From: Shane Jaroch Date: Sat, 2 Jul 2022 02:42:38 +0000 (-0400) Subject: update nginx config to match prod X-Git-Url: https://git.nutra.tk/v2?a=commitdiff_plain;h=82d1d5ba0b3ce253fb05fbf023de43c516494a7d;p=nutratech%2Fvps-root.git update nginx config to match prod --- diff --git a/etc/nginx/sites-available/default b/etc/nginx/sites-available/default index f7fbb88..cb73473 100644 --- a/etc/nginx/sites-available/default +++ b/etc/nginx/sites-available/default @@ -9,35 +9,18 @@ server { listen 443 ssl http2 default_server; listen [::]:443 ssl ipv6only=on; # managed by Certbot + client_max_body_size 50m; + # React app (base URL) location / { alias /var/www/react_app; index index.html; - try_files $uri $uri/ /index.html =404; } - # Ghost - client_max_body_size 50m; - root /var/www/blog/system/nginx-root; # Used for acme.sh SSL verification (https://acme.sh) - + # Blog / Sphinx location ^~ /blog/ { - proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; - proxy_set_header X-Forwarded-Proto $scheme; - proxy_set_header X-Real-IP $remote_addr; - proxy_set_header Host $http_host; - proxy_pass http://127.0.0.1:2368; - proxy_redirect off; - } - - location ~ /.well-known { - allow all; - } - - - # [NEW] Sphinx blog - location /docs { alias /var/www/docs/_build/html; index index.html; } @@ -64,11 +47,17 @@ server { } + # Other + location ~ /.well-known { + allow all; + } + + + # HTTPS / SSL ssl_certificate /etc/letsencrypt/live/deveast.linode.poczatek.dev/fullchain.pem; # managed by Certbot ssl_certificate_key /etc/letsencrypt/live/deveast.linode.poczatek.dev/privkey.pem; # managed by Certbot include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot - }