diff options
| author | terminaldweller <devi@terminaldweller.com> | 2023-05-04 19:24:48 +0000 |
|---|---|---|
| committer | terminaldweller <devi@terminaldweller.com> | 2023-05-04 19:24:48 +0000 |
| commit | 4b0ef68be03ebbe9da56520d62ce372f66a2a12f (patch) | |
| tree | fc794093f386283021776ebde9ebea982ccdc617 /terminaldweller.com/cargo | |
| parent | updates (diff) | |
| download | scripts-4b0ef68be03ebbe9da56520d62ce372f66a2a12f.tar.gz scripts-4b0ef68be03ebbe9da56520d62ce372f66a2a12f.zip | |
update
Diffstat (limited to 'terminaldweller.com/cargo')
| -rw-r--r-- | terminaldweller.com/cargo/docker-compose.yaml | 3 | ||||
| -rw-r--r-- | terminaldweller.com/cargo/nginx.conf | 4 |
2 files changed, 4 insertions, 3 deletions
diff --git a/terminaldweller.com/cargo/docker-compose.yaml b/terminaldweller.com/cargo/docker-compose.yaml index 7cbb5d9..61eccb5 100644 --- a/terminaldweller.com/cargo/docker-compose.yaml +++ b/terminaldweller.com/cargo/docker-compose.yaml @@ -12,7 +12,8 @@ services: volumes: - ./nginx.conf:/etc/nginx/nginx.conf:ro - /home/ubuntu/cargo:/cargo - - /etc/letsencrypt/archive/cargo.terminaldweller.com/:/certs/ + - /etc/letsencrypt/live/cargo.terminaldweller.com/fullchain.pem:/etc/letsencrypt/live/cargo.terminaldweller.com/fullchain.pem:ro + - /etc/letsencrypt/live/cargo.terminaldweller.com/privkey.pem:/etc/letsencrypt/live/cargo.terminaldweller.com/privkey.pem:ro cap_drop: - ALL cap_add: diff --git a/terminaldweller.com/cargo/nginx.conf b/terminaldweller.com/cargo/nginx.conf index bec87f2..467de67 100644 --- a/terminaldweller.com/cargo/nginx.conf +++ b/terminaldweller.com/cargo/nginx.conf @@ -8,8 +8,8 @@ http { add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always; ssl_ciphers HIGH:!aNULL:!MD5:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384; ssl_prefer_server_ciphers on; - ssl_certificate /certs/fullchain1.pem; - ssl_certificate_key /certs/privkey1.pem; + ssl_certificate /etc/letsencrypt/live/cargo.terminaldweller.com/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/cargo.terminaldweller.com/privkey.pem; ssl_protocols TLSv1.2 TLSv1.3; add_header Content-Security-Policy "default-src 'self';"; add_header X-Frame-Options SAMEORIGIN always; |