aboutsummaryrefslogtreecommitdiffstats
path: root/terminaldweller.com
diff options
context:
space:
mode:
Diffstat (limited to 'terminaldweller.com')
-rw-r--r--terminaldweller.com/cargo/docker-compose.yaml2
-rw-r--r--terminaldweller.com/cargo/nginx.conf2
-rw-r--r--terminaldweller.com/haproxy/haproxy.cfg8
3 files changed, 7 insertions, 5 deletions
diff --git a/terminaldweller.com/cargo/docker-compose.yaml b/terminaldweller.com/cargo/docker-compose.yaml
index 50eafab..ef2e1b8 100644
--- a/terminaldweller.com/cargo/docker-compose.yaml
+++ b/terminaldweller.com/cargo/docker-compose.yaml
@@ -12,5 +12,7 @@ services:
volumes:
- ./nginx.conf:/etc/nginx/nginx.conf:ro
- /home/ubuntu/cargo:/cargo
+ cap_drop:
+ - ALL
networks:
cargonet:
diff --git a/terminaldweller.com/cargo/nginx.conf b/terminaldweller.com/cargo/nginx.conf
index d65508d..118825c 100644
--- a/terminaldweller.com/cargo/nginx.conf
+++ b/terminaldweller.com/cargo/nginx.conf
@@ -11,7 +11,7 @@ http {
ssl_ciphers HIGH:!aNULL:!MD5;
sendfile on;
tcp_nopush on;
-
+
location / {
root /cargo;
autoindex on;
diff --git a/terminaldweller.com/haproxy/haproxy.cfg b/terminaldweller.com/haproxy/haproxy.cfg
index d9d6214..9a71d5e 100644
--- a/terminaldweller.com/haproxy/haproxy.cfg
+++ b/terminaldweller.com/haproxy/haproxy.cfg
@@ -32,8 +32,8 @@ frontend http
use_backend blog-backend-cert if letsencrypt-acl blog-host
use_backend api-crypto-backend-cert if letsencrypt-acl api-host crypto-api-acl
use_backend api-mila-backend-cert if letsencrypt-acl api-host mila-api-acl
- use_backend certbot-backend if letsencrypt-acl !chat-host !blog-host !api-host
use_backend searx-backend if letsencrypt-acl searx-host
+ use_backend certbot-backend if letsencrypt-acl !chat-host !blog-host !api-host
use_backend blog-backend if blog-host
use_backend mail-backend if mail-host
use_backend api-backend if api-host
@@ -256,17 +256,17 @@ backend chat-backend-c2s
server chat-host 130.185.121.80:5222
backend chat-cert-backend
mode http
- server chat-cert-server 130.185.121.80:80
+ server chat-cert-server 130.185.121.80:8880
backend searx-backend
mode http
- server searx-host 185.126.202.69:80
+ server searx-host 130.185.121.80:80
backend searx-backend-s
timeout server 60s
timeout client 60s
mode tcp
option ssl-hello-chk
- server searx-host-s 185.126.202.69:443
+ server searx-host-s 130.185.121.80:443
backend cargo-backend-s
timeout server 60s