fureunoir/schon
fureunoir/schon
1
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Features: 1) None;

Browse source 
Fixes: 1) None;

Extra: 1) Reformatted `nginx.conf` for improved readability by aligning indentation and spacing across all directives and blocks;
This commit is contained in:
Egor Pavlovich Gorbunov 2025-11-10 13:07:24 +03:00
parent 10434d8e2b
commit 9f867f775f
1 changed files with 107 additions and 96 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
nginx.conf
View file

@ -13,15 +13,18 @@ upstream storefront_frontend {
server { server {
listen 443 ssl http2; listen 443 ssl http2;
server_name api.evibes.com; server_name api.evibes.com;
ssl_certificate /etc/letsencrypt/live/evibes.com/fullchain.pem; ssl_certificate /etc/letsencrypt/live/evibes.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/evibes.com/privkey.pem; ssl_certificate_key /etc/letsencrypt/live/evibes.com/privkey.pem;
include /etc/letsencrypt/options-ssl-nginx.conf; include /etc/letsencrypt/options-ssl-nginx.conf;
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
ssl_session_cache shared:SSL:10m; ssl_session_cache shared:SSL:10m;
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always; add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
add_header X-Frame-Options SAMEORIGIN always; add_header X-Frame-Options SAMEORIGIN always;
add_header X-Content-Type-Options nosniff always; add_header X-Content-Type-Options nosniff always;
add_header Referrer-Policy no-referrer-when-downgrade always; add_header Referrer-Policy no-referrer-when-downgrade always;
client_max_body_size 100M; client_max_body_size 100M;
location / { location / {
@ -59,6 +62,7 @@ server {
} }
error_page 500 502 503 504 /maintenance.html; error_page 500 502 503 504 /maintenance.html;
location = /maintenance.html { location = /maintenance.html {
add_header Access-Control-Allow-Origin "*"; add_header Access-Control-Allow-Origin "*";
root /var/jenkins/workspace/evibes/static; root /var/jenkins/workspace/evibes/static;
@ -69,11 +73,13 @@ server {
server { server {
listen 443 ssl http2; listen 443 ssl http2;
server_name evibes.com www.evibes.com; server_name evibes.com www.evibes.com;
ssl_certificate /etc/letsencrypt/live/evibes.com/fullchain.pem; ssl_certificate /etc/letsencrypt/live/evibes.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/evibes.com/privkey.pem; ssl_certificate_key /etc/letsencrypt/live/evibes.com/privkey.pem;
include /etc/letsencrypt/options-ssl-nginx.conf; include /etc/letsencrypt/options-ssl-nginx.conf;
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
ssl_session_cache shared:SSL:10m; ssl_session_cache shared:SSL:10m;
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always; add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
add_header X-Frame-Options SAMEORIGIN always; add_header X-Frame-Options SAMEORIGIN always;
add_header X-Content-Type-Options nosniff always; add_header X-Content-Type-Options nosniff always;
@ -112,6 +118,7 @@ server {
} }
error_page 503 404 500 502 504 /maintenance.html; error_page 503 404 500 502 504 /maintenance.html;
location = /maintenance.html { location = /maintenance.html {
add_header Access-Control-Allow-Origin "*"; add_header Access-Control-Allow-Origin "*";
root /var/jenkins/workspace/evibes/static; root /var/jenkins/workspace/evibes/static;
@ -122,15 +129,18 @@ server {
server { server {
listen 443 ssl http2; listen 443 ssl http2;
server_name prometheus.evibes.com; server_name prometheus.evibes.com;
ssl_certificate /etc/letsencrypt/live/evibes.com/fullchain.pem; ssl_certificate /etc/letsencrypt/live/evibes.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/evibes.com/privkey.pem; ssl_certificate_key /etc/letsencrypt/live/evibes.com/privkey.pem;
include /etc/letsencrypt/options-ssl-nginx.conf; include /etc/letsencrypt/options-ssl-nginx.conf;
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
ssl_session_cache shared:SSL:10m; ssl_session_cache shared:SSL:10m;
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always; add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
add_header X-Frame-Options SAMEORIGIN always; add_header X-Frame-Options SAMEORIGIN always;
add_header X-Content-Type-Options nosniff always; add_header X-Content-Type-Options nosniff always;
add_header Referrer-Policy no-referrer-when-downgrade always; add_header Referrer-Policy no-referrer-when-downgrade always;
client_max_body_size 100M; client_max_body_size 100M;
location / { location / {
@ -153,6 +163,7 @@ server {
} }
error_page 500 502 503 504 /maintenance.html; error_page 500 502 503 504 /maintenance.html;
location = /maintenance.html { location = /maintenance.html {
add_header Access-Control-Allow-Origin "*"; add_header Access-Control-Allow-Origin "*";
root /var/jenkins/workspace/evibes/static; root /var/jenkins/workspace/evibes/static;