This reverts commit 58bca700.

That network is allowed access to the host in the firewall. For proxying
the Kodi webui.

This reverts commit 6e2443d5.

For proxying Kodi.

The Transmission client expect basic authentication, Vouch can't be used
for that.

Proxy the Transmission webui, require authentication.

This reverts commit c2640da8.

Until I have authentation sorted.

I'm getting nowhere. I still got an A+, but now I'm marked down because
I don't support TLS 1.2.

Marked as weak in SSL Labs' test.

SSL Labs' test complains that it doesn't offer forward secrecy.

Prettier editing.

Up to now I supported older browsers by supporting older versions of TLS
and cipher suites. I still think it makes sense for my blog, etc. but
not for Nextcloud or GitLab. So here's the first step, make the previous
default SSL configuration be ssl-legacy (split out the common parts to
ssl-common) and next is ssl-modern.

Use the git skeleton file. Apply changes from the new hooks.

It has a hard-coded server name, it should be in the that server's
config.

This reverts commit 7885e91e.

So I can get the real client IP in the service.

If the acme challenge is in a location block but the default redirection
is not, the default always takes precedence (Nginx won't resolve the
order between the different directives, but it will between different
location blocks).