From de8ee15a0ce5a7f44a0dea11860ac989f551ffe4 Mon Sep 17 00:00:00 2001 From: Jack Jamison Date: Fri, 3 Jul 2026 00:47:27 -0400 Subject: ssl, default server --- nginx/homepage.conf | 27 +++++++++++++++------------ 1 file changed, 15 insertions(+), 12 deletions(-) (limited to 'nginx') diff --git a/nginx/homepage.conf b/nginx/homepage.conf index 2f82f7e..2a44ecb 100644 --- a/nginx/homepage.conf +++ b/nginx/homepage.conf @@ -17,13 +17,12 @@ server { index index.html; } - listen [::]:443 ssl ipv6only=on; # managed by Certbot - listen 443 ssl; # managed by Certbot - ssl_certificate /etc/letsencrypt/live/jackjamison.net/fullchain.pem; # managed by Certbot - ssl_certificate_key /etc/letsencrypt/live/jackjamison.net/privkey.pem; # managed by Certbot - include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot - ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot - + listen [::]:443 ssl; + listen 443 ssl; + ssl_certificate /etc/letsencrypt/live/jackjamison.net/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/jackjamison.net/privkey.pem; + include /etc/letsencrypt/options-ssl-nginx.conf; + ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; } # git server @@ -51,15 +50,19 @@ server { fastcgi_pass unix:/run/fcgiwrap.socket; } - listen [::]:80; - listen 80; + listen [::]:443 ssl; + listen 443 ssl; + ssl_certificate /etc/letsencrypt/live/git.jackjamison.net/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/git.jackjamison.net/privkey.pem; + include /etc/letsencrypt/options-ssl-nginx.conf; + ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; } # http redirect server { - listen [::]:80; - listen 80; + listen [::]:80 default_server; + listen 80 default_server; server_name _; return 301 https://$host$request_uri; -} +} \ No newline at end of file -- cgit v1.2.3