diff options
Diffstat (limited to '')
| -rw-r--r-- | terminaldweller.com/cargo/docker-compose.yaml | 2 | ||||
| -rw-r--r-- | terminaldweller.com/cargo/nginx.conf | 2 | ||||
| -rw-r--r-- | terminaldweller.com/haproxy/haproxy.cfg | 8 |
3 files changed, 7 insertions, 5 deletions
diff --git a/terminaldweller.com/cargo/docker-compose.yaml b/terminaldweller.com/cargo/docker-compose.yaml index 50eafab..ef2e1b8 100644 --- a/terminaldweller.com/cargo/docker-compose.yaml +++ b/terminaldweller.com/cargo/docker-compose.yaml @@ -12,5 +12,7 @@ services: volumes: - ./nginx.conf:/etc/nginx/nginx.conf:ro - /home/ubuntu/cargo:/cargo + cap_drop: + - ALL networks: cargonet: diff --git a/terminaldweller.com/cargo/nginx.conf b/terminaldweller.com/cargo/nginx.conf index d65508d..118825c 100644 --- a/terminaldweller.com/cargo/nginx.conf +++ b/terminaldweller.com/cargo/nginx.conf @@ -11,7 +11,7 @@ http { ssl_ciphers HIGH:!aNULL:!MD5; sendfile on; tcp_nopush on; - + location / { root /cargo; autoindex on; diff --git a/terminaldweller.com/haproxy/haproxy.cfg b/terminaldweller.com/haproxy/haproxy.cfg index d9d6214..9a71d5e 100644 --- a/terminaldweller.com/haproxy/haproxy.cfg +++ b/terminaldweller.com/haproxy/haproxy.cfg @@ -32,8 +32,8 @@ frontend http use_backend blog-backend-cert if letsencrypt-acl blog-host use_backend api-crypto-backend-cert if letsencrypt-acl api-host crypto-api-acl use_backend api-mila-backend-cert if letsencrypt-acl api-host mila-api-acl - use_backend certbot-backend if letsencrypt-acl !chat-host !blog-host !api-host use_backend searx-backend if letsencrypt-acl searx-host + use_backend certbot-backend if letsencrypt-acl !chat-host !blog-host !api-host use_backend blog-backend if blog-host use_backend mail-backend if mail-host use_backend api-backend if api-host @@ -256,17 +256,17 @@ backend chat-backend-c2s server chat-host 130.185.121.80:5222 backend chat-cert-backend mode http - server chat-cert-server 130.185.121.80:80 + server chat-cert-server 130.185.121.80:8880 backend searx-backend mode http - server searx-host 185.126.202.69:80 + server searx-host 130.185.121.80:80 backend searx-backend-s timeout server 60s timeout client 60s mode tcp option ssl-hello-chk - server searx-host-s 185.126.202.69:443 + server searx-host-s 130.185.121.80:443 backend cargo-backend-s timeout server 60s |