Commit Graph

10 Commits

Author SHA1 Message Date
hikari f433f3330a feat: add elysium.nhcarrigan.com nginx config
Test nginx configuration / Static Analysis (pull_request) Successful in 5s
Test nginx configuration / nginx Syntax Check (pull_request) Successful in 17s
Security Scan and Upload / Security & DefectDojo Upload (pull_request) Successful in 1m10s
 This issue was created with help from Hikari~ 🌸
2026-03-07 02:01:39 -08:00
hikari fbdc386449 fix: replace absolute default symlink with relative path
Security Scan and Upload / Security & DefectDojo Upload (pull_request) Successful in 2m11s
Test nginx configuration / Static Analysis (pull_request) Successful in 8s
Test nginx configuration / nginx Syntax Check (pull_request) Successful in 27s
2026-03-03 16:34:47 -08:00
hikari e8318215a9 docs: add README and per-file header comments
Test nginx configuration / Static Analysis (pull_request) Failing after 4s
Test nginx configuration / nginx Syntax Check (pull_request) Successful in 16s
Security Scan and Upload / Security & DefectDojo Upload (pull_request) Successful in 1m21s
- Rewrote README with full directory structure, add/remove site
  workflows, deploy instructions, and a test suite reference table
- Added a one-line header comment to each sites-available/*.conf
  explaining what category of sites belongs in that file
2026-03-03 16:26:37 -08:00
hikari 12687ad1a2 feat: add style.nhcarrigan.com to content sites
Test nginx configuration / Static Analysis (pull_request) Failing after 9s
Test nginx configuration / nginx Syntax Check (pull_request) Successful in 24s
Security Scan and Upload / Security & DefectDojo Upload (pull_request) Successful in 1m28s
2026-03-03 16:17:53 -08:00
hikari 7085845234 feat: enforce alphabetical server block ordering
Test nginx configuration / Static Analysis (pull_request) Failing after 6s
Test nginx configuration / nginx Syntax Check (pull_request) Successful in 24s
Security Scan and Upload / Security & DefectDojo Upload (pull_request) Successful in 1m59s
Adds test 13 to test.sh to verify that server blocks within each
sites-available file are sorted alphabetically by server_name
(LC_ALL=C; regex and wildcard entries excluded).

Fixes aria.conf and mommy.conf to conform: hyphenated names sort
before the bare domain in C locale ('-' < '.'), so trans-bot now
precedes trans, and mommy-slack now precedes mommy.
2026-03-03 16:16:18 -08:00
hikari 493d758df8 refactor: remove port 80 listeners and enforce HTTPS-only in tests
Test nginx configuration / Static Analysis (pull_request) Failing after 5s
Test nginx configuration / nginx Syntax Check (pull_request) Successful in 16s
Security Scan and Upload / Security & DefectDojo Upload (pull_request) Successful in 1m6s
Removes the listen 80 / listen [::]:80 blocks from cdn.conf since
port 80 is blocked at the firewall. Updates test 6 to enforce that
no custom server block listens on port 80 at all.
2026-03-03 16:10:51 -08:00
hikari aff5a966c6 chore: remove unused default files and clean up comments
Security Scan and Upload / Security & DefectDojo Upload (pull_request) Successful in 58s
Deletes conf.d/default.conf, snippets/snakeoil.conf, and
snippets/fastcgi-php.conf (all stock example files not used in
production). Strips all commented-out lines and the mail block from
nginx.conf, and drops TLSv1/TLSv1.1 from ssl_protocols. Cleans
sites-available/default down to just the functional catch-all.
2026-03-03 16:04:01 -08:00
hikari 37402ce0f4 refactor: extract custom nginx.conf settings into conf.d files
Security Scan and Upload / Security & DefectDojo Upload (pull_request) Successful in 1m6s
Moves custom log formats to conf.d/logging.conf and the
server_names_hash_bucket_size tweak to conf.d/tuning.conf,
leaving nginx.conf as close to stock as possible.
2026-03-03 15:45:16 -08:00
hikari 222e0f5a41 refactor: split monolithic server.conf into per-app config files
Moves all server blocks out of conf.d/server.conf into individual
files under sites-available/, grouped by logical application. Each
file is symlinked into sites-enabled/ to enable it. The old
server.conf is removed.
2026-03-03 15:38:48 -08:00
naomi 243f2d4a18 feat: new structure 2026-03-03 15:15:37 -08:00