Files
beepi/playbooks/nginx/sites-enabled/secretbee.buzz
T
2026-04-27 17:03:44 +02:00

33 lines
789 B
Plaintext

limit_req_zone $binary_remote_addr zone=mylimit:10m rate=10r/s;
server {
listen 80 default_server;
server_name secretbee.buzz;
limit_req zone=mylimit burst=20;
location / {
return 301 https://$host$request_uri;
}
}
server {
listen 443 ssl;
server_name secretbee.buzz;
limit_req zone=mylimit burst=20;
root /var/www;
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
ssl_certificate /etc/letsencrypt/live/secretbee.buzz/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/secretbee.buzz/privkey.pem;
ssl_protocols TLSv1.2 TLSv1.3;
ssl_ciphers HIGH:!aNULL:!MD5;
location / {
default_type "text/html";
try_files $uri $uri.html $uri/index.html index.html;
}
}