diff --git a/ops/nginx/conf.d.dev/filterlists.conf b/ops/nginx/conf.d.dev/filterlists.conf index f5921c051..147533120 100644 --- a/ops/nginx/conf.d.dev/filterlists.conf +++ b/ops/nginx/conf.d.dev/filterlists.conf @@ -1,4 +1,3 @@ -# https://github.com/collinbarrett/FilterLists server { listen 80 default_server; diff --git a/ops/nginx/conf.d/filterlists.conf b/ops/nginx/conf.d/filterlists.conf index 7021f9cdd..16ac965df 100644 --- a/ops/nginx/conf.d/filterlists.conf +++ b/ops/nginx/conf.d/filterlists.conf @@ -1,4 +1,3 @@ -# https://github.com/collinbarrett/FilterLists server { listen 443 default_server ssl http2; server_name filterlists.com; diff --git a/ops/nginx/svr-includes/security.conf b/ops/nginx/svr-includes/security.conf index a53c73a47..a90571540 100644 --- a/ops/nginx/svr-includes/security.conf +++ b/ops/nginx/svr-includes/security.conf @@ -3,4 +3,4 @@ server_tokens off; add_header X-Content-Type-Options "nosniff" always; add_header X-Frame-Options "SAMEORIGIN" always; add_header X-XSS-Protection "1; mode=block" always; -add_header Referrer-Policy "no-referrer" always; +add_header Referrer-Policy "no-referrer" always; \ No newline at end of file diff --git a/ops/nginx/svr-includes/ssl.conf b/ops/nginx/svr-includes/ssl.conf index 4cfb00994..7c610d35e 100644 --- a/ops/nginx/svr-includes/ssl.conf +++ b/ops/nginx/svr-includes/ssl.conf @@ -12,7 +12,8 @@ ssl_dhparam /etc/nginx/cert/dhparam.pem; add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"; + # https://support.cloudflare.com/hc/en-us/articles/204899617-Authenticated-Origin-Pulls ssl_client_certificate /etc/nginx/cert/cloudflare.crt; -ssl_verify_client on; +ssl_verify_client on; \ No newline at end of file