ProjectSegfault/ansible
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

caddyfmt on server-specific confs

Browse Source
This commit is contained in:
Arya 2023-07-20 14:24:04 +05:30
parent 911014f3c3
commit ffd4cecfe9
Signed by: arya
GPG Key ID: 842D12BDA50DF120
6 changed files with 95 additions and 99 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

36
privfrontends/templates/core/apps.Caddyfile
View File

@ -22,23 +22,23 @@ social.projectsegfau.lt {
# And https://poa.st/notice/AWDToOiKAl4BPhdEB6 # And https://poa.st/notice/AWDToOiKAl4BPhdEB6
# And https://gleasonator.com/notice/AW3PsTi4WCWEUbN0uO # And https://gleasonator.com/notice/AW3PsTi4WCWEUbN0uO
media.social.projectsegfau.lt { media.social.projectsegfau.lt {
handle /media/* { handle /media/* {
reverse_proxy 192.168.5.2:4011 { reverse_proxy 192.168.5.2:4011 {
transport http { transport http {
response_header_timeout 10s response_header_timeout 10s
read_timeout 15s read_timeout 15s
} }
} }
} }
handle /proxy/* { handle /proxy/* {
reverse_proxy 192.168.5.2:4011 { reverse_proxy 192.168.5.2:4011 {
transport http { transport http {
response_header_timeout 10s response_header_timeout 10s
read_timeout 15s read_timeout 15s
} }
} }
} }
} }
# Cinny # Cinny
@ -275,8 +275,8 @@ kbin.projectsegfau.lt, kb.psf.lt {
import def import def
} }
gothub.dev.projectsegfau.lt gh.dev.psf.lt { gothub.dev.projectsegfau.lt gh.dev.psf.lt {
reverse_proxy 192.168.5.2:1025 reverse_proxy 192.168.5.2:1025
import def import def
} }
ak.psf.lt { ak.psf.lt {
redir https://social.projectsegfau.lt{uri} redir https://social.projectsegfau.lt{uri}

6
privfrontends/templates/core/internal.Caddyfile
View File

@ -80,12 +80,12 @@ c.midou.dev {
# Headscale (tailscale control server) # Headscale (tailscale control server)
hs.projectsegfau.lt { hs.projectsegfau.lt {
reverse_proxy /web* https://192.168.5.5:9443 { reverse_proxy /web* https://192.168.5.5:9443 {
transport http { transport http {
tls_insecure_skip_verify tls_insecure_skip_verify
} }
} }
reverse_proxy * 192.168.5.5:8089 reverse_proxy * 192.168.5.5:8089
} }
# Caddy daily build (for ansible) # Caddy daily build (for ansible)
@ -100,5 +100,5 @@ docs.gothub.app {
} }
# OLD URLs # OLD URLs
http://mutahar.rocks, http://*.mutahar.rocks { http://mutahar.rocks, http://*.mutahar.rocks {
redir https://projectsegfau.lt redir https://projectsegfau.lt
} }

88
privfrontends/templates/eu/misc.Caddyfile
View File

@ -1,71 +1,71 @@
stats.eu.projectsegfau.lt { stats.eu.projectsegfau.lt {
basicauth * { basicauth * {
admin $2a$14$4R5m1Kl74xwVp8MsR.jFeOpa6ssXwHN7ANwJi300zIrienTG44Abi admin $2a$14$4R5m1Kl74xwVp8MsR.jFeOpa6ssXwHN7ANwJi300zIrienTG44Abi
} }
reverse_proxy localhost:9100 reverse_proxy localhost:9100
import def import def
} }
inv.bp.projectsegfau.lt, i.bp.psf.lt { inv.bp.projectsegfau.lt, i.bp.psf.lt {
reverse_proxy localhost:7573 reverse_proxy localhost:7573
header { header {
# disable FLoC tracking # disable FLoC tracking
Permissions-Policy "accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), clipboard-read=(), display-capture=(), document-domain=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), screen-wake-lock=(), serial=(), usb=(), sync-xhr=(), xr-spatial-tracking=()"; Permissions-Policy "accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), clipboard-read=(), display-capture=(), document-domain=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), screen-wake-lock=(), serial=(), usb=(), sync-xhr=(), xr-spatial-tracking=()";
# enable HSTS # enable HSTS
Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
# disable clients from sniffing the media type # disable clients from sniffing the media type
X-Content-Type-Options nosniff X-Content-Type-Options nosniff
-Content-Security-Policy -Content-Security-Policy
# keep referrer data off of HTTP connections # keep referrer data off of HTTP connections
Referrer-Policy no-referrer-when-downgrade Referrer-Policy no-referrer-when-downgrade
X-XSS-Protection "1; mode=block" X-XSS-Protection "1; mode=block"
defer defer
} }
log { log {
output discard output discard
format filter { format filter {
wrap console wrap console
fields { fields {
request>remote_ip replace REDACTED request>remote_ip replace REDACTED
request>headers>X-Forwarded-For replace REDACTED request>headers>X-Forwarded-For replace REDACTED
} }
} }
} }
import torloc invbp import torloc invbp
import i2ploc pjsfi2szfkb4guqzmfmlyq4no46fayertjrwt4h2uughccrh2lvq.b32.i2p import i2ploc pjsfi2szfkb4guqzmfmlyq4no46fayertjrwt4h2uughccrh2lvq.b32.i2p
} }
proxy.lbry.projectsegfau.lt { proxy.lbry.projectsegfau.lt {
reverse_proxy localhost:3001 reverse_proxy localhost:3001
import def import def
} }
aryak.me { aryak.me {
reverse_proxy https://prox-arya.p.projectsegfau.lt { reverse_proxy https://prox-arya.p.projectsegfau.lt {
header_up Host prox-arya.p.projectsegfau.lt header_up Host prox-arya.p.projectsegfau.lt
} }
} }
arya.projectsegfau.lt { arya.projectsegfau.lt {
redir https://aryak.me{uri} redir https://aryak.me{uri}
} }
## OLD URL REDIRECTS ## OLD URL REDIRECTS
bb.us.projectsegfau.lt bb.in.projectsegfau.lt bb.eu.projectsegfau.lt bb.projectsegfau.lt { bb.us.projectsegfau.lt bb.in.projectsegfau.lt bb.eu.projectsegfau.lt bb.projectsegfau.lt {
import def import def
import torloc beatbump import torloc beatbump
import i2ploc pjsflmvtqax7ii44qy4ladap65c3kqspbs7h7krqy7x43uovklla.b32.i2p import i2ploc pjsflmvtqax7ii44qy4ladap65c3kqspbs7h7krqy7x43uovklla.b32.i2p
redir https://hyperpipe.projectsegfau.lt{uri} redir https://hyperpipe.projectsegfau.lt{uri}
} }
invidious.mutahar.rocks { invidious.mutahar.rocks {
redir https://inv.bp.projectsegfau.lt{uri} permanent redir https://inv.bp.projectsegfau.lt{uri} permanent
} }
ferrit.projectsegfau.lt snooddit.projectsegfau.lt libreddit.mutahar.rocks { ferrit.projectsegfau.lt snooddit.projectsegfau.lt libreddit.mutahar.rocks {
redir https://libreddit.projectsegfau.lt{uri} permanent redir https://libreddit.projectsegfau.lt{uri} permanent
} }
lbry.mutahar.rocks { lbry.mutahar.rocks {
redir https://lbry.projectsegfau.lt{uri} permanent redir https://lbry.projectsegfau.lt{uri} permanent
} }
nitter.mutahar.rocks { nitter.mutahar.rocks {
redir https://nitter.projectsegfau.lt{uri} permanent redir https://nitter.projectsegfau.lt{uri} permanent
} }
#redir inv.bp.mutahar.rocks inv.bp.projectsegfau.lt permanent #redir inv.bp.mutahar.rocks inv.bp.projectsegfau.lt permanent
#redir libreddit.mutahar.rocks libreddit.projectsegfau.lt permanent #redir libreddit.mutahar.rocks libreddit.projectsegfau.lt permanent

8
privfrontends/templates/eu/pubnix.Caddyfile
View File

@ -4,12 +4,12 @@
import acmedns import acmedns
} }
*.p.psf.lt { *.p.psf.lt {
@host header_regexp host Host ^([a-zA-Z0-9]+\-)?([A-Za-z0-9]+)\.p\.psf\.lt @host header_regexp host Host ^([a-zA-Z0-9]+\-)?([A-Za-z0-9]+)\.p\.psf\.lt
handle @host { handle @host {
reverse_proxy 10.7.0.2:80 { reverse_proxy 10.7.0.2:80 {
header_up Host "{re.host.1}{re.host.2}.p.projectsegfau.lt" header_up Host "{re.host.1}{re.host.2}.p.projectsegfau.lt"
} }
} }
import acmedns import acmedns
} }
# Redirect base subdomain to the pubnix homepage # Redirect base subdomain to the pubnix homepage

42
privfrontends/templates/in/misc.Caddyfile
View File

@ -1,5 +1,5 @@
bitpuit.in.projectsegfau.lt { bitpuit.in.projectsegfau.lt {
respond "Go fuck yourself devrand" respond "Go fuck yourself devrand"
} }
dd.psf.lt { dd.psf.lt {
reverse_proxy :8008 reverse_proxy :8008
@ -9,34 +9,34 @@ libretranslate.in.projectsegfau.lt {
} }
# PERSONAL # PERSONAL
https://m.in.projectsegfau.lt:8448 m.in.projectsegfau.lt { https://m.in.projectsegfau.lt:8448 m.in.projectsegfau.lt {
import def import def
reverse_proxy http://192.168.1.47:8008 reverse_proxy http://192.168.1.47:8008
} }
files.perso.in.projectsegfau.lt files.perso.in.projectsegfau.lt:6942 { files.perso.in.projectsegfau.lt files.perso.in.projectsegfau.lt:6942 {
file_server { file_server {
browse browse
} }
root * /zfspool/files root * /zfspool/files
} }
tnfiles.perso.in.projectsegfau.lt { tnfiles.perso.in.projectsegfau.lt {
file_server { file_server {
browse browse
} }
root * /zfspool/files/tn-sw root * /zfspool/files/tn-sw
} }
discourse.tildevarsh.in { discourse.tildevarsh.in {
reverse_proxy https://192.168.1.21:443 { reverse_proxy https://192.168.1.21:443 {
transport http { transport http {
tls_insecure_skip_verify tls_insecure_skip_verify
} }
header_up X-Real-IP {remote_host} header_up X-Real-IP {remote_host}
} }
} }
jf.perso.in.projectsegfau.lt { jf.perso.in.projectsegfau.lt {
reverse_proxy 192.168.1.20:8096 reverse_proxy 192.168.1.20:8096
import def import def
} }
nc.perso.in.projectsegfau.lt { nc.perso.in.projectsegfau.lt {
reverse_proxy 192.168.1.20:80 reverse_proxy 192.168.1.20:80
import def import def
} }

14
privfrontends/templates/us/misc.Caddyfile
View File

@ -1,11 +1,7 @@
stats.us.projectsegfau.lt { stats.us.projectsegfau.lt {
basicauth * { basicauth * {
admin $2a$14$XhZ/Akcdk60yjMTKgYClr.sog.2B6WyECyc98lUJZp3diflifCR9O admin $2a$14$XhZ/Akcdk60yjMTKgYClr.sog.2B6WyECyc98lUJZp3diflifCR9O
} }
reverse_proxy http://127.0.0.1:9100 reverse_proxy http://127.0.0.1:9100
import def import def
}
fb.us.projectsegfau.lt {
import def
reverse_proxy localhost:8065
} }