diff options
| author | Sam Chudnick <sam@chudnick.com> | 2023-06-25 09:52:36 -0400 |
|---|---|---|
| committer | Sam Chudnick <sam@chudnick.com> | 2023-06-25 09:52:36 -0400 |
| commit | 95b73daa36b23565a8566f71f9b202d3459b685f (patch) | |
| tree | cb17b021be70e7868d0ec235a761f0ecdc80f3f2 /data/cadvisor | |
Diffstat (limited to 'data/cadvisor')
| -rw-r--r-- | data/cadvisor/cadvisor.conf | 34 |
1 files changed, 34 insertions, 0 deletions
diff --git a/data/cadvisor/cadvisor.conf b/data/cadvisor/cadvisor.conf new file mode 100644 index 0000000..62ffd48 --- /dev/null +++ b/data/cadvisor/cadvisor.conf | |||
| @@ -0,0 +1,34 @@ | |||
| 1 | server { | ||
| 2 | listen 443 ssl; | ||
| 3 | server_name cadvisor.chudnick.com; | ||
| 4 | |||
| 5 | ssl_certificate /etc/letsencrypt/live/chudnick.com/fullchain.pem; | ||
| 6 | ssl_certificate_key /etc/letsencrypt/live/chudnick.com/privkey.pem; | ||
| 7 | add_header Strict-Transport-Security "max-age=31536000" always; | ||
| 8 | ssl_stapling on; | ||
| 9 | ssl_stapling_verify on; | ||
| 10 | |||
| 11 | # Security / XSS Mitigation Headers | ||
| 12 | add_header X-Frame-Options "SAMEORIGIN"; | ||
| 13 | add_header X-XSS-Protection "1; mode=block"; | ||
| 14 | add_header X-Content-Type-Options "nosniff"; | ||
| 15 | |||
| 16 | # authelia | ||
| 17 | include /etc/nginx/snippets/authelia-location.conf; | ||
| 18 | |||
| 19 | location / { | ||
| 20 | # authelia | ||
| 21 | include /etc/nginx/snippets/proxy.conf; | ||
| 22 | include /etc/nginx/snippets/authelia-authrequest.conf; | ||
| 23 | |||
| 24 | proxy_pass http://127.0.0.1:8004/; | ||
| 25 | } | ||
| 26 | |||
| 27 | } | ||
| 28 | |||
| 29 | server { | ||
| 30 | listen 80; | ||
| 31 | listen [::]:80; | ||
| 32 | server_name cadvisor.chudnick.com; | ||
| 33 | return 301 https://$host$request_uri; | ||
| 34 | } | ||
