNrx06rxQTOr8IfM4 |
|
10 | +FpOUurDTazgGzRYSespSdcitdrLCnF2YRVxvYXvGLe48E1KGAdlX5jgc3421H5KR |
|
11 | +mudKHMxFqHJV8LDmowfs/acbZp4/SItxhHFYyTr6717yW0QrPHTnj7JHwQdqzZq3 |
|
12 | +DZb3EoEmUVQK7GH29/Xi8orIlQ2NAgMBAAGjgfgwgfUwDgYDVR0PAQH/BAQDAgGG |
|
13 | +MB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATASBgNVHRMBAf8ECDAGAQH/ |
|
14 | +AgEAMB0GA1UdDgQWBBS7vMNHpeS8qcbDpHIMEI2iNeHI6DAfBgNVHSMEGDAWgBR5 |
|
15 | +tFnme7bl5AFzgAiIyBpY9umbbjAyBggrBgEFBQcBAQQmMCQwIgYIKwYBBQUHMAKG |
|
16 | +Fmh0dHA6Ly94MS5pLmxlbmNyLm9yZy8wEwYDVR0gBAwwCjAIBgZngQwBAgEwJwYD |
|
17 | +VR0fBCAwHjAcoBqgGIYWaHR0cDovL3gxLmMubGVuY3Iub3JnLzANBgkqhkiG9w0B |
|
18 | +AQsFAAOCAgEAkrHnQTfreZ2B5s3iJeE6IOmQRJWjgVzPw139vaBw1bGWKCIL0vIo |
|
19 | +zwzn1OZDjCQiHcFCktEJr59L9MhwTyAWsVrdAfYf+B9haxQnsHKNY67u4s5Lzzfd |
|
20 | +u6PUzeetUK29v+PsPmI2cJkxp+iN3epi4hKu9ZzUPSwMqtCceb7qPVxEbpYxY1p9 |
|
21 | +1n5PJKBLBX9eb9LU6l8zSxPWV7bK3lG4XaMJgnT9x3ies7msFtpKK5bDtotij/l0 |
|
22 | +GaKeA97pb5uwD9KgWvaFXMIEt8jVTjLEvwRdvCn294GPDF08U8lAkIv7tghluaQh |
|
23 | +1QnlE4SEN4LOECj8dsIGJXpGUk3aU3KkJz9icKy+aUgA+2cP21uh6NcDIS3XyfaZ |
|
24 | +QjmDQ993ChII8SXWupQZVBiIpcWO4RqZk3lr7Bz5MUCwzDIA359e57SSq5CCkY0N |
|
25 | +4B6Vulk7LktfwrdGNVI5BsC9qqxSwSKgRJeZ9wygIaehbHFHFhcBaMDKpiZlBHyz |
|
26 | +rsnnlFXCb5s8HKn5LsUgGvB24L7sGNZP2CX7dhHov+YhD+jozLW2p9W4959Bz2Ei |
|
27 | +RmqDtmiXLnzqTpXbI+suyCsohKRg6Un0RC47+cpiVwHiXZAW+cn8eiNIjqbVgXLx |
|
28 | +KPpdzvvtTnOPlC7SQZSYmdunr3Bf9b77AiC/ZidstK36dRILKz7OA54= |
|
29 | +-----END CERTIFICATE----- |
docker/letsencrypt/archive/stubbornspace.com/fullchain1.pem
... | ... | @@ -0,0 +1,58 @@ |
1 | +-----BEGIN CERTIFICATE----- |
|
2 | +MIIE8jCCA9qgAwIBAgISAw5gLlUoVZofXHlU3SzlLzS1MA0GCSqGSIb3DQEBCwUA |
|
3 | +MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD |
|
4 | +EwNSMTAwHhcNMjQxMDIxMjIxNDUzWhcNMjUwMTE5MjIxNDUyWjAcMRowGAYDVQQD |
|
5 | +ExFzdHViYm9ybnNwYWNlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC |
|
6 | +ggEBALWqu0ZqaGquecwe7DY/yJgd4NG5xAqqP7tQ+dJYVRbCUgElTU13QJEKGNrF |
|
7 | +vpaqBRT0ubtdJNvSyXgrYAHUqr7WAdI7zBYsJpuJrQpqKuEGmEg3s2wDmZh1buXa |
|
8 | +C1kxcqyb2B0hMV7CZVWg2/J7aBIIM+ggqCyZvv2Mlat9v9EnC0cPP9K+b9JcbVDN |
|
9 | +a6Z5q+Uy9YJRLkAhDVWkezjPk6qWQzFn2xhlXVtDUFwbs7wD9EwuCgfUbocArBrS |
|
10 | +UkWQliy1dwcXh1fnoBteEdFc9RLvtjG+AuIqSZspENmOGqDEIBI9MxnRbb76I9XB |
|
11 | +3+fnTMOr+8mu/YgdFHRRvyM3HHkCAwEAAaOCAhUwggIRMA4GA1UdDwEB/wQEAwIF |
|
12 | +oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAd |
|
13 | +BgNVHQ4EFgQUgkkHC3T3FQarXbBozx1/Tt7/ngswHwYDVR0jBBgwFoAUu7zDR6Xk |
|
14 | +vKnGw6RyDBCNojXhyOgwVwYIKwYBBQUHAQEESzBJMCIGCCsGAQUFBzABhhZodHRw |
|
15 | +Oi8vcjEwLm8ubGVuY3Iub3JnMCMGCCsGAQUFBzAChhdodHRwOi8vcjEwLmkubGVu |
|
16 | +Y3Iub3JnLzAcBgNVHREEFTATghFzdHViYm9ybnNwYWNlLmNvbTATBgNVHSAEDDAK |
|
17 | +MAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AKLjCuRF772tm344 |
|
18 | +7Udnd1PXgluElNcrXhssxLlQpEfnAAABkrFbTEAAAAQDAEcwRQIgYsUMG/Pmr2qQ |
|
19 | +/J2+PVPlnvAek4AZwnUFIiiAX0iNpccCIQCbaETD2PHFs+5iuUmQxywlkLHf58Kp |
|
20 | +Kqi+XN/0Tx9m0gB2AObSMWNAd4zBEEEG13G5zsHSQPaWhIb7uocyHf0eN45QAAAB |
|
21 | +krFbTEcAAAQDAEcwRQIgIAJQTpFtxI/fjCiA75WL9VlsYs6KNTiQz4ChFsVnXLAC |
|
22 | +IQCef0jGCaTmuOBIVQDS5zEC5VT8adxYMl3saGHnSVpzMzANBgkqhkiG9w0BAQsF |
|
23 | +AAOCAQEAuu8CBkKZ3XvFEdN51SBIe18C3E4zmDQBiJpM+UPuwOP2rAEMbIZhQdPm |
|
24 | +LtQxhV6S8KLrGp8HoCOs/o1q5R4+t78HOuRDZYqktTb10dLtw8wZ83sX+h9xf81B |
|
25 | +eHTaWbhgkeYmdro7sBfvBG13IBv9emfWGVlt3waC6KTEmWDwhN78+J+LIgzQ9Zcw |
|
26 | +d4wfZImez9a/VLWwJtQaDduMnVwE/5aPeWkTz5KlsVr8pp3N+VOQRjaKhh9vzm1K |
|
27 | +xcphGtvGgVVSb/2sX6mSFPKGxUCyZgU1bC0zpAZvUWXzJnQGga1SUmNI1dKaEPsm |
|
28 | +VFXoAcIud+pECUYZ2HB/QlGfx0xaEA== |
|
29 | +-----END CERTIFICATE----- |
|
30 | +-----BEGIN CERTIFICATE----- |
|
31 | +MIIFBTCCAu2gAwIBAgIQS6hSk/eaL6JzBkuoBI110DANBgkqhkiG9w0BAQsFADBP |
|
32 | +MQswCQYDVQQGEwJVUzEpMCcGA1UEChMgSW50ZXJuZXQgU2VjdXJpdHkgUmVzZWFy |
|
33 | +Y2ggR3JvdXAxFTATBgNVBAMTDElTUkcgUm9vdCBYMTAeFw0yNDAzMTMwMDAwMDBa |
|
34 | +Fw0yNzAzMTIyMzU5NTlaMDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBF |
|
35 | +bmNyeXB0MQwwCgYDVQQDEwNSMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK |
|
36 | +AoIBAQDPV+XmxFQS7bRH/sknWHZGUCiMHT6I3wWd1bUYKb3dtVq/+vbOo76vACFL |
|
37 | +YlpaPAEvxVgD9on/jhFD68G14BQHlo9vH9fnuoE5CXVlt8KvGFs3Jijno/QHK20a |
|
38 | +/6tYvJWuQP/py1fEtVt/eA0YYbwX51TGu0mRzW4Y0YCF7qZlNrx06rxQTOr8IfM4 |
|
39 | +FpOUurDTazgGzRYSespSdcitdrLCnF2YRVxvYXvGLe48E1KGAdlX5jgc3421H5KR |
|
40 | +mudKHMxFqHJV8LDmowfs/acbZp4/SItxhHFYyTr6717yW0QrPHTnj7JHwQdqzZq3 |
|
41 | +DZb3EoEmUVQK7GH29/Xi8orIlQ2NAgMBAAGjgfgwgfUwDgYDVR0PAQH/BAQDAgGG |
|
42 | +MB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATASBgNVHRMBAf8ECDAGAQH/ |
|
43 | +AgEAMB0GA1UdDgQWBBS7vMNHpeS8qcbDpHIMEI2iNeHI6DAfBgNVHSMEGDAWgBR5 |
|
44 | +tFnme7bl5AFzgAiIyBpY9umbbjAyBggrBgEFBQcBAQQmMCQwIgYIKwYBBQUHMAKG |
|
45 | +Fmh0dHA6Ly94MS5pLmxlbmNyLm9yZy8wEwYDVR0gBAwwCjAIBgZngQwBAgEwJwYD |
|
46 | +VR0fBCAwHjAcoBqgGIYWaHR0cDovL3gxLmMubGVuY3Iub3JnLzANBgkqhkiG9w0B |
|
47 | +AQsFAAOCAgEAkrHnQTfreZ2B5s3iJeE6IOmQRJWjgVzPw139vaBw1bGWKCIL0vIo |
|
48 | +zwzn1OZDjCQiHcFCktEJr59L9MhwTyAWsVrdAfYf+B9haxQnsHKNY67u4s5Lzzfd |
|
49 | +u6PUzeetUK29v+PsPmI2cJkxp+iN3epi4hKu9ZzUPSwMqtCceb7qPVxEbpYxY1p9 |
|
50 | +1n5PJKBLBX9eb9LU6l8zSxPWV7bK3lG4XaMJgnT9x3ies7msFtpKK5bDtotij/l0 |
|
51 | +GaKeA97pb5uwD9KgWvaFXMIEt8jVTjLEvwRdvCn294GPDF08U8lAkIv7tghluaQh |
|
52 | +1QnlE4SEN4LOECj8dsIGJXpGUk3aU3KkJz9icKy+aUgA+2cP21uh6NcDIS3XyfaZ |
|
53 | +QjmDQ993ChII8SXWupQZVBiIpcWO4RqZk3lr7Bz5MUCwzDIA359e57SSq5CCkY0N |
|
54 | +4B6Vulk7LktfwrdGNVI5BsC9qqxSwSKgRJeZ9wygIaehbHFHFhcBaMDKpiZlBHyz |
|
55 | +rsnnlFXCb5s8HKn5LsUgGvB24L7sGNZP2CX7dhHov+YhD+jozLW2p9W4959Bz2Ei |
|
56 | +RmqDtmiXLnzqTpXbI+suyCsohKRg6Un0RC47+cpiVwHiXZAW+cn8eiNIjqbVgXLx |
|
57 | +KPpdzvvtTnOPlC7SQZSYmdunr3Bf9b77AiC/ZidstK36dRILKz7OA54= |
|
58 | +-----END CERTIFICATE----- |
docker/letsencrypt/archive/stubbornspace.com/privkey1.pem
... | ... | @@ -0,0 +1,28 @@ |
1 | +-----BEGIN PRIVATE KEY----- |
|
2 | +MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQC1qrtGamhqrnnM |
|
3 | +Huw2P8iYHeDRucQKqj+7UPnSWFUWwlIBJU1Nd0CRChjaxb6WqgUU9Lm7XSTb0sl4 |
|
4 | +K2AB1Kq+1gHSO8wWLCabia0KairhBphIN7NsA5mYdW7l2gtZMXKsm9gdITFewmVV |
|
5 | +oNvye2gSCDPoIKgsmb79jJWrfb/RJwtHDz/Svm/SXG1QzWumeavlMvWCUS5AIQ1V |
|
6 | +pHs4z5OqlkMxZ9sYZV1bQ1BcG7O8A/RMLgoH1G6HAKwa0lJFkJYstXcHF4dX56Ab |
|
7 | +XhHRXPUS77YxvgLiKkmbKRDZjhqgxCASPTMZ0W2++iPVwd/n50zDq/vJrv2IHRR0 |
|
8 | +Ub8jNxx5AgMBAAECggEASC6marws8PaSfoBq6sM9OPPmOG7Pbk1nNU5fdSyT4o8j |
|
9 | +dkEUDgusI/UXGxYnPEYh7smuYrwHwTBnzM+vPgr6LQlrf9UyqjywumxhzRmSIAc2 |
|
10 | +yrsXF3v2s5U1ky6oA7CaF+t0W16s9zHWgceAnUBbgY6w0TLon5AXSzdo4NL+PGPT |
|
11 | +qh3egBF0leTHm/QEFKYuDeSknMTLeeL9n5kjUR03w4WMN4IBx9Hnd5t61NydyYoJ |
|
12 | +JruWh9YwYWlygYp/FQzcjeELrPD18SYlzrEEDJ9pEd4nBmEpylBYgaiuH/1xMfMD |
|
13 | +kewiWr1owvch2Mss5ie0X+IFFqNolBjyFoJjl1WT4QKBgQDecD7vplWenoiNw5H1 |
|
14 | +q9UoD4sL2OMqQpK1tIZqa+jfhA+NEZwmkZpEbYEFrjkuGDN0nV+rq5A19ePZbjlc |
|
15 | +cEGeJfZQTwYg34Py/CxukCa+5QPFhNs0fF61OWVJVV8Ux4+kaAFLwWtgb3d2+pTe |
|
16 | +nVE6YqhIyMcSkDLy5Bqnmeom2wKBgQDRE6whATtkM9Bv8VDaU+LbQFrkOKJklVy4 |
|
17 | +V1uKNgxyPGq3GNBBDY9pDnKY2itTAjGueJImpM/6C6Dp2JdhlfU3J2jHu1NbmJhN |
|
18 | +XAAkGo+8a1qCwlrmgiqPF76/fNWWkTNT5iq3YYYvSG7jH8lNQKGbs+zrx/WwYV3r |
|
19 | +TSmzepT4OwKBgQDc/hmZEOFpmMnERnQB5vj8Nw0G9TEj8EY/3p3Yp2MSherJVaCU |
|
20 | +tP3WVBDmauSGRicBCcVeEjJRWf1ILPkyPJkEnWSs/wXwrQAz7ZPbOL410+O+XjNG |
|
21 | +XvXdCKv3gqjXRTkRtv7qm7ypb7T58RTsYtGrtw7IWSlm6PqlVDijIQiAFwKBgQCW |
|
22 | +YIDgaENwabgUm8ucjNNRATOejIF4uNksmWB0wzUmgP/8W3OGJpusY0DXYavhk2Vq |
|
23 | +aLwt4ULZRL3jE+6luLbbiZPafIiTC+kXUwGi9hvF2K0L+YBp5Nt5egmvLrltB1iU |
|
24 | +kqrMpO9fWMiwwW8HCmJyW/IfD/5Nc2qa0DAbMCKvewKBgGlvcZKFKLFUXSRSojKO |
|
25 | +OepB9k9s2S6ivvBc6JfOUQ8Q2AxAKb6Cr/v2aNlXwh4qKyNAVx9+fP5CDQCFa2Jf |
|
26 | +VkbHDE2YoGk3RvvW1Kcy3rFhy87DOg1MwIyBDyL7II+epK7Utmuo583Hvo6+1RhN |
|
27 | +Etygrf7oOkTR9AUl7HP8qDpd |
|
28 | +-----END PRIVATE KEY----- |
docker/letsencrypt/csr/0000_csr-certbot.pem
... | ... | @@ -0,0 +1,16 @@ |
1 | +-----BEGIN CERTIFICATE REQUEST----- |
|
2 | +MIICdDCCAVwCAQIwADCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALWq |
|
3 | +u0ZqaGquecwe7DY/yJgd4NG5xAqqP7tQ+dJYVRbCUgElTU13QJEKGNrFvpaqBRT0 |
|
4 | +ubtdJNvSyXgrYAHUqr7WAdI7zBYsJpuJrQpqKuEGmEg3s2wDmZh1buXaC1kxcqyb |
|
5 | +2B0hMV7CZVWg2/J7aBIIM+ggqCyZvv2Mlat9v9EnC0cPP9K+b9JcbVDNa6Z5q+Uy |
|
6 | +9YJRLkAhDVWkezjPk6qWQzFn2xhlXVtDUFwbs7wD9EwuCgfUbocArBrSUkWQliy1 |
|
7 | +dwcXh1fnoBteEdFc9RLvtjG+AuIqSZspENmOGqDEIBI9MxnRbb76I9XB3+fnTMOr |
|
8 | ++8mu/YgdFHRRvyM3HHkCAwEAAaAvMC0GCSqGSIb3DQEJDjEgMB4wHAYDVR0RBBUw |
|
9 | +E4IRc3R1YmJvcm5zcGFjZS5jb20wDQYJKoZIhvcNAQELBQADggEBAJBgEzZ85euy |
|
10 | +ePHN4UqC8cuCGnUV5ifxcKIoRKIxLW5dUty/N7oXpOXhzXltPcPK9zjvrSu0Aubm |
|
11 | ++WNjzqcRbd1dqva4rsqUMi2d5J2UbowZkjPU2866hsue9nZQDyhvp2uF6eEgh7oD |
|
12 | +KCOSD5sFof+PibljPiQg3eujS/X4fu5lQiY37hV9KyTkvszXmR11qFjzaEHvjfy/ |
|
13 | +pTCvhyRXN+5QXwnwtsSEwhcFH+0JyVIIRpNGzzgEIhz49TNxE1AhyIF95+Qa+v6D |
|
14 | +GcObhFrzzGzJibKw+CA/DMBNvh3c+jbyUw7laDIlW3aG+/WpNm1hn94cW0JsfOuB |
|
15 | +7/t/le3zBzY= |
|
16 | +-----END CERTIFICATE REQUEST----- |
docker/letsencrypt/hello
docker/letsencrypt/keys/0000_key-certbot.pem
... | ... | @@ -0,0 +1,28 @@ |
1 | +-----BEGIN PRIVATE KEY----- |
|
2 | +MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQC1qrtGamhqrnnM |
|
3 | +Huw2P8iYHeDRucQKqj+7UPnSWFUWwlIBJU1Nd0CRChjaxb6WqgUU9Lm7XSTb0sl4 |
|
4 | +K2AB1Kq+1gHSO8wWLCabia0KairhBphIN7NsA5mYdW7l2gtZMXKsm9gdITFewmVV |
|
5 | +oNvye2gSCDPoIKgsmb79jJWrfb/RJwtHDz/Svm/SXG1QzWumeavlMvWCUS5AIQ1V |
|
6 | +pHs4z5OqlkMxZ9sYZV1bQ1BcG7O8A/RMLgoH1G6HAKwa0lJFkJYstXcHF4dX56Ab |
|
7 | +XhHRXPUS77YxvgLiKkmbKRDZjhqgxCASPTMZ0W2++iPVwd/n50zDq/vJrv2IHRR0 |
|
8 | +Ub8jNxx5AgMBAAECggEASC6marws8PaSfoBq6sM9OPPmOG7Pbk1nNU5fdSyT4o8j |
|
9 | +dkEUDgusI/UXGxYnPEYh7smuYrwHwTBnzM+vPgr6LQlrf9UyqjywumxhzRmSIAc2 |
|
10 | +yrsXF3v2s5U1ky6oA7CaF+t0W16s9zHWgceAnUBbgY6w0TLon5AXSzdo4NL+PGPT |
|
11 | +qh3egBF0leTHm/QEFKYuDeSknMTLeeL9n5kjUR03w4WMN4IBx9Hnd5t61NydyYoJ |
|
12 | +JruWh9YwYWlygYp/FQzcjeELrPD18SYlzrEEDJ9pEd4nBmEpylBYgaiuH/1xMfMD |
|
13 | +kewiWr1owvch2Mss5ie0X+IFFqNolBjyFoJjl1WT4QKBgQDecD7vplWenoiNw5H1 |
|
14 | +q9UoD4sL2OMqQpK1tIZqa+jfhA+NEZwmkZpEbYEFrjkuGDN0nV+rq5A19ePZbjlc |
|
15 | +cEGeJfZQTwYg34Py/CxukCa+5QPFhNs0fF61OWVJVV8Ux4+kaAFLwWtgb3d2+pTe |
|
16 | +nVE6YqhIyMcSkDLy5Bqnmeom2wKBgQDRE6whATtkM9Bv8VDaU+LbQFrkOKJklVy4 |
|
17 | +V1uKNgxyPGq3GNBBDY9pDnKY2itTAjGueJImpM/6C6Dp2JdhlfU3J2jHu1NbmJhN |
|
18 | +XAAkGo+8a1qCwlrmgiqPF76/fNWWkTNT5iq3YYYvSG7jH8lNQKGbs+zrx/WwYV3r |
|
19 | +TSmzepT4OwKBgQDc/hmZEOFpmMnERnQB5vj8Nw0G9TEj8EY/3p3Yp2MSherJVaCU |
|
20 | +tP3WVBDmauSGRicBCcVeEjJRWf1ILPkyPJkEnWSs/wXwrQAz7ZPbOL410+O+XjNG |
|
21 | +XvXdCKv3gqjXRTkRtv7qm7ypb7T58RTsYtGrtw7IWSlm6PqlVDijIQiAFwKBgQCW |
|
22 | +YIDgaENwabgUm8ucjNNRATOejIF4uNksmWB0wzUmgP/8W3OGJpusY0DXYavhk2Vq |
|
23 | +aLwt4ULZRL3jE+6luLbbiZPafIiTC+kXUwGi9hvF2K0L+YBp5Nt5egmvLrltB1iU |
|
24 | +kqrMpO9fWMiwwW8HCmJyW/IfD/5Nc2qa0DAbMCKvewKBgGlvcZKFKLFUXSRSojKO |
|
25 | +OepB9k9s2S6ivvBc6JfOUQ8Q2AxAKb6Cr/v2aNlXwh4qKyNAVx9+fP5CDQCFa2Jf |
|
26 | +VkbHDE2YoGk3RvvW1Kcy3rFhy87DOg1MwIyBDyL7II+epK7Utmuo583Hvo6+1RhN |
|
27 | +Etygrf7oOkTR9AUl7HP8qDpd |
|
28 | +-----END PRIVATE KEY----- |
docker/letsencrypt/live/README
... | ... | @@ -0,0 +1,14 @@ |
1 | +This directory contains your keys and certificates. |
|
2 | + |
|
3 | +`[cert name]/privkey.pem` : the private key for your certificate. |
|
4 | +`[cert name]/fullchain.pem`: the certificate file used in most server software. |
|
5 | +`[cert name]/chain.pem` : used for OCSP stapling in Nginx >=1.3.7. |
|
6 | +`[cert name]/cert.pem` : will break many server configurations, and should not be used |
|
7 | + without reading further documentation (see link below). |
|
8 | + |
|
9 | +WARNING: DO NOT MOVE OR RENAME THESE FILES! |
|
10 | + Certbot expects these files to remain in this location in order |
|
11 | + to function properly! |
|
12 | + |
|
13 | +We recommend not moving these files. For more information, see the Certbot |
|
14 | +User Guide at https://certbot.eff.org/docs/using.html#where-are-my-certificates. |
docker/letsencrypt/live/stubbornspace.com/README
... | ... | @@ -0,0 +1,14 @@ |
1 | +This directory contains your keys and certificates. |
|
2 | + |
|
3 | +`privkey.pem` : the private key for your certificate. |
|
4 | +`fullchain.pem`: the certificate file used in most server software. |
|
5 | +`chain.pem` : used for OCSP stapling in Nginx >=1.3.7. |
|
6 | +`cert.pem` : will break many server configurations, and should not be used |
|
7 | + without reading further documentation (see link below). |
|
8 | + |
|
9 | +WARNING: DO NOT MOVE OR RENAME THESE FILES! |
|
10 | + Certbot expects these files to remain in this location in order |
|
11 | + to function properly! |
|
12 | + |
|
13 | +We recommend not moving these files. For more information, see the Certbot |
|
14 | +User Guide at https://certbot.eff.org/docs/using.html#where-are-my-certificates. |
docker/letsencrypt/live/stubbornspace.com/cert.pem
... | ... | @@ -0,0 +1 @@ |
1 | +../../archive/stubbornspace.com/cert1.pem |
|
... | ... | \ No newline at end of file |
docker/letsencrypt/live/stubbornspace.com/chain.pem
... | ... | @@ -0,0 +1 @@ |
1 | +../../archive/stubbornspace.com/chain1.pem |
|
... | ... | \ No newline at end of file |
docker/letsencrypt/live/stubbornspace.com/fullchain.pem
... | ... | @@ -0,0 +1 @@ |
1 | +../../archive/stubbornspace.com/fullchain1.pem |
|
... | ... | \ No newline at end of file |
docker/letsencrypt/live/stubbornspace.com/privkey.pem
... | ... | @@ -0,0 +1 @@ |
1 | +../../archive/stubbornspace.com/privkey1.pem |
|
... | ... | \ No newline at end of file |
docker/letsencrypt/options-ssl-nginx.conf
... | ... | @@ -0,0 +1,14 @@ |
1 | +# This file contains important security parameters. If you modify this file |
|
2 | +# manually, Certbot will be unable to automatically provide future security |
|
3 | +# updates. Instead, Certbot will print and log an error message with a path to |
|
4 | +# the up-to-date file that you will need to refer to when manually updating |
|
5 | +# this file. |
|
6 | + |
|
7 | +ssl_session_cache shared:le_nginx_SSL:10m; |
|
8 | +ssl_session_timeout 1440m; |
|
9 | +ssl_session_tickets off; |
|
10 | + |
|
11 | +ssl_protocols TLSv1.2 TLSv1.3; |
|
12 | +ssl_prefer_server_ciphers off; |
|
13 | + |
|
14 | +ssl_ciphers "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384"; |
docker/letsencrypt/renewal/stubbornspace.com.conf
... | ... | @@ -0,0 +1,14 @@ |
1 | +# renew_before_expiry = 30 days |
|
2 | +version = 1.16.0 |
|
3 | +archive_dir = /etc/letsencrypt/archive/stubbornspace.com |
|
4 | +cert = /etc/letsencrypt/live/stubbornspace.com/cert.pem |
|
5 | +privkey = /etc/letsencrypt/live/stubbornspace.com/privkey.pem |
|
6 | +chain = /etc/letsencrypt/live/stubbornspace.com/chain.pem |
|
7 | +fullchain = /etc/letsencrypt/live/stubbornspace.com/fullchain.pem |
|
8 | + |
|
9 | +# Options used in the renewal process |
|
10 | +[renewalparams] |
|
11 | +account = 39160807fad0180a7c993422afac40f4 |
|
12 | +authenticator = nginx |
|
13 | +installer = nginx |
|
14 | +server = https://acme-v02.api.letsencrypt.org/directory |
docker/letsencrypt/ssl-dhparams.pem
... | ... | @@ -0,0 +1,8 @@ |
1 | +-----BEGIN DH PARAMETERS----- |
|
2 | +MIIBCAKCAQEA//////////+t+FRYortKmq/cViAnPTzx2LnFg84tNpWp4TZBFGQz |
|
3 | ++8yTnc4kmz75fS/jY2MMddj2gbICrsRhetPfHtXV/WVhJDP1H18GbtCFY2VVPe0a |
|
4 | +87VXE15/V8k1mE8McODmi3fipona8+/och3xWKE2rec1MKzKT0g6eXq8CrGCsyT7 |
|
5 | +YdEIqUuyyOP7uWrat2DX9GgdT0Kj3jlN9K5W7edjcrsZCwenyO4KbXCeAvzhzffi |
|
6 | +7MA0BM0oNC9hkXL+nOmFg/+OTxIy7vKBg8P+OxtMb61zO7X8vC7CIAXFjvGDfRaD |
|
7 | +ssbzSibBsu/6iGtCOGEoXJf//////////wIBAg== |
|
8 | +-----END DH PARAMETERS----- |
docker/nginx.conf
... | ... | @@ -0,0 +1,27 @@ |
1 | + server { |
|
2 | + listen 80; |
|
3 | + listen [::]:80; |
|
4 | + server_name stubbornspace.com; |
|
5 | + |
|
6 | + location / { |
|
7 | + root /usr/share/nginx/html; |
|
8 | + index index.html index.htm; |
|
9 | + } |
|
10 | + |
|
11 | + #location / { |
|
12 | + # proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; |
|
13 | + # proxy_set_header X-Forwarded-Proto $scheme; |
|
14 | + # proxy_set_header X-Real-IP $remote_addr; |
|
15 | + # proxy_set_header Host $http_host; |
|
16 | + # proxy_pass http://gollum:4567; |
|
17 | + |
|
18 | + #auth_basic "No no no, you forgot the majic word"; |
|
19 | + #auth_basic_user_file /etc/nginx/.htpasswd; |
|
20 | + #} |
|
21 | + #client_max_body_size 10m; |
|
22 | + |
|
23 | + error_page 500 502 503 504 /50x.html; |
|
24 | + location = /50x.html { |
|
25 | + root /usr/share/nginx/html; |
|
26 | + } |
|
27 | + } |
|
... | ... | \ No newline at end of file |
docker/pass-default.conf
... | ... | @@ -0,0 +1,34 @@ |
1 | +server { |
|
2 | + server_name stubbornspace.com; |
|
3 | + |
|
4 | + location / { |
|
5 | + root /usr/share/nginx/html; |
|
6 | + index index.html index.htm; |
|
7 | + |
|
8 | + auth_basic "No no no, you forgot the majic word"; |
|
9 | + auth_basic_user_file /etc/nginx/.htpasswd; |
|
10 | + } |
|
11 | + |
|
12 | + error_page 500 502 503 504 /50x.html; |
|
13 | + location = /50x.html { |
|
14 | + root /usr/share/nginx/html; |
|
15 | + } |
|
16 | + |
|
17 | + listen 443 ssl; # managed by Certbot |
|
18 | + ssl_certificate /etc/letsencrypt/live/stubbornspace.com/fullchain.pem; # managed by Certbot |
|
19 | + ssl_certificate_key /etc/letsencrypt/live/stubbornspace.com/privkey.pem; # managed by Certbot |
|
20 | + include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot |
|
21 | + ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot |
|
22 | + |
|
23 | +}server { |
|
24 | + if ($host = stubbornspace.com) { |
|
25 | + return 301 https://$host$request_uri; |
|
26 | + } # managed by Certbot |
|
27 | + |
|
28 | + |
|
29 | + listen 80; |
|
30 | + server_name stubbornspace.com; |
|
31 | + return 404; # managed by Certbot |
|
32 | + |
|
33 | + |
|
34 | +} |
|
... | ... | \ No newline at end of file |
docker/proxy-default.conf
... | ... | @@ -0,0 +1,36 @@ |
1 | +server { |
|
2 | + server_name stubbornspace.com; |
|
3 | + |
|
4 | + location / { |
|
5 | + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; |
|
6 | + proxy_set_header X-Forwarded-Proto $scheme; |
|
7 | + proxy_set_header X-Real-IP $remote_addr; |
|
8 | + proxy_set_header Host $http_host; |
|
9 | + proxy_pass http://gollum:4567; |
|
10 | + |
|
11 | + } |
|
12 | + client_max_body_size 10m; |
|
13 | + |
|
14 | + error_page 500 502 503 504 /50x.html; |
|
15 | + location = /50x.html { |
|
16 | + root /usr/share/nginx/html; |
|
17 | + } |
|
18 | + |
|
19 | + listen 443 ssl; # managed by Certbot |
|
20 | + ssl_certificate /etc/letsencrypt/live/stubbornspace.com/fullchain.pem; # managed by Certbot |
|
21 | + ssl_certificate_key /etc/letsencrypt/live/stubbornspace.com/privkey.pem; # managed by Certbot |
|
22 | + include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot |
|
23 | + ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot |
|
24 | + |
|
25 | +}server { |
|
26 | + if ($host = stubbornspace.com) { |
|
27 | + return 301 https://$host$request_uri; |
|
28 | + } # managed by Certbot |
|
29 | + |
|
30 | + |
|
31 | + listen 80; |
|
32 | + server_name stubbornspace.com; |
|
33 | + return 404; # managed by Certbot |
|
34 | + |
|
35 | + |
|
36 | +} |
|
... | ... | \ No newline at end of file |
docker/ssl-default.conf
... | ... | @@ -0,0 +1,31 @@ |
1 | +server { |
|
2 | + server_name stubbornspace.com; |
|
3 | + |
|
4 | + location / { |
|
5 | + root /usr/share/nginx/html; |
|
6 | + index index.html index.htm; |
|
7 | + } |
|
8 | + |
|
9 | + error_page 500 502 503 504 /50x.html; |
|
10 | + location = /50x.html { |
|
11 | + root /usr/share/nginx/html; |
|
12 | + } |
|
13 | + |
|
14 | + listen 443 ssl; # managed by Certbot |
|
15 | + ssl_certificate /etc/letsencrypt/live/stubbornspace.com/fullchain.pem; # managed by Certbot |
|
16 | + ssl_certificate_key /etc/letsencrypt/live/stubbornspace.com/privkey.pem; # managed by Certbot |
|
17 | + include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot |
|
18 | + ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot |
|
19 | + |
|
20 | +}server { |
|
21 | + if ($host = stubbornspace.com) { |
|
22 | + return 301 https://$host$request_uri; |
|
23 | + } # managed by Certbot |
|
24 | + |
|
25 | + |
|
26 | + listen 80; |
|
27 | + server_name stubbornspace.com; |
|
28 | + return 404; # managed by Certbot |
|
29 | + |
|
30 | + |
|
31 | +} |
|
... | ... | \ No newline at end of file |
nginx.conf
... | ... | @@ -1,28 +0,0 @@ |
1 | -server { |
|
2 | - listen 80; |
|
3 | - listen [::]:80; |
|
4 | - server_name stubbornspace.com; |
|
5 | - |
|
6 | - #location / { |
|
7 | - # root /usr/share/nginx/html; |
|
8 | - # index index.html index.htm; |
|
9 | - #} |
|
10 | - |
|
11 | - location / { |
|
12 | - proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; |
|
13 | - proxy_set_header X-Forwarded-Proto $scheme; |
|
14 | - proxy_set_header X-Real-IP $remote_addr; |
|
15 | - proxy_set_header Host $http_host; |
|
16 | - proxy_pass http://127.0.0.1:4567; |
|
17 | - |
|
18 | - auth_basic "No no no, you forgot the majic word"; |
|
19 | - auth_basic_user_file /etc/nginx/.htpasswd; |
|
20 | - } |
|
21 | - client_max_body_size 10m; |
|
22 | - |
|
23 | - error_page 500 502 503 504 /50x.html; |
|
24 | - location = /50x.html { |
|
25 | - root /usr/share/nginx/html; |
|
26 | - } |
|
27 | -} |
|
28 | - |