Skip to content
Snippets Groups Projects
Select Git revision
  • 4fed031ae5dc809e025bf2d31fa6e94e17837920
  • master default
  • v1
  • btrfs-backup
4 results

renew-cert.yaml

Blame
    • nimrod's avatar
      4fed031a
      Rotate all keys once a year. · 4fed031a
      nimrod authored 
      Cleans up the code a bit, I think. Also, why do host keys or account
keys are good for 4 years but the DH parameters are onl good for 4
weeks? Settle on 1 year for all of them.
      4fed031a
      History
      Rotate all keys once a year.
      nimrod authored 
      Cleans up the code a bit, I think. Also, why do host keys or account
keys are good for 4 years but the DH parameters are onl good for 4
weeks? Settle on 1 year for all of them.
    auth.shore.co.il.conf 1020 B
    1
    2
    3
    4
    5
    6
    7
    8
    9
    10
    11
    12
    13
    14
    15
    16
    17
    18
    19
    20
    21
    22
    23
    24
    25
    26
    27
    28
    29
    30
    31
    32 
    

    

    

    map $host $auth { default auth; }

server {
    listen      80;
    listen      [::]:80;
    server_name auth.shore.co.il;
    include     snippets/robots-disallow-all.conf;
    include     snippets/ads-txt.conf;
    include     snippets/security-txt.conf;
    include     snippets/www-acme-challenge.conf;
    include     snippets/redirect-https.conf;
}

server {
    listen      443 ssl http2;
    listen      [::]:443 ssl http2;
    server_name auth.shore.co.il;
    include     snippets/robots-disallow-all.conf;
    include     snippets/ads-txt.conf;
    include     snippets/security-txt.conf;
    include     snippets/ssl.conf;

    location / {
        proxy_pass              http://$auth:8080$request_uri;
        proxy_http_version      1.1;
        include                 snippets/proxy-headers.conf;
        allow                   163.172.74.36;  # ns4.shore.co.il
        allow                   62.219.131.121;  # ns1.shore.co.il
        include                 snippets/allow-private-ips.conf;
    }
}