1
0
Fork 0
mirror of https://github.com/DO1JLR/ansible_playbook_servers.git synced 2024-09-14 19:53:56 +02:00

Adding m2 domain preview

This commit is contained in:
L3D 2022-04-26 21:04:03 +02:00
parent 45ad59a7d8
commit 8a8454af26
Signed by: l3d
GPG key ID: CD08445BFF4313D1
5 changed files with 51 additions and 3 deletions

View file

@ -43,6 +43,13 @@ local_users:
- l3d@derpy.l3d.yt - l3d@derpy.l3d.yt
- l3d@backup-rsa.l3d.yt - l3d@backup-rsa.l3d.yt
- l3d@bsns.l3d - l3d@bsns.l3d
m2:
- l3d@pinkie.l3d.yt
- l3d@mobile.l3d.yt
- l3d@backup.l3d.yt
- l3d@derpy.l3d.yt
- l3d@backup-rsa.l3d.yt
- l3d@bsns.l3d
sshd__allowed_users: sshd__allowed_users:
- "root" - "root"
@ -55,6 +62,7 @@ sshd__allowed_users:
- "preview" - "preview"
- 'see' - 'see'
- 'winkekatze' - 'winkekatze'
- 'm2'
sshd__allowed_groups: sshd__allowed_groups:
- "root" - "root"
@ -67,6 +75,7 @@ sshd__allowed_groups:
- "preview" - "preview"
- 'see' - 'see'
- 'winkekatze' - 'winkekatze'
- 'm2'
local_accounts: local_accounts:
- 'l3d' - 'l3d'
@ -76,6 +85,7 @@ local_accounts:
- 'preview' - 'preview'
- 'see' - 'see'
- 'winkekatze' - 'winkekatze'
- 'm2'
acme_domain_unwant_list: [] acme_domain_unwant_list: []
@ -150,6 +160,9 @@ nginx_sites:
webroot: webroot:
user: 'winkekatze' user: 'winkekatze'
- name: 'www.winkekatze.tv' - name: 'www.winkekatze.tv'
- name: 'm2.xn--see-br-0xa.se'
webroot:
user: 'm2'
acme_notification_email: "{{ _acme_notification_email }}" acme_notification_email: "{{ _acme_notification_email }}"

@ -1 +1 @@
Subproject commit 53c00088ef8e72c6a42e2b7016538883ee5588ce Subproject commit f49dba9f447ae01a73d61bf582b68585e4414d5b

@ -1 +1 @@
Subproject commit b6465e6f3266f9215748327530b0ebc8f1a71171 Subproject commit ef4cf763795d61e883b1867f4a3149568d4acb2d

@ -1 +1 @@
Subproject commit f510b669e460bb09b6d6f7101462d06b12062a8a Subproject commit 5cd1afc65018125ee419917b9b87bb8d038f6fcc

View file

@ -0,0 +1,35 @@
server {
listen 443 ssl http2;
listen [::]:443 ssl http2;
server_name m2.xn--see-br-0xa.se m2.see-bör.se;
include snippets/tls_parameters_{{ site.name }}.snippet.conf;
include snippets/tls_certificate_{{ site.name }}.snippet.conf;
include snippets/logging_{{ site.name }}.snippet.conf;
root /srv/www/m2.xn--see-br-0xa.se;
location / {
add_header X-Served-By "teapot CYBER 4.0 (with blockchain)";
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains";
charset utf-8;
try_files $uri $uri/ =404;
}
}
# redirect UTF-8 encoded domain... just in case
server {
listen 80;
listen [::]:80;
server_name m2.see-bör.se;
include snippets/logging_{{ site.name }}.snippet.conf;
include snippets/acmetool.snippet.conf;
location ^~ / {
return 308 https://m2.xn--see-br-0xa.se$request_uri;
}
}