Commit Graph

14 Commits

Author SHA1 Message Date
naomi 13dc41c639 chore: sync the changes that I made live in prod
Test nginx configuration / Static Analysis (push) Failing after 5s
Test nginx configuration / nginx Syntax Check (push) Successful in 20s
Security Scan and Upload / Security & DefectDojo Upload (push) Successful in 1m36s
2026-04-17 16:26:10 -07:00
hikari c8c5b7529c feat: redirect nhcarrigan.com/testimonials to testimonials.nhcarrigan.com
Test nginx configuration / Static Analysis (push) Successful in 5s
Test nginx configuration / nginx Syntax Check (push) Successful in 17s
Security Scan and Upload / Security & DefectDojo Upload (push) Failing after 43s
2026-04-02 20:31:45 -07:00
hikari 823d42ad2e fix: remove dotfile restriction from notes.nhcarrigan.com
Test nginx configuration / Static Analysis (push) Successful in 4s
Test nginx configuration / nginx Syntax Check (push) Successful in 16s
Security Scan and Upload / Security & DefectDojo Upload (push) Successful in 2m33s
2026-03-23 12:57:11 -07:00
hikari 44502b5c52 fix: allow SilverBullet .client assets on notes.nhcarrigan.com
Test nginx configuration / Static Analysis (push) Successful in 6s
Test nginx configuration / nginx Syntax Check (push) Successful in 23s
Security Scan and Upload / Security & DefectDojo Upload (push) Successful in 1m11s
2026-03-23 12:54:09 -07:00
hikari 89aef0bf1a feat: enable catch-all site
Test nginx configuration / Static Analysis (push) Successful in 4s
Test nginx configuration / nginx Syntax Check (push) Successful in 17s
Security Scan and Upload / Security & DefectDojo Upload (push) Successful in 2m7s
2026-03-18 12:12:31 -07:00
hikari 3608837aae feat: enable tarot site
Test nginx configuration / Static Analysis (push) Failing after 4s
Test nginx configuration / nginx Syntax Check (push) Successful in 18s
Security Scan and Upload / Security & DefectDojo Upload (push) Has been cancelled
2026-03-18 12:12:00 -07:00
hikari fc252e28e2 feat: block dotfile requests across all sites
Test nginx configuration / Static Analysis (push) Failing after 4s
Test nginx configuration / nginx Syntax Check (push) Successful in 20s
Security Scan and Upload / Security & DefectDojo Upload (push) Successful in 1m8s
Adds a deny-dotfiles snippet that returns 403 for any URI matching /\.
(e.g. .gitconfig, .env, .git/) and includes it in every server block.
2026-03-18 11:31:02 -07:00
hikari 1d24a85e07 feat: add nginx config for tarot static site
Test nginx configuration / Static Analysis (push) Failing after 5s
Test nginx configuration / nginx Syntax Check (push) Successful in 18s
Security Scan and Upload / Security & DefectDojo Upload (push) Successful in 1m23s
Serves only index.html and cards/*.json — all other paths return 403.
2026-03-18 11:28:11 -07:00
hikari 7e1929f308 feat: complete blackwood nginx config with SPA routing and caching
Test nginx configuration / Static Analysis (push) Failing after 4s
Test nginx configuration / nginx Syntax Check (push) Successful in 16s
Security Scan and Upload / Security & DefectDojo Upload (push) Successful in 2m37s
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-11 19:27:05 -07:00
hikari 4270f43d22 feat: add global 404 error page redirect to 404.nhcarrigan.com
Test nginx configuration / Static Analysis (push) Failing after 5s
Test nginx configuration / nginx Syntax Check (push) Successful in 17s
Security Scan and Upload / Security & DefectDojo Upload (push) Successful in 1m18s
2026-03-10 12:49:52 -07:00
hikari 2b8748fddb feat: add catch-all server blocks for unmatched subdomains
Test nginx configuration / Static Analysis (push) Failing after 4s
Test nginx configuration / nginx Syntax Check (push) Successful in 17s
Security Scan and Upload / Security & DefectDojo Upload (push) Successful in 1m21s
 This commit was made with help from Hikari~ 🌸
2026-03-10 12:16:17 -07:00
naomi f3f65e9d92 feat: scripture page too
Test nginx configuration / Static Analysis (push) Successful in 4s
Test nginx configuration / nginx Syntax Check (push) Successful in 17s
Security Scan and Upload / Security & DefectDojo Upload (push) Successful in 1m11s
2026-03-10 11:57:35 -07:00
hikari 0004e5b037 feat: add nocturne.nhcarrigan.com static site config
Test nginx configuration / Static Analysis (push) Successful in 4s
Test nginx configuration / nginx Syntax Check (push) Successful in 16s
Security Scan and Upload / Security & DefectDojo Upload (push) Successful in 1m22s
2026-03-10 11:13:27 -07:00
hikari db36f98578 refactor: restructure nginx config into per-app files (#1)
Test nginx configuration / Static Analysis (push) Successful in 5s
Test nginx configuration / nginx Syntax Check (push) Successful in 18s
Security Scan and Upload / Security & DefectDojo Upload (push) Successful in 2m39s
## Summary

- Added `push.sh` script to deploy configs to prod via `sudo rsync` (with `--delete` for exact mirroring)
- Split the monolithic `conf.d/server.conf` (1,682 lines, 96 server blocks) into 28 per-app files under `sites-available/`, with corresponding symlinks in `sites-enabled/`
- Extracted custom `nginx.conf` settings (`log_format` directives, `server_names_hash_bucket_size`) into dedicated `conf.d/logging.conf` and `conf.d/tuning.conf` files, leaving `nginx.conf` as close to stock as possible

## Test plan

- [x] `sudo nginx -t` passes on prod after the sites-available restructure

 This PR was created with help from Hikari~ 🌸

Co-authored-by: Naomi Carrigan <commits@nhcarrigan.com>
Reviewed-on: #1
Co-authored-by: Hikari <hikari@nhcarrigan.com>
Co-committed-by: Hikari <hikari@nhcarrigan.com>
2026-03-07 02:05:29 -08:00