Update configs
Miraty
2 years ago
parent
14ca097799
commit
f2d7106f7d
@ -1,27 +0,0 @@
|
||||
server:
|
||||
rundir: "/run/knot"
|
||||
user: "knot:knot"
|
||||
listen: [ "0.0.0.0@53", "::@53" ]
|
||||
|
||||
log:
|
||||
- target: "/var/log/knot.log"
|
||||
any: "debug"
|
||||
|
||||
database:
|
||||
storage: "/var/lib/knot"
|
||||
|
||||
policy:
|
||||
- id: "niver"
|
||||
algorithm: "ed25519"
|
||||
nsec3: "on"
|
||||
|
||||
template:
|
||||
- id: "niver"
|
||||
storage: "/var/lib/knot/zones"
|
||||
file: "%s.zone"
|
||||
dnssec-signing: "on"
|
||||
dnssec-policy: "niver"
|
||||
|
||||
zone:
|
||||
- domain: "niv.re."
|
||||
template: "niver"
|
||||
@ -0,0 +1,48 @@
|
||||
server:
|
||||
version: "Knot DNS"
|
||||
nsid: "Potiron"
|
||||
rundir: "/run/knot"
|
||||
user: "knot:knot"
|
||||
listen: [ "2a01:e0a:15c:2e40:acab:3:3:3@53", "0.0.0.0@53" ]
|
||||
|
||||
log:
|
||||
- target: "/var/log/knot.log"
|
||||
any: "debug"
|
||||
|
||||
database:
|
||||
storage: "/var/lib/knot"
|
||||
|
||||
key:
|
||||
- id: "potironframboise."
|
||||
algorithm: "hmac-sha512"
|
||||
secret: "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
|
||||
|
||||
remote:
|
||||
- id: "Framboise"
|
||||
address: [ "2a0b:cbc0:1103:2::106f@53", "45.13.104.169@53" ]
|
||||
key: "potironframboise."
|
||||
|
||||
acl:
|
||||
- id: "FramboiseTrans"
|
||||
address: [ "2a0b:cbc0:1103:2::106f", "45.13.104.169" ]
|
||||
key: "potironframboise."
|
||||
action: "transfer"
|
||||
|
||||
policy:
|
||||
- id: "niver"
|
||||
algorithm: "ed25519"
|
||||
nsec3: "on"
|
||||
|
||||
template:
|
||||
- id: "niver"
|
||||
storage: "/var/lib/knot/zones"
|
||||
file: "%s.zone"
|
||||
notify: "Framboise"
|
||||
acl: "FramboiseTrans"
|
||||
zonefile-load: "difference"
|
||||
dnssec-signing: "on"
|
||||
dnssec-policy: "niver"
|
||||
|
||||
zone:
|
||||
- domain: "niv.re."
|
||||
template: "niver"
|
||||
@ -0,0 +1,40 @@
|
||||
server:
|
||||
version: "Knot DNS"
|
||||
nsid: "Framboise"
|
||||
rundir: "/run/knot"
|
||||
user: "knot:knot"
|
||||
listen: [ "2a0b:cbc0:1103:2::106f@53", "0.0.0.0@53" ]
|
||||
|
||||
log:
|
||||
- target: "/var/log/knot.log"
|
||||
any: "debug"
|
||||
|
||||
database:
|
||||
storage: "/var/lib/knot"
|
||||
|
||||
key:
|
||||
- id: "potironframboise."
|
||||
algorithm: "hmac-sha512"
|
||||
secret: "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
|
||||
|
||||
remote:
|
||||
- id: "Potiron"
|
||||
address: [ "2a01:e0a:15c:2e40:acab:3:3:3@53", "82.66.61.19@53" ]
|
||||
key: "potironframboise."
|
||||
|
||||
acl:
|
||||
- id: "PotironNotif"
|
||||
address: [ "2a01:e0a:15c:2e40:acab:3:3:3", "82.66.61.19" ]
|
||||
key: "potironframboise."
|
||||
action: "notify"
|
||||
|
||||
template:
|
||||
- id: "niver"
|
||||
storage: "/var/lib/knot/zones"
|
||||
file: "%s.zone"
|
||||
master: "Potiron"
|
||||
acl: "PotironNotif"
|
||||
|
||||
zone:
|
||||
- domain: "niv.re."
|
||||
template: "niver"
|
||||
@ -0,0 +1,29 @@
|
||||
server {
|
||||
listen 443 ssl http2 default_server;
|
||||
listen [::]:443 ssl http2 default_server;
|
||||
|
||||
ssl_certificate /etc/ssl/certs/niver.crt;
|
||||
ssl_certificate_key /etc/ssl/private/niver.key;
|
||||
ssl_stapling off;
|
||||
|
||||
root /var/www/errors;
|
||||
try_files index.php index.html $uri $uri/;
|
||||
index index.php index.html;
|
||||
|
||||
location / {
|
||||
root /var/www/errors;
|
||||
try_files /index.php =500;
|
||||
index index.php;
|
||||
fastcgi_split_path_info ^(.+\.php)(/.+)$;
|
||||
fastcgi_pass unix:/var/run/php/errors.sock;
|
||||
include /etc/nginx/inc/fastcgi.conf;
|
||||
}
|
||||
|
||||
include /etc/nginx/inc/tls.conf;
|
||||
include /etc/nginx/inc/errors.conf;
|
||||
|
||||
error_log /var/log/nginx/default-server-error.log info;
|
||||
access_log /var/log/nginx/default-server-access.log;
|
||||
|
||||
more_set_headers "Content-Security-Policy : default-src 'none'; frame-ancestors 'none';";
|
||||
}
|
||||
@ -1,8 +0,0 @@
|
||||
-----BEGIN DH PARAMETERS-----
|
||||
MIIBCAKCAQEA//////////+t+FRYortKmq/cViAnPTzx2LnFg84tNpWp4TZBFGQz
|
||||
+8yTnc4kmz75fS/jY2MMddj2gbICrsRhetPfHtXV/WVhJDP1H18GbtCFY2VVPe0a
|
||||
87VXE15/V8k1mE8McODmi3fipona8+/och3xWKE2rec1MKzKT0g6eXq8CrGCsyT7
|
||||
YdEIqUuyyOP7uWrat2DX9GgdT0Kj3jlN9K5W7edjcrsZCwenyO4KbXCeAvzhzffi
|
||||
7MA0BM0oNC9hkXL+nOmFg/+OTxIy7vKBg8P+OxtMb61zO7X8vC7CIAXFjvGDfRaD
|
||||
ssbzSibBsu/6iGtCOGEoXJf//////////wIBAg==
|
||||
-----END DH PARAMETERS-----
|
||||
@ -0,0 +1,20 @@
|
||||
server {
|
||||
listen 80 default_server;
|
||||
listen [::]:80 default_server;
|
||||
|
||||
return 400; # Don't allow unsecure HTTP requests
|
||||
|
||||
# Display an explanation page
|
||||
error_page 400 @http400;
|
||||
location @http400 {
|
||||
root /var/www/errors;
|
||||
try_files /http.php =500;
|
||||
index http.php;
|
||||
fastcgi_split_path_info ^(.+\.php)(/.+)$;
|
||||
fastcgi_pass unix:/var/run/php/errors.sock;
|
||||
include inc/fastcgi.conf;
|
||||
}
|
||||
|
||||
error_log /var/log/nginx/http-error.log info;
|
||||
access_log /var/log/nginx/http-access.log;
|
||||
}
|
||||
@ -0,0 +1,11 @@
|
||||
-----BEGIN DH PARAMETERS-----
|
||||
MIIBiAKCAYEA//////////+t+FRYortKmq/cViAnPTzx2LnFg84tNpWp4TZBFGQz
|
||||
+8yTnc4kmz75fS/jY2MMddj2gbICrsRhetPfHtXV/WVhJDP1H18GbtCFY2VVPe0a
|
||||
87VXE15/V8k1mE8McODmi3fipona8+/och3xWKE2rec1MKzKT0g6eXq8CrGCsyT7
|
||||
YdEIqUuyyOP7uWrat2DX9GgdT0Kj3jlN9K5W7edjcrsZCwenyO4KbXCeAvzhzffi
|
||||
7MA0BM0oNC9hkXL+nOmFg/+OTxIy7vKBg8P+OxtMb61zO7X8vC7CIAXFjvGDfRaD
|
||||
ssbzSibBsu/6iGtCOGEfz9zeNVs7ZRkDW7w09N75nAI4YbRvydbmyQd62R0mkff3
|
||||
7lmMsPrBhtkcrv4TCYUTknC0EwyTvEN5RPT9RFLi103TZPLiHnH1S/9croKrnJ32
|
||||
nuhtK8UiNjoNq8Uhl5sN6todv5pC1cRITgq80Gv6U93vPBsg7j/VnXwl5B0rZsYu
|
||||
N///////////AgEC
|
||||
-----END DH PARAMETERS-----
|
||||
@ -0,0 +1,13 @@
|
||||
-----BEGIN DH PARAMETERS-----
|
||||
MIICCAKCAgEA//////////+t+FRYortKmq/cViAnPTzx2LnFg84tNpWp4TZBFGQz
|
||||
+8yTnc4kmz75fS/jY2MMddj2gbICrsRhetPfHtXV/WVhJDP1H18GbtCFY2VVPe0a
|
||||
87VXE15/V8k1mE8McODmi3fipona8+/och3xWKE2rec1MKzKT0g6eXq8CrGCsyT7
|
||||
YdEIqUuyyOP7uWrat2DX9GgdT0Kj3jlN9K5W7edjcrsZCwenyO4KbXCeAvzhzffi
|
||||
7MA0BM0oNC9hkXL+nOmFg/+OTxIy7vKBg8P+OxtMb61zO7X8vC7CIAXFjvGDfRaD
|
||||
ssbzSibBsu/6iGtCOGEfz9zeNVs7ZRkDW7w09N75nAI4YbRvydbmyQd62R0mkff3
|
||||
7lmMsPrBhtkcrv4TCYUTknC0EwyTvEN5RPT9RFLi103TZPLiHnH1S/9croKrnJ32
|
||||
nuhtK8UiNjoNq8Uhl5sN6todv5pC1cRITgq80Gv6U93vPBsg7j/VnXwl5B0rZp4e
|
||||
8W5vUsMWTfT7eTDp5OWIV7asfV9C1p9tGHdjzx1VA0AEh/VbpX4xzHpxNciG77Qx
|
||||
iu1qHgEtnmgyqQdgCpGBMMRtx3j5ca0AOAkpmaMzy4t6Gh25PXFAADwqTs6p+Y0K
|
||||
zAqCkc3OyX3Pjsm1Wn+IpGtNtahR9EGC4caKAH5eZV9q//////////8CAQI=
|
||||
-----END DH PARAMETERS-----
|
||||
@ -1,5 +0,0 @@
|
||||
ssl_protocols TLSv1.2 TLSv1.3;
|
||||
ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384;
|
||||
ssl_dhparam /etc/nginx/dhparam;
|
||||
|
||||
include inc/security.conf;
|
||||
@ -0,0 +1,8 @@
|
||||
ssl_protocols TLSv1.2 TLSv1.3;
|
||||
ssl_ciphers TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384;#:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384;
|
||||
|
||||
ssl_ecdh_curve X25519:X448;
|
||||
|
||||
#ssl_dhparam /etc/nginx/inc/ffdhe3072.pem;
|
||||
|
||||
include inc/security.conf;
|
||||
@ -0,0 +1,48 @@
|
||||
server {
|
||||
listen 443 ssl http2;
|
||||
listen [::]:443 ssl http2;
|
||||
server_name mafreebox.freebox.fr;
|
||||
|
||||
#root /var/www/niver;
|
||||
#index index.php index.html index.htm;
|
||||
#try_files $uri $uri/ @extensionless-php; # $uri.html
|
||||
|
||||
include inc/tls.conf;
|
||||
include inc/errors.conf;
|
||||
|
||||
error_log /var/log/nginx/freebox-error.log info;
|
||||
access_log /var/log/nginx/freebox-access.log;
|
||||
|
||||
#more_set_headers "Content-Security-Policy : default-src 'none'; style-src 'self'; frame-ancestors 'none';";
|
||||
|
||||
#location ~ ^/motrig/(db|less|lessphp|inc|niver.log) {
|
||||
# return 403;
|
||||
#}
|
||||
location / {
|
||||
allow 2a0b:cbc0:1103:2::106f;
|
||||
allow 192.168.1.9;
|
||||
deny all;
|
||||
proxy_pass https://mafreebox.freebox.fr;
|
||||
proxy_ssl_verify off;
|
||||
}
|
||||
|
||||
#location ~ \.inc.php$ {
|
||||
# return 403;
|
||||
# }
|
||||
|
||||
#location ~ \.php$ {
|
||||
# fastcgi_split_path_info ^(.+\.php)(/.+)$;
|
||||
# fastcgi_pass unix:/var/run/php/niver.sock;
|
||||
# #fastcgi_index index.php;
|
||||
# include inc/fastcgi.conf;
|
||||
# try_files $uri =404;
|
||||
#}
|
||||
|
||||
#location @extensionless-php {
|
||||
# rewrite ^(.*)$ $1.php last;
|
||||
#}
|
||||
|
||||
ssl_certificate /etc/letsencrypt/live/niver.4.niv.re/fullchain.pem;
|
||||
ssl_certificate_key /etc/letsencrypt/live/niver.4.niv.re/privkey.pem;
|
||||
}
|
||||
|
||||
@ -0,0 +1,47 @@
|
||||
#server {
|
||||
# listen 80;
|
||||
# listen [::]:80;
|
||||
# server_name niver.4.niv.re;
|
||||
# return 301 https://niver.4.niv.re$request_uri;
|
||||
#}
|
||||
|
||||
server {
|
||||
listen 443 ssl http2;
|
||||
listen [::]:443 ssl http2;
|
||||
server_name niver.4.niv.re;
|
||||
|
||||
root /var/www/niver;
|
||||
index index.php index.html index.htm;
|
||||
try_files $uri $uri/ @extensionless-php;
|
||||
|
||||
include inc/tls.conf;
|
||||
include inc/errors.conf;
|
||||
|
||||
error_log /var/log/nginx/niver.4.niv.re-error.log info;
|
||||
access_log /var/log/nginx/niver.4.niv.re-access.log tls;
|
||||
|
||||
more_set_headers "Content-Security-Policy : default-src 'none'; style-src 'self'; frame-ancestors 'none';";
|
||||
|
||||
location ~ ^/motrig/(db|less|lessphp|inc|niver.log) {
|
||||
return 403;
|
||||
}
|
||||
|
||||
location ~ \.inc.php$ {
|
||||
return 403;
|
||||
}
|
||||
|
||||
location ~ \.php$ {
|
||||
fastcgi_split_path_info ^(.+\.php)(/.+)$;
|
||||
fastcgi_pass unix:/var/run/php/niver.sock;
|
||||
#fastcgi_index index.php;
|
||||
include inc/fastcgi.conf;
|
||||
try_files $uri =404;
|
||||
}
|
||||
|
||||
location @extensionless-php {
|
||||
rewrite ^(.*)$ $1.php last;
|
||||
}
|
||||
|
||||
ssl_certificate /etc/letsencrypt/live/niver.4.niv.re/fullchain.pem;
|
||||
ssl_certificate_key /etc/letsencrypt/live/niver.4.niv.re/privkey.pem;
|
||||
}
|
||||
@ -1,31 +0,0 @@
|
||||
server {
|
||||
listen 443 ssl http2 default_server;
|
||||
listen [::]:443 ssl http2 default_server;
|
||||
server_name niver.atope.art;
|
||||
|
||||
root /srv/http/niver;
|
||||
index index.php index.html index.htm;
|
||||
try_files $uri $uri/ @extensionless-php; # $uri.html
|
||||
index index.php;
|
||||
|
||||
include inc/modern.conf;
|
||||
include inc/errors.conf;
|
||||
|
||||
error_log /var/log/nginx/niver.atope.art-error.log;
|
||||
access_log /var/log/nginx/niver.atope.art-access.log;
|
||||
|
||||
more_set_headers "Content-Security-Policy : default-src 'none'; style-src 'self';";
|
||||
|
||||
location ~ \.php$ {
|
||||
fastcgi_split_path_info ^(.+\.php)(/.+)$;
|
||||
fastcgi_pass unix:/var/run/php-fpm/niver.sock;
|
||||
#fastcgi_index index.php;
|
||||
include inc/fastcgi.conf;
|
||||
try_files $uri =404;
|
||||
}
|
||||
|
||||
location @extensionless-php {
|
||||
rewrite ^(.*)$ $1.php last;
|
||||
}
|
||||
|
||||
}
|
||||
@ -1,2 +1,3 @@
|
||||
DOMAIN 3600 SOA ns1.atope.art. hostmaster.antopie.org. 1 21600 7200 3628800 3600
|
||||
DOMAIN 86400 NS ns1.atope.art.
|
||||
DOMAIN 3600 SOA potiron.niver.4.niv.re. hostmaster.antopie.org. 1 21600 7200 3628800 3600
|
||||
DOMAIN 86400 NS potiron.niver.4.niv.re.
|
||||
DOMAIN 86400 NS framboise.niver.4.niv.re.
|
||||
|
||||
@ -1,5 +1,5 @@
|
||||
Ceci est le dossier personnel des utilisataires de Niver.
|
||||
Ceci est l'espace dédié à vos sites.
|
||||
Vous pouvez téléverser votre site dans un sous-dossier d'ht/.
|
||||
|
||||
This is the personnal directory for Niver users.
|
||||
This is the space dedicated to your sites.
|
||||
You can upload your site into a subdirectory of ht/.
|
||||
|
||||
Reference in New Issue