aboutsummaryrefslogtreecommitdiffstats
path: root/terminaldweller.com/cargo
diff options
context:
space:
mode:
Diffstat (limited to 'terminaldweller.com/cargo')
-rw-r--r--terminaldweller.com/cargo/docker-compose.yaml5
-rw-r--r--terminaldweller.com/cargo/nginx.conf6
2 files changed, 8 insertions, 3 deletions
diff --git a/terminaldweller.com/cargo/docker-compose.yaml b/terminaldweller.com/cargo/docker-compose.yaml
index ef2e1b8..7cbb5d9 100644
--- a/terminaldweller.com/cargo/docker-compose.yaml
+++ b/terminaldweller.com/cargo/docker-compose.yaml
@@ -12,7 +12,12 @@ services:
volumes:
- ./nginx.conf:/etc/nginx/nginx.conf:ro
- /home/ubuntu/cargo:/cargo
+ - /etc/letsencrypt/archive/cargo.terminaldweller.com/:/certs/
cap_drop:
- ALL
+ cap_add:
+ - CHOWN
+ - SETGID
+ - SETUID
networks:
cargonet:
diff --git a/terminaldweller.com/cargo/nginx.conf b/terminaldweller.com/cargo/nginx.conf
index 118825c..eafeeee 100644
--- a/terminaldweller.com/cargo/nginx.conf
+++ b/terminaldweller.com/cargo/nginx.conf
@@ -3,10 +3,10 @@ events {
}
http {
server {
- listen 8080 ssl;
+ listen 8080 ssl http2;
keepalive_timeout 70;
- ssl_certificate /certs/server.cert;
- ssl_certificate_key /certs/server.key;
+ ssl_certificate /certs/cert1.pem;
+ ssl_certificate_key /certs/privkey1.pem;
ssl_protocols TLSv1.2 TLSv1.3;
ssl_ciphers HIGH:!aNULL:!MD5;
sendfile on;