av/pet-project-server
1
0
Fork 0
Code Pull Requests Activity

Добавлен прокси для Яндекс.Диска

Browse Source
This commit is contained in:
Anton Vakhrushev
2019-07-17 22:39:26 +03:00
parent 7e1cb26f5c
commit 9c46b9510d
6 changed files with 63 additions and 44 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
ansible/templates/Caddyfile.j2
View File

@ -5,7 +5,7 @@ status.vakhrushev.me, :29999 {
}
tls anwinged@ya.ru
basicauth / anton show-me-the-status
basicauth / {{ netdata.login }} {{ netdata.password }}
}
# Homepage
@ -22,10 +22,21 @@ homepage.vakhrushev.me, vakhrushev.me {
# Notes app
notes.vakhrushev.me {
proxy / 127.0.0.1:41080 {
proxy / 127.0.0.1:{{ notes_port }} {
transparent
}
tls anwinged@ya.ru
basicauth / anton show-me-the-notes
basicauth / {{ notes.login }} {{ notes.password }}
}
# Yandex Proxy Imager
preview.vakhrushev.me {
proxy /img https://webdav.yandex.ru {
transparent
header_upstream User-Agent "yandex-disk-previewer/1.0"
header_upstream Authorization "Basic {{ (yandex_disk.login ~ ':' ~ yandex_disk.password) | b64encode }}"
}
tls anwinged@ya.ru
}

38
ansible/templates/vakhrushev.me.conf.j2
View File

@ -1,38 +0,0 @@
server {
server_name docker.vakhrushev.me;
return 301 https://docker.vakhrushev.me$request_uri;
}
server {
server_name www.docker.vakhrushev.me;
return 301 https://docker.vakhrushev.me$request_uri;
}
server {
listen 443 ssl http2;
server_name docker.vakhrushev.me;
ssl on;
ssl_certificate {{ vars[nginx_ssl_name + "_ssl_certificate"] }};
ssl_certificate_key {{ vars[nginx_ssl_name + "_ssl_key"] }};
ssl_trusted_certificate {{ vars[nginx_ssl_name + "_ssl_certificate"] }};
ssl_session_cache shared:SSL:50m;
ssl_session_timeout 5m;
ssl_stapling on;
ssl_stapling_verify on;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers "ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4";
ssl_dhparam {{ vars[nginx_ssl_name + "_ssl_dhparam"] }};
ssl_prefer_server_ciphers on;
location / {
proxy_pass http://localhost:{{ nginx_proxy_params.port }};
proxy_set_header Host $host;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Real-IP $remote_addr;
}
}