diff --git a/cfg/ngx/frodr.com.conf b/cfg/ngx/frodr.com.conf new file mode 100644 index 0000000..9739c0d --- /dev/null +++ b/cfg/ngx/frodr.com.conf @@ -0,0 +1,41 @@ +# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - +# configuration of frodr.com / frode klevstul / oct 2025 +# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - + +# enforce ssl and bare domain (without www) for http requests +# ($server_name will return the first value given) +server { + listen 80; + server_name frodr.com www.frodr.com; + return 301 https://$server_name$request_uri; +} + +# www to bare domain for https requests +server { + listen 443 ssl; + listen [::]:443 ssl; + http2 on; + + ssl_certificate /etc/nginx/acme.sh/frodr.com/fullchain.pem; + ssl_certificate_key /etc/nginx/acme.sh/frodr.com/key.pem; + ssl_trusted_certificate /etc/nginx/acme.sh/frodr.com/cert.pem; + + server_name www.frodr.com; + return 301 $scheme://frodr.com$request_uri; +} + +server { + listen 443 ssl; + listen [::]:443 ssl; + http2 on; + + ssl_certificate /etc/nginx/acme.sh/frodr.com/fullchain.pem; + ssl_certificate_key /etc/nginx/acme.sh/frodr.com/key.pem; + ssl_trusted_certificate /etc/nginx/acme.sh/frodr.com/cert.pem; + + root /var/www/frodr.com/jongleur; + index index.html; + server_name frodr.com; + + error_page 404 /assets/404.html; +}