sourcebot/nginx.conf.example at master · dogshapedangel/sourcebot · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62

server {
    server_name STATIC.EXAMPLE.COM;
    listen 443 ssl;
    listen [::]:443 ssl ipv6only=on;

    if ($scheme != "https") {
        return 301 https://$host$request_uri;
    }

    # Cloudflare IPv4 https://www.cloudflare.com/ips-v4/

    set_real_ip_from  173.245.48.0/20;
    set_real_ip_from  103.21.244.0/22;
    set_real_ip_from  103.22.200.0/22;
    set_real_ip_from  103.31.4.0/22;
    set_real_ip_from  141.101.64.0/18;
    set_real_ip_from  108.162.192.0/18;
    set_real_ip_from  190.93.240.0/20;
    set_real_ip_from  188.114.96.0/20;
    set_real_ip_from  197.234.240.0/22;
    set_real_ip_from  198.41.128.0/17;
    set_real_ip_from  162.158.0.0/15;
    set_real_ip_from  104.16.0.0/13;
    set_real_ip_from  104.24.0.0/14;
    set_real_ip_from  172.64.0.0/13;
    set_real_ip_from  131.0.72.0/22;

    # Cloudflare IPv6 https://www.cloudflare.com/ips-v6/
    set_real_ip_from  2400:cb00::/32;
    set_real_ip_from  2606:4700::/32;
    set_real_ip_from  2803:f800::/32;
    set_real_ip_from  2405:b500::/32;
    set_real_ip_from  2405:8100::/32;
    set_real_ip_from  2a06:98c0::/29;
    set_real_ip_from  2c0f:f248::/32;

    real_ip_header CF-Connecting-IP;

    index index.html;
    root /media;

    #location /vr {
    #    auth_basic "restricted";
    #    auth_basic_user_file "/etc/nginx/.htpasswd";
    #    autoindex on;
    #    autoindex_exact_size off;
    #}


    ssl_certificate         /etc/letsencrypt/live/STATIC.EXAMPLE.COM/fullchain.pem;
    ssl_certificate_key     /etc/letsencrypt/live/STATIC.EXAMPLE.COM/privkey.pem;

   # access_log /var/log/nginx/STATIC.EXAMPLE.COM cf_custom;

}

#server {
    # Drop any request that does not match any of the other server names.
#    listen               443 ssl default_server;
#    ssl_reject_handshake on;
#}