Files
nginx-configs/nginx/nginx/sites-available/nocturne.conf
T
hikari fc252e28e2
Test nginx configuration / Static Analysis (push) Failing after 4s
Test nginx configuration / nginx Syntax Check (push) Successful in 20s
Security Scan and Upload / Security & DefectDojo Upload (push) Successful in 1m8s
feat: block dotfile requests across all sites
Adds a deny-dotfiles snippet that returns 403 for any URI matching /\.
(e.g. .gitconfig, .env, .git/) and includes it in every server block.
2026-03-18 11:31:02 -07:00

29 lines
729 B
Plaintext

# Nocturne static site.
server {
listen 443 ssl;
server_name nocturne.nhcarrigan.com;
ssl_certificate /etc/letsencrypt/live/nocturne.nhcarrigan.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/nocturne.nhcarrigan.com/privkey.pem;
root /home/naomi/nocturne;
location / {
index index.html;
}
include /etc/nginx/snippets/deny-dotfiles.conf;
}
server {
listen 443 ssl;
server_name scripture.nhcarrigan.com;
ssl_certificate /etc/letsencrypt/live/scripture.nhcarrigan.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/scripture.nhcarrigan.com/privkey.pem;
root /home/naomi/scripture;
location / {
index index.html;
}
include /etc/nginx/snippets/deny-dotfiles.conf;
}