blob: 5ae383c5f04da3427028de78e6b7ea7549e40e60 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
|
# SPDX-FileCopyrightText: 2026 Progmasoft <support@progmasoft.com>
# SPDX-License-Identifier: AGPL-3.0-or-later WITH AdditionRef-Progmasoft-Patent-Grant-1.1
# This is a standalone informational page, not a forum application.
server {
listen 80;
listen [::]:80;
server_name forum.tala.run;
location ^~ /.well-known/acme-challenge/ {
root /var/lib/letsencrypt;
default_type text/plain;
}
location / { return 308 https://forum.tala.run$request_uri; }
}
server {
listen 443 ssl;
listen [::]:443 ssl;
http2 on;
server_name forum.tala.run;
root /srv/xsharp/website/current/forum;
index index.html;
server_tokens off;
ssl_certificate /etc/letsencrypt/live/tala.run/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/tala.run/privkey.pem;
include /etc/letsencrypt/options-ssl-nginx.conf;
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
add_header X-Robots-Tag "noindex, nofollow" always;
add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload" always;
add_header X-Content-Type-Options "nosniff" always;
add_header Referrer-Policy "strict-origin-when-cross-origin" always;
add_header Content-Security-Policy "default-src 'none'; script-src 'self'; style-src 'self'; img-src 'self'; base-uri 'none'; frame-ancestors 'none'; form-action 'none'" always;
location = / { try_files /index.html =404; }
location = /tala.svg { try_files $uri =404; }
location = /tala-mark.svg { try_files $uri =404; }
location = /site.css { try_files $uri =404; }
location = /site.js { try_files $uri =404; }
location / { return 404; }
}
# The former address of the same page.
server {
listen 80;
listen [::]:80;
server_name forum.xsharp-lang.xyz;
location ^~ /.well-known/acme-challenge/ {
root /var/lib/letsencrypt;
default_type text/plain;
}
location / { return 308 https://forum.tala.run$request_uri; }
}
server {
listen 443 ssl;
listen [::]:443 ssl;
http2 on;
server_name forum.xsharp-lang.xyz;
server_tokens off;
ssl_certificate /etc/letsencrypt/live/forum.xsharp-lang.xyz/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/forum.xsharp-lang.xyz/privkey.pem;
include /etc/letsencrypt/options-ssl-nginx.conf;
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
return 308 https://forum.tala.run$request_uri;
}
|