|
|
|
@@ -97,37 +97,6 @@ matrix.DOMAIN.tld:8448 { |
|
|
|
} |
|
|
|
} |
|
|
|
|
|
|
|
dimension.DOMAIN.tld { |
|
|
|
|
|
|
|
# creates letsencrypt certificate |
|
|
|
# tls your@email.com |
|
|
|
|
|
|
|
header { |
|
|
|
# Enable HTTP Strict Transport Security (HSTS) to force clients to always connect via HTTPS |
|
|
|
Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" |
|
|
|
# Enable cross-site filter (XSS) and tell browser to block detected attacks |
|
|
|
X-XSS-Protection "1; mode=block" |
|
|
|
# Prevent some browsers from MIME-sniffing a response away from the declared Content-Type |
|
|
|
X-Content-Type-Options "nosniff" |
|
|
|
# Disallow the site to be rendered within a frame (clickjacking protection) |
|
|
|
X-Frame-Options "DENY" |
|
|
|
# X-Robots-Tag |
|
|
|
X-Robots-Tag "noindex, noarchive, nofollow" |
|
|
|
} |
|
|
|
|
|
|
|
handle { |
|
|
|
encode zstd gzip |
|
|
|
|
|
|
|
reverse_proxy localhost:8184 { |
|
|
|
header_up X-Forwarded-Port {http.request.port} |
|
|
|
header_up X-Forwarded-Proto {http.request.scheme} |
|
|
|
header_up X-Forwarded-TlsProto {tls_protocol} |
|
|
|
header_up X-Forwarded-TlsCipher {tls_cipher} |
|
|
|
header_up X-Forwarded-HttpsProto {proto} |
|
|
|
} |
|
|
|
} |
|
|
|
} |
|
|
|
|
|
|
|
element.DOMAIN.tld { |
|
|
|
|
|
|
|
# creates letsencrypt certificate |
|
|
|
@@ -158,10 +127,39 @@ element.DOMAIN.tld { |
|
|
|
} |
|
|
|
} |
|
|
|
|
|
|
|
#dimension.DOMAIN.tld { |
|
|
|
# |
|
|
|
# # creates letsencrypt certificate |
|
|
|
# # tls your@email.com |
|
|
|
# |
|
|
|
# header { |
|
|
|
# # Enable HTTP Strict Transport Security (HSTS) to force clients to always connect via HTTPS |
|
|
|
# Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" |
|
|
|
# # Enable cross-site filter (XSS) and tell browser to block detected attacks |
|
|
|
# X-XSS-Protection "1; mode=block" |
|
|
|
# # Prevent some browsers from MIME-sniffing a response away from the declared Content-Type |
|
|
|
# X-Content-Type-Options "nosniff" |
|
|
|
# # Disallow the site to be rendered within a frame (clickjacking protection) |
|
|
|
# X-Frame-Options "DENY" |
|
|
|
# # X-Robots-Tag |
|
|
|
# X-Robots-Tag "noindex, noarchive, nofollow" |
|
|
|
# } |
|
|
|
# |
|
|
|
# handle { |
|
|
|
# encode zstd gzip |
|
|
|
# |
|
|
|
# reverse_proxy localhost:8184 { |
|
|
|
# header_up X-Forwarded-Port {http.request.port} |
|
|
|
# header_up X-Forwarded-Proto {http.request.scheme} |
|
|
|
# header_up X-Forwarded-TlsProto {tls_protocol} |
|
|
|
# header_up X-Forwarded-TlsCipher {tls_cipher} |
|
|
|
# header_up X-Forwarded-HttpsProto {proto} |
|
|
|
# } |
|
|
|
# } |
|
|
|
#} |
|
|
|
|
|
|
|
|
|
|
|
#jitsi.DOMAIN.tld { |
|
|
|
# log { |
|
|
|
# output discard |
|
|
|
# } |
|
|
|
# |
|
|
|
# creates letsencrypt certificate |
|
|
|
# tls your@email.com |
|
|
|
|