From 0cc915b7d11b8b2ce5e82b793b5da384bde74d7b Mon Sep 17 00:00:00 2001 From: "Collin M. Barrett" Date: Sun, 23 Jun 2019 20:40:27 -0500 Subject: [PATCH] tweak nginx conf files --- ops/nginx/conf.d.dev/filterlists.conf | 1 - ops/nginx/conf.d/filterlists.conf | 1 - ops/nginx/svr-includes/security.conf | 2 +- ops/nginx/svr-includes/ssl.conf | 3 ++- 4 files changed, 3 insertions(+), 4 deletions(-) diff --git a/ops/nginx/conf.d.dev/filterlists.conf b/ops/nginx/conf.d.dev/filterlists.conf index f5921c051..147533120 100644 --- a/ops/nginx/conf.d.dev/filterlists.conf +++ b/ops/nginx/conf.d.dev/filterlists.conf @@ -1,4 +1,3 @@ -# https://github.com/collinbarrett/FilterLists server { listen 80 default_server; diff --git a/ops/nginx/conf.d/filterlists.conf b/ops/nginx/conf.d/filterlists.conf index 7021f9cdd..16ac965df 100644 --- a/ops/nginx/conf.d/filterlists.conf +++ b/ops/nginx/conf.d/filterlists.conf @@ -1,4 +1,3 @@ -# https://github.com/collinbarrett/FilterLists server { listen 443 default_server ssl http2; server_name filterlists.com; diff --git a/ops/nginx/svr-includes/security.conf b/ops/nginx/svr-includes/security.conf index a53c73a47..a90571540 100644 --- a/ops/nginx/svr-includes/security.conf +++ b/ops/nginx/svr-includes/security.conf @@ -3,4 +3,4 @@ server_tokens off; add_header X-Content-Type-Options "nosniff" always; add_header X-Frame-Options "SAMEORIGIN" always; add_header X-XSS-Protection "1; mode=block" always; -add_header Referrer-Policy "no-referrer" always; +add_header Referrer-Policy "no-referrer" always; \ No newline at end of file diff --git a/ops/nginx/svr-includes/ssl.conf b/ops/nginx/svr-includes/ssl.conf index 4cfb00994..7c610d35e 100644 --- a/ops/nginx/svr-includes/ssl.conf +++ b/ops/nginx/svr-includes/ssl.conf @@ -12,7 +12,8 @@ ssl_dhparam /etc/nginx/cert/dhparam.pem; add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"; + # https://support.cloudflare.com/hc/en-us/articles/204899617-Authenticated-Origin-Pulls ssl_client_certificate /etc/nginx/cert/cloudflare.crt; -ssl_verify_client on; +ssl_verify_client on; \ No newline at end of file