diff --git a/configs/prod.conf b/configs/prod.conf index 75083de..46d8fc3 100644 --- a/configs/prod.conf +++ b/configs/prod.conf @@ -113,6 +113,52 @@ server { } } +server { + listen 443 ssl; + server_name board.nhcarrigan.com; + ssl_certificate /etc/letsencrypt/live/board.nhcarrigan.com/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/board.nhcarrigan.com/privkey.pem; + + location ~ /ws/* { + proxy_pass http://127.0.0.1:8111; + proxy_set_header Upgrade $http_upgrade; + proxy_set_header Connection "upgrade"; + client_max_body_size 50M; + proxy_set_header Host $http_host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + proxy_set_header X-Frame-Options SAMEORIGIN; + proxy_buffers 256 16k; + proxy_buffer_size 16k; + client_body_timeout 60; + send_timeout 300; + lingering_timeout 5; + proxy_connect_timeout 1d; + proxy_send_timeout 1d; + proxy_read_timeout 1d; + } + + location / { + proxy_pass http://127.0.0.1:8111; + client_max_body_size 50M; + proxy_set_header Connection ""; + proxy_set_header Host $http_host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + proxy_set_header X-Frame-Options SAMEORIGIN; + proxy_buffers 256 16k; + proxy_buffer_size 16k; + proxy_read_timeout 600s; + proxy_cache_revalidate on; + proxy_cache_min_uses 2; + proxy_cache_use_stale timeout; + proxy_cache_lock on; + proxy_http_version 1.1; + } +} + server { listen 443 ssl; server_name books.nhcarrigan.com; @@ -150,19 +196,6 @@ server { return 301 https://docs.nhcarrigan.com/about/contact/; } -server { - listen 443 ssl; - server_name deepgram.nhcarrigan.com; - ssl_certificate /etc/letsencrypt/live/deepgram.nhcarrigan.com/fullchain.pem; - ssl_certificate_key /etc/letsencrypt/live/deepgram.nhcarrigan.com/privkey.pem; - - root /home/nhcarrigan/status/deepgram/dist; - - location / { - index index.html; - } -} - server { listen 443 ssl; server_name docs.nhcarrigan.com; @@ -185,19 +218,6 @@ server { return 301 https://docs.nhcarrigan.com/about/donate/; } -server { - listen 443 ssl; - server_name fcc.nhcarrigan.com; - ssl_certificate /etc/letsencrypt/live/fcc.nhcarrigan.com/fullchain.pem; - ssl_certificate_key /etc/letsencrypt/live/fcc.nhcarrigan.com/privkey.pem; - - root /home/nhcarrigan/status/fcc/dist; - - location / { - index index.html; - } -} - server { listen 443 ssl; server_name forms.nhcarrigan.com; @@ -293,19 +313,6 @@ server { } } -server { - listen 443 ssl; - server_name irc-private.nhcarrigan.com; - ssl_certificate /etc/letsencrypt/live/irc-private.nhcarrigan.com/fullchain.pem; - ssl_certificate_key /etc/letsencrypt/live/irc-private.nhcarrigan.com/privkey.pem; - - location / { - proxy_set_header Host $host; - proxy_pass http://127.0.0.1:9000; - proxy_redirect off; - } -} - server { listen 443 ssl; server_name loan.nhcarrigan.com; @@ -345,19 +352,6 @@ server { } } -server { - listen 443 ssl; - server_name moderation.nhcarrigan.com; - ssl_certificate /etc/letsencrypt/live/moderation.nhcarrigan.com/fullchain.pem; - ssl_certificate_key /etc/letsencrypt/live/moderation.nhcarrigan.com/privkey.pem; - - location / { - proxy_set_header Host $host; - proxy_pass http://127.0.0.1:12443; - proxy_redirect off; - } -} - server { listen 443 ssl; server_name mommy.nhcarrigan.com; @@ -502,24 +496,73 @@ server { server { listen 443 ssl; - server_name nhcarrigan.link; - ssl_certificate /etc/letsencrypt/live/nhcarrigan.link/fullchain.pem; - ssl_certificate_key /etc/letsencrypt/live/nhcarrigan.link/privkey.pem; + server_name vitalia.nhcarrigan.com; + ssl_certificate /etc/letsencrypt/live/vitalia.nhcarrigan.com/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/vitalia.nhcarrigan.com/privkey.pem; - root /home/nhcarrigan/link-redirector; + root /home/nhcarrigan/vitalia/client/dist/client/browser; location / { index index.html; + try_files $uri $uri/ /index.html; + } + + location ~* \.(js|css)$ { + try_files $uri $uri/ @rewrite; } } server { listen 443 ssl; - server_name notes.nhcarrigan.com; - ssl_certificate /etc/letsencrypt/live/notes.nhcarrigan.com/fullchain.pem; - ssl_certificate_key /etc/letsencrypt/live/notes.nhcarrigan.com/privkey.pem; + server_name vitalia-api.nhcarrigan.com; + ssl_certificate /etc/letsencrypt/live/vitalia.nhcarrigan.com/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/vitalia.nhcarrigan.com/privkey.pem; - root /home/nhcarrigan/notes/dist; + location / { + proxy_set_header Host $host; + proxy_pass http://127.0.0.1:12345; + proxy_redirect off; + } +} + +server { + listen 443 ssl; + server_name lucinda.nhcarrigan.com; + ssl_certificate /etc/letsencrypt/live/lucinda.nhcarrigan.com/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/lucinda.nhcarrigan.com/privkey.pem; + + root /home/nhcarrigan/lucinda/client/dist/client/browser; + + location / { + index index.html; + try_files $uri $uri/ /index.html; + } + + location ~* \.(js|css)$ { + try_files $uri $uri/ @rewrite; + } +} + +server { + listen 443 ssl; + server_name lucinda-api.nhcarrigan.com; + ssl_certificate /etc/letsencrypt/live/lucinda.nhcarrigan.com/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/lucinda.nhcarrigan.com/privkey.pem; + + location / { + proxy_set_header Host $host; + proxy_pass http://127.0.0.1:12346; + proxy_redirect off; + } +} + +server { + listen 443 ssl; + server_name nhcarrigan.link; + ssl_certificate /etc/letsencrypt/live/nhcarrigan.link/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/nhcarrigan.link/privkey.pem; + + root /home/nhcarrigan/link-redirector; location / { index index.html; @@ -559,10 +602,16 @@ server { ssl_certificate /etc/letsencrypt/live/resume.nhcarrigan.com/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/resume.nhcarrigan.com/privkey.pem; - root /home/nhcarrigan/resume; + root /home/nhcarrigan/resume/site; + + location /resume.yaml { + default_type text/plain; + add_header Content-Type "text/plain; charset=utf-8"; + } location / { index index.html; + try_files $uri $uri/ /index.html; } } @@ -629,19 +678,6 @@ server { } } -server { - listen 443 ssl; - server_name tickets.nhcarrigan.com; - ssl_certificate /etc/letsencrypt/live/tickets.nhcarrigan.com/fullchain.pem; - ssl_certificate_key /etc/letsencrypt/live/tickets.nhcarrigan.com/privkey.pem; - - location / { - proxy_set_header Host $host; - proxy_pass http://127.0.0.1:14443; - } -} - - server { listen 443 ssl; server_name trans.nhcarrigan.com;