From 4bbe88974637c40ca1eb51525395b698f30ed39c Mon Sep 17 00:00:00 2001
From: fro <committer@tuxwarrior.xyz>
Date: Sun, 2 Nov 2025 09:27:06 -0500
Subject: [PATCH] + factor.red.conf

---
 cfg/ngx/factor.red.conf               |  51 ++
 cfg/ngx/redirect.conf.tmpSoonObsolete | 646 ++++++++++++++++++++++++++
 2 files changed, 697 insertions(+)
 create mode 100644 cfg/ngx/factor.red.conf
 create mode 100644 cfg/ngx/redirect.conf.tmpSoonObsolete

diff --git a/cfg/ngx/factor.red.conf b/cfg/ngx/factor.red.conf
new file mode 100644
index 0000000..206656d
--- /dev/null
+++ b/cfg/ngx/factor.red.conf
@@ -0,0 +1,51 @@
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+# configuration of factor.red / frode klevstul / oct 2025
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+
+# http ➔ https
+server {
+    listen 80;
+    server_name factor.red;
+    return 301 https://$host$request_uri;
+}
+
+# * ➔ bare domain (https)
+server {
+    listen 443 ssl;
+    listen [::]:443 ssl;
+    http2 on;
+
+    ssl_certificate /etc/nginx/acme.sh/factor.red/fullchain.pem;
+    ssl_certificate_key /etc/nginx/acme.sh/factor.red/key.pem;
+    ssl_trusted_certificate /etc/nginx/acme.sh/factor.red/cert.pem;
+
+    server_name *.factor.red;
+    return 301 $scheme://factor.red$request_uri;
+}
+
+# https
+server {
+    listen 443 ssl;
+    listen [::]:443 ssl;
+    http2 on;
+
+    ssl_certificate /etc/nginx/acme.sh/factor.red/fullchain.pem;
+    ssl_certificate_key /etc/nginx/acme.sh/factor.red/key.pem;
+    ssl_trusted_certificate /etc/nginx/acme.sh/factor.red/cert.pem;
+
+    add_header Strict-Transport-Security "max-age=63072000" always;
+
+    root /var/www/factor.red;
+    index index.html;
+    server_name factor.red;
+
+    location @myownredirect {
+        return 302 /;
+    }
+
+    # redirect 404 not found to the root
+    location / {
+        error_page 404 = @myownredirect;
+    }
+
+}
diff --git a/cfg/ngx/redirect.conf.tmpSoonObsolete b/cfg/ngx/redirect.conf.tmpSoonObsolete
new file mode 100644
index 0000000..6af47df
--- /dev/null
+++ b/cfg/ngx/redirect.conf.tmpSoonObsolete
@@ -0,0 +1,646 @@
+# - - - - - - - - - - - - - - - - - - -
+# configuration of redirecting domains
+# by nzwlm jczlit stmdabct
+# - - - - - - - - - - - - - - - - - - -
+
+
+
+
+
+server {
+    listen 80;
+    server_name
+        antijantepodden.no *.antijantepodden.no
+    ;
+    rewrite ^/p/ajp(.*)$ https://antijantepodden.com/.ep_ajp$1.html last;
+    return 301 https://antijantepodden.com;
+}
+
+server {
+    listen 443 ssl http2;
+    listen [::]:443 ssl http2;
+    server_name
+        antijantepodden.no *.antijantepodden.no
+    ;
+
+    ssl_certificate /etc/nginx/acme.sh/antijantepodden.no/fullchain.pem;
+    ssl_certificate_key /etc/nginx/acme.sh/antijantepodden.no/key.pem;
+    ssl_trusted_certificate /etc/nginx/acme.sh/antijantepodden.no/cert.pem;
+
+    # old: https://www.antijantepodden.no/p/ajp063
+    # (new: https://antijanteboka.com/antijantepodden_ajp063.html)
+    # new: https://ajp.fm/.ep_ajp063.html
+    rewrite ^/p/ajp(.*)$ https://antijantepodden.com/.ep_ajp$1.html last;
+    return 301 https://antijantepodden.com;
+}
+
+
+
+# -------------------
+# antijanteboka.com
+# -------------------
+server {
+    listen 80;
+    server_name
+        antijanteboka.no *.antijanteboka.no
+    ;
+    return 301 https://antijanteboka.com;
+}
+
+server {
+    listen 443 ssl http2;
+    listen [::]:443 ssl http2;
+    server_name
+        antijanteboka.no *.antijanteboka.no
+    ;
+
+    ssl_certificate /etc/nginx/acme.sh/antijanteboka.no/fullchain.pem;
+    ssl_certificate_key /etc/nginx/acme.sh/antijanteboka.no/key.pem;
+    ssl_trusted_certificate /etc/nginx/acme.sh/antijanteboka.no/cert.pem;
+
+    return 301 https://antijanteboka.com;
+}
+
+
+
+# -------------------
+# curious.art
+# -------------------
+server {
+    listen 80;
+    server_name
+        burdal.com *.burdal.com
+    ;
+    return 301 https://curious.art;
+}
+
+server {
+    listen 443 ssl http2;
+    listen [::]:443 ssl http2;
+    server_name
+        burdal.com *.burdal.com
+    ;
+
+    ssl_certificate /etc/nginx/acme.sh/burdal.com/fullchain.pem;
+    ssl_certificate_key /etc/nginx/acme.sh/burdal.com/key.pem;
+    ssl_trusted_certificate /etc/nginx/acme.sh/burdal.com/cert.pem;
+
+    return 301 https://curious.art;
+}
+
+
+
+# -------------------
+# reduxmail.com
+# -------------------
+server {
+    listen 80;
+    server_name
+        mailredux.com *.mailredux.com
+    ;
+    return 301 https://reduxmail.com;
+}
+
+server {
+    listen 443 ssl http2;
+    listen [::]:443 ssl http2;
+    server_name
+        mailredux.com *.mailredux.com
+    ;
+
+    ssl_certificate /etc/nginx/acme.sh/mailredux.com/fullchain.pem;
+    ssl_certificate_key /etc/nginx/acme.sh/mailredux.com/key.pem;
+    ssl_trusted_certificate /etc/nginx/acme.sh/mailredux.com/cert.pem;
+
+    return 301 https://reduxmail.com$request_uri;
+}
+
+
+
+# -------------------
+# mz.fo
+# -------------------
+server {
+    listen 80;
+    server_name
+        mz.fo
+        www.mz.fo
+    ;
+    return 301 https://op.fo$request_uri;
+}
+
+server {
+    listen 443 ssl http2;
+    listen [::]:443 ssl http2;
+    server_name
+        mz.fo
+        www.mz.fo
+    ;
+
+    ssl_certificate /etc/nginx/acme.sh/mz.fo/fullchain.pem;
+    ssl_certificate_key /etc/nginx/acme.sh/mz.fo/key.pem;
+    ssl_trusted_certificate /etc/nginx/acme.sh/mz.fo/cert.pem;
+
+    return 301 https://op.fo$request_uri;
+}
+
+
+
+# -------------------
+# git.mz.fo
+# -------------------
+server {
+    listen 443 ssl http2;
+    listen [::]:443 ssl http2;
+    server_name
+        git.mz.fo
+    ;
+
+    ssl_certificate /etc/nginx/acme.sh/mz.fo/fullchain.pem;
+    ssl_certificate_key /etc/nginx/acme.sh/mz.fo/key.pem;
+    ssl_trusted_certificate /etc/nginx/acme.sh/mz.fo/cert.pem;
+
+    return 301 https://gt.op.fo$request_uri;
+}
+
+
+
+# -------------------
+# nx.mz.fo
+# -------------------
+server {
+    listen 443 ssl http2;
+    listen [::]:443 ssl http2;
+    server_name
+        nx.mz.fo
+    ;
+
+    ssl_certificate /etc/nginx/acme.sh/mz.fo/fullchain.pem;
+    ssl_certificate_key /etc/nginx/acme.sh/mz.fo/key.pem;
+    ssl_trusted_certificate /etc/nginx/acme.sh/mz.fo/cert.pem;
+
+    return 301 https://nx.op.fo$request_uri;
+}
+
+
+
+# -------------------
+# mz.fo/f
+# -------------------
+server {
+    listen 80;
+    server_name
+        fmail.cx *.fmail.cx
+    ;
+    return 301 https://op.fo/f;
+}
+
+server {
+    listen 443 ssl http2;
+    listen [::]:443 ssl http2;
+    server_name
+        fmail.cx *.fmail.cx
+    ;
+
+    ssl_certificate /etc/nginx/acme.sh/fmail.cx/fullchain.pem;
+    ssl_certificate_key /etc/nginx/acme.sh/fmail.cx/key.pem;
+    ssl_trusted_certificate /etc/nginx/acme.sh/fmail.cx/cert.pem;
+
+    return 301 https://op.fo/f;
+}
+
+
+
+# -------------------
+# op.fo/dfs
+# -------------------
+server {
+    listen 80;
+    server_name
+        earthdin.com *.earthdin.com
+    ;
+    return 301 https://op.fo/dfs?$server_name;
+}
+
+server {
+    listen 80;
+    server_name
+        freepowder.com *.freepowder.com
+    ;
+    return 301 https://op.fo/dfs?$server_name;
+}
+
+server {
+    listen 80;
+    server_name
+        ilovetobuild.com *.ilovetobuild.com
+    ;
+    return 301 https://op.fo/dfs?$server_name;
+}
+
+server {
+    listen 80;
+    server_name
+        leonlibre.com *.leonlibre.com
+    ;
+    return 301 https://op.fo/dfs?$server_name;
+}
+
+server {
+    listen 80;
+    server_name
+        nikkapokka.com *.nikkapokka.com
+    ;
+    return 301 https://op.fo/dfs?$server_name;
+}
+
+server {
+    listen 80;
+    server_name
+        playthatsale.com *.playthatsale.com
+    ;
+    return 301 https://op.fo/dfs?$server_name;
+}
+
+server {
+    listen 80;
+    server_name
+        riphard.com *.riphard.com
+    ;
+    return 301 https://op.fo/dfs?$server_name;
+}
+
+server {
+    listen 80;
+    server_name
+        steamchamber.com *.steamchamber.com
+    ;
+    return 301 https://op.fo/dfs?$server_name;
+}
+
+server {
+    listen 80;
+    server_name
+        thepowder.com *.thepowder.com
+    ;
+    return 301 https://op.fo/dfs?$server_name;
+}
+
+server {
+    listen 80;
+    server_name
+        upstreamriver.com *.upstreamriver.com
+    ;
+    return 301 https://op.fo/dfs?$server_name;
+}
+
+server {
+    listen 80;
+    server_name
+        vxg.com *.vxg.com
+    ;
+    return 301 https://op.fo/dfs?$server_name;
+}
+
+server {
+    listen 80;
+    # note: some domains, by some unknown reason to me, always defaulted to the
+    # first entry, so those were split out as separate entries above
+    server_name
+        6fps.com *.6fps.com
+        818.no *.818.no
+        campe.no *.campe.no
+        dere.no *.dere.no
+        dikte.no *.dikte.no
+        fridstol.com *.fridstol.com
+        ifsobe.com *.ifsobe.com
+        kli.no *.kli.no
+        lav.no *.lav.no
+        som.no *.som.no
+        urt.no *.urt.no
+        watchmakeranology.com *.watchmakeranology.com
+    ;
+    return 301 https://op.fo/dfs?$server_name;
+}
+
+server {
+    listen 443 ssl http2;
+    listen [::]:443 ssl http2;
+    server_name
+        6fps.com *.6fps.com
+    ;
+
+    ssl_certificate /etc/nginx/acme.sh/6fps.com/fullchain.pem;
+    ssl_certificate_key /etc/nginx/acme.sh/6fps.com/key.pem;
+    ssl_trusted_certificate /etc/nginx/acme.sh/6fps.com/cert.pem;
+
+    return 301 https://op.fo/dfs?$server_name;
+}
+
+server {
+    listen 443 ssl http2;
+    listen [::]:443 ssl http2;
+    server_name
+        818.no *.818.no
+    ;
+
+    ssl_certificate /etc/nginx/acme.sh/818.no/fullchain.pem;
+    ssl_certificate_key /etc/nginx/acme.sh/818.no/key.pem;
+    ssl_trusted_certificate /etc/nginx/acme.sh/818.no/cert.pem;
+
+    return 301 https://op.fo/dfs?$server_name;
+}
+
+server {
+    listen 443 ssl http2;
+    listen [::]:443 ssl http2;
+    server_name
+        campe.no *.campe.no
+    ;
+
+    ssl_certificate /etc/nginx/acme.sh/campe.no/fullchain.pem;
+    ssl_certificate_key /etc/nginx/acme.sh/campe.no/key.pem;
+    ssl_trusted_certificate /etc/nginx/acme.sh/campe.no/cert.pem;
+
+    return 301 https://op.fo/dfs?$server_name;
+}
+
+server {
+    listen 443 ssl http2;
+    listen [::]:443 ssl http2;
+    server_name
+        dere.no *.dere.no
+    ;
+
+    ssl_certificate /etc/nginx/acme.sh/dere.no/fullchain.pem;
+    ssl_certificate_key /etc/nginx/acme.sh/dere.no/key.pem;
+    ssl_trusted_certificate /etc/nginx/acme.sh/dere.no/cert.pem;
+
+    return 301 https://op.fo/dfs?$server_name;
+}
+
+server {
+    listen 443 ssl http2;
+    listen [::]:443 ssl http2;
+    server_name
+        dikte.no *.dikte.no
+    ;
+
+    ssl_certificate /etc/nginx/acme.sh/dikte.no/fullchain.pem;
+    ssl_certificate_key /etc/nginx/acme.sh/dikte.no/key.pem;
+    ssl_trusted_certificate /etc/nginx/acme.sh/dikte.no/cert.pem;
+
+    return 301 https://op.fo/dfs?$server_name;
+}
+
+server {
+    listen 443 ssl http2;
+    listen [::]:443 ssl http2;
+    server_name
+        earthdin.com *.earthdin.com
+    ;
+
+    ssl_certificate /etc/nginx/acme.sh/earthdin.com/fullchain.pem;
+    ssl_certificate_key /etc/nginx/acme.sh/earthdin.com/key.pem;
+    ssl_trusted_certificate /etc/nginx/acme.sh/earthdin.com/cert.pem;
+
+    return 301 https://op.fo/dfs?$server_name;
+}
+
+server {
+    listen 443 ssl http2;
+    listen [::]:443 ssl http2;
+    server_name
+        freepowder.com *.freepowder.com
+    ;
+
+    ssl_certificate /etc/nginx/acme.sh/freepowder.com/fullchain.pem;
+    ssl_certificate_key /etc/nginx/acme.sh/freepowder.com/key.pem;
+    ssl_trusted_certificate /etc/nginx/acme.sh/freepowder.com/cert.pem;
+
+    return 301 https://op.fo/dfs?$server_name;
+}
+
+server {
+    listen 443 ssl http2;
+    listen [::]:443 ssl http2;
+    server_name
+        fridstol.com *.fridstol.com
+    ;
+
+    ssl_certificate /etc/nginx/acme.sh/fridstol.com/fullchain.pem;
+    ssl_certificate_key /etc/nginx/acme.sh/fridstol.com/key.pem;
+    ssl_trusted_certificate /etc/nginx/acme.sh/fridstol.com/cert.pem;
+
+    return 301 https://op.fo/dfs?$server_name;
+}
+
+server {
+    listen 443 ssl http2;
+    listen [::]:443 ssl http2;
+    server_name
+        ifsobe.com *.ifsobe.com
+    ;
+
+    ssl_certificate /etc/nginx/acme.sh/ifsobe.com/fullchain.pem;
+    ssl_certificate_key /etc/nginx/acme.sh/ifsobe.com/key.pem;
+    ssl_trusted_certificate /etc/nginx/acme.sh/ifsobe.com/cert.pem;
+
+    return 301 https://op.fo/dfs?$server_name;
+}
+
+server {
+    listen 443 ssl http2;
+    listen [::]:443 ssl http2;
+    server_name
+        ilovetobuild.com *.ilovetobuild.com
+    ;
+
+    ssl_certificate /etc/nginx/acme.sh/ilovetobuild.com/fullchain.pem;
+    ssl_certificate_key /etc/nginx/acme.sh/ilovetobuild.com/key.pem;
+    ssl_trusted_certificate /etc/nginx/acme.sh/ilovetobuild.com/cert.pem;
+
+    return 301 https://op.fo/dfs?$server_name;
+}
+
+server {
+    listen 443 ssl http2;
+    listen [::]:443 ssl http2;
+    server_name
+        kli.no *.kli.no
+    ;
+
+    ssl_certificate /etc/nginx/acme.sh/kli.no/fullchain.pem;
+    ssl_certificate_key /etc/nginx/acme.sh/kli.no/key.pem;
+    ssl_trusted_certificate /etc/nginx/acme.sh/kli.no/cert.pem;
+
+    return 301 https://op.fo/dfs?$server_name;
+}
+
+server {
+    listen 443 ssl http2;
+    listen [::]:443 ssl http2;
+    server_name
+        lav.no *.lav.no
+    ;
+
+    ssl_certificate /etc/nginx/acme.sh/lav.no/fullchain.pem;
+    ssl_certificate_key /etc/nginx/acme.sh/lav.no/key.pem;
+    ssl_trusted_certificate /etc/nginx/acme.sh/lav.no/cert.pem;
+
+    return 301 https://op.fo/dfs?$server_name;
+}
+
+server {
+    listen 443 ssl http2;
+    listen [::]:443 ssl http2;
+    server_name
+        leonlibre.com *.leonlibre.com
+    ;
+
+    ssl_certificate /etc/nginx/acme.sh/leonlibre.com/fullchain.pem;
+    ssl_certificate_key /etc/nginx/acme.sh/leonlibre.com/key.pem;
+    ssl_trusted_certificate /etc/nginx/acme.sh/leonlibre.com/cert.pem;
+
+    return 301 https://op.fo/dfs?$server_name;
+}
+
+server {
+    listen 443 ssl http2;
+    listen [::]:443 ssl http2;
+    server_name
+        nikkapokka.com *.nikkapokka.com
+    ;
+
+    ssl_certificate /etc/nginx/acme.sh/nikkapokka.com/fullchain.pem;
+    ssl_certificate_key /etc/nginx/acme.sh/nikkapokka.com/key.pem;
+    ssl_trusted_certificate /etc/nginx/acme.sh/nikkapokka.com/cert.pem;
+
+    return 301 https://op.fo/dfs?$server_name;
+}
+
+server {
+    listen 443 ssl http2;
+    listen [::]:443 ssl http2;
+    server_name
+        playthatsale.com *.playthatsale.com
+    ;
+
+    ssl_certificate /etc/nginx/acme.sh/playthatsale.com/fullchain.pem;
+    ssl_certificate_key /etc/nginx/acme.sh/playthatsale.com/key.pem;
+    ssl_trusted_certificate /etc/nginx/acme.sh/playthatsale.com/cert.pem;
+
+    return 301 https://op.fo/dfs?$server_name;
+}
+
+server {
+    listen 443 ssl http2;
+    listen [::]:443 ssl http2;
+    server_name
+        riphard.com *.riphard.com
+    ;
+
+    ssl_certificate /etc/nginx/acme.sh/riphard.com/fullchain.pem;
+    ssl_certificate_key /etc/nginx/acme.sh/riphard.com/key.pem;
+    ssl_trusted_certificate /etc/nginx/acme.sh/riphard.com/cert.pem;
+
+    return 301 https://op.fo/dfs?$server_name;
+}
+
+server {
+    listen 443 ssl http2;
+    listen [::]:443 ssl http2;
+    server_name
+        som.no *.som.no
+    ;
+
+    ssl_certificate /etc/nginx/acme.sh/som.no/fullchain.pem;
+    ssl_certificate_key /etc/nginx/acme.sh/som.no/key.pem;
+    ssl_trusted_certificate /etc/nginx/acme.sh/som.no/cert.pem;
+
+    return 301 https://op.fo/dfs?$server_name;
+}
+
+server {
+    listen 443 ssl http2;
+    listen [::]:443 ssl http2;
+    server_name
+        steamchamber.com *.steamchamber.com
+    ;
+
+    ssl_certificate /etc/nginx/acme.sh/steamchamber.com/fullchain.pem;
+    ssl_certificate_key /etc/nginx/acme.sh/steamchamber.com/key.pem;
+    ssl_trusted_certificate /etc/nginx/acme.sh/steamchamber.com/cert.pem;
+
+    return 301 https://op.fo/dfs?$server_name;
+}
+
+server {
+    listen 443 ssl http2;
+    listen [::]:443 ssl http2;
+    server_name
+        thepowder.com *.thepowder.com
+    ;
+
+    ssl_certificate /etc/nginx/acme.sh/thepowder.com/fullchain.pem;
+    ssl_certificate_key /etc/nginx/acme.sh/thepowder.com/key.pem;
+    ssl_trusted_certificate /etc/nginx/acme.sh/thepowder.com/cert.pem;
+
+    return 301 https://op.fo/dfs?$server_name;
+}
+
+server {
+    listen 443 ssl http2;
+    listen [::]:443 ssl http2;
+    server_name
+        upstreamriver.com *.upstreamriver.com
+    ;
+
+    ssl_certificate /etc/nginx/acme.sh/upstreamriver.com/fullchain.pem;
+    ssl_certificate_key /etc/nginx/acme.sh/upstreamriver.com/key.pem;
+    ssl_trusted_certificate /etc/nginx/acme.sh/upstreamriver.com/cert.pem;
+
+    return 301 https://op.fo/dfs?$server_name;
+}
+
+server {
+    listen 443 ssl http2;
+    listen [::]:443 ssl http2;
+    server_name
+        urt.no *.urt.no
+    ;
+
+    ssl_certificate /etc/nginx/acme.sh/urt.no/fullchain.pem;
+    ssl_certificate_key /etc/nginx/acme.sh/urt.no/key.pem;
+    ssl_trusted_certificate /etc/nginx/acme.sh/urt.no/cert.pem;
+
+    return 301 https://op.fo/dfs?$server_name;
+}
+
+server {
+    listen 443 ssl http2;
+    listen [::]:443 ssl http2;
+    server_name
+        vxg.com *.vxg.com
+    ;
+
+    ssl_certificate /etc/nginx/acme.sh/vxg.com/fullchain.pem;
+    ssl_certificate_key /etc/nginx/acme.sh/vxg.com/key.pem;
+    ssl_trusted_certificate /etc/nginx/acme.sh/vxg.com/cert.pem;
+
+    return 301 https://op.fo/dfs?$server_name;
+}
+
+server {
+    listen 443 ssl http2;
+    listen [::]:443 ssl http2;
+    server_name
+        watchmakeranalogy.com *.watchmakeranalogy.com
+    ;
+
+    ssl_certificate /etc/nginx/acme.sh/watchmakeranalogy.com/fullchain.pem;
+    ssl_certificate_key /etc/nginx/acme.sh/watchmakeranalogy.com/key.pem;
+    ssl_trusted_certificate /etc/nginx/acme.sh/watchmakeranalogy.com/cert.pem;
+
+    return 301 https://op.fo/dfs?$server_name;
+}