diff options
author | Melody Horn <melody@boringcactus.com> | 2020-06-23 20:03:24 -0600 |
---|---|---|
committer | Melody Horn <melody@boringcactus.com> | 2020-06-23 20:19:28 -0600 |
commit | 4a15c96220544747757311256cc4698d10a11143 (patch) | |
tree | 33267252a6d7dc8157032373b3e5491a905db5b4 /nginx.conf | |
parent | c56211d0e66497200f85a0fffc6ce4d4ae0687c9 (diff) | |
download | pig.observer-4a15c96220544747757311256cc4698d10a11143.tar.gz pig.observer-4a15c96220544747757311256cc4698d10a11143.zip |
adjust nginx config to be a little better
Diffstat (limited to 'nginx.conf')
-rw-r--r-- | nginx.conf | 9 |
1 files changed, 8 insertions, 1 deletions
@@ -1,5 +1,6 @@ server { listen 80; + listen [::]:80; server_name pig.observer; set $RD ""; @@ -17,9 +18,14 @@ server { add_header Onion-Location http://y4b244ai6krmmd6kjjiptqibjb4rvgf7lpeobhpk3j5vkvhqytt6ulyd.onion$request_uri; - #charset koi8-r; + charset utf-8; + charset_types text/xml text/css text/plain application/javascript application/rss+xml; #access_log /var/log/nginx/host.access.log main; rewrite_log on; + + gzip on; + add_header Strict-Transport-Security max-age=31536000 always; + add_header X-Content-Type-Options nosniff; location /georgiasnapshots/ { add_header Access-Control-Allow-Origin *; @@ -85,6 +91,7 @@ server { listen 443 ssl; # managed by Certbot + listen [::]:443 ssl; ssl_certificate /etc/letsencrypt/live/pig.observer/fullchain.pem; # managed by Certbot ssl_certificate_key /etc/letsencrypt/live/pig.observer/privkey.pem; # managed by Certbot include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot |