diff --git a/tools/site.conf b/tools/site.conf index 7872fe3..12df89a 100644 --- a/tools/site.conf +++ b/tools/site.conf @@ -1,43 +1,29 @@ -# https://palmure.fr/blog.html#default-https-but-only-for-recent-browsers - -# -# -# Require all denied -# -# - -# + + ServerName nycki.blokus.hatspace.net +# ServerName nycki.net # SSLEngine on # Include /etc/letsencrypt/options-ssl-apache.conf -# SSLCertificateFile /etc/letsencrypt/live/klay.gay/fullchain.pem +# SSLCertificateFile /etc/letsencrypt/live/klay.gay/fullchain.pem # SSLCertificateKeyFile /etc/letsencrypt/live/klay.gay/privkey.pem -# -# Require all denied -# -# - - - ServerName nycki.net - SSLEngine on - Include /etc/letsencrypt/options-ssl-apache.conf - SSLCertificateFile /etc/letsencrypt/live/klay.gay/fullchain.pem - SSLCertificateKeyFile /etc/letsencrypt/live/klay.gay/privkey.pem + # https://palmure.fr/blog.html#default-https-but-only-for-recent-browsers #Header always add Strict-Transport-Security: "max-age=31536000; includeSubDomains; preload;" - - - Header always add Vary: Upgrade-Insecure-Requests - Redirect / https://nycki.net - - + # + # + # Header always add Vary: Upgrade-Insecure-Requests + # Redirect / https://nycki.net + # + # DocumentRoot /data/nycki.net/site + #DirectoryIndex index.html ErrorDocument 404 /404.html RewriteEngine on - #LogLevel alert rewrite:trace3 + LogLevel alert rewrite:trace3 - RewriteCond "%{DOCUMENT_ROOT}/%{REQUEST_URI}" -f - RewriteRule "(.+)" "/$1" [L] + RewriteCond "%{DOCUMENT_ROOT}/%{REQUEST_URI}" -f [OR] + RewriteCond "%{DOCUMENT_ROOT}/%{REQUEST_URI}" -d + RewriteRule "^(.+)" "%{DOCUMENT_ROOT}/$1" [L] Options FollowSymLinks MultiViews Require all granted @@ -45,36 +31,11 @@ # If file isn't in repo, fall back on public_html Define public_html "/home/nycki/public_html" - Alias /p ${public_html} - RewriteCond "${public_html}/%{REQUEST_URI}" -f - RewriteRule "(.+)" "/p/$1" [PT,L] - + RewriteCond "${public_html}%{REQUEST_URI}" -f [OR] + RewriteCond "${public_html}%{REQUEST_URI}" -d + RewriteRule "^(.+)" "${public_html}$1" [L] + Options FollowSymLinks Require all granted - - - ServerName rss.nycki.net - SSLEngine on - Include /etc/letsencrypt/options-ssl-apache.conf - - ProxyPass http://localhost:8400/ - - SSLCertificateFile /etc/letsencrypt/live/klay.gay/fullchain.pem - SSLCertificateKeyFile /etc/letsencrypt/live/klay.gay/privkey.pem - - - - ServerName git.nycki.net - SSLEngine on - Include /etc/letsencrypt/options-ssl-apache.conf - - # https://stackoverflow.com/a/9933890/3821202 - AllowEncodedSlashes NoDecode - - ProxyPass http://localhost:8500/ nocanon - - SSLCertificateFile /etc/letsencrypt/live/klay.gay/fullchain.pem - SSLCertificateKeyFile /etc/letsencrypt/live/klay.gay/privkey.pem -