diff --git a/nginx/nginx.conf b/nginx/nginx.conf index 33b0416..faae610 100644 --- a/nginx/nginx.conf +++ b/nginx/nginx.conf @@ -100,6 +100,8 @@ http { server_name sponsor.ajay.app api.sponsor.ajay.app; include /etc/nginx/error.conf; + set_real_ip_from 10.0.0.0/24; + real_ip_header proxy_protocol; location /news { return 301 https://blog.ajay.app/sponsorblock; @@ -214,9 +216,10 @@ http { listen [::]:443 default_server ssl http2 ipv6only=on backlog=323999; listen 443 default_server ssl http2 reuseport backlog=3000999; # managed by Certbot + listen 4443 default_server ssl http2 proxy_protocol reuseport backlog=3000999; #listen 443 http3 reuseport; #ssl_protocols TLSv1.2 TLSv1.3; - #listen 80; + listen 8081 proxy_protocol; ssl_certificate /home/sbadmin/certs/cert.pem; ssl_certificate_key /home/sbadmin/certs/key.pem; #ssl_certificate /etc/letsencrypt/live/sponsor.ajay.app-0001/fullchain.pem; # managed by Certbot @@ -257,6 +260,7 @@ http { return 301 https://$host$request_uri; listen [::]:80 ipv6only=on; + listen 8080 proxy_protocol; listen 80; server_name sponsor.ajay.app api.sponsor.ajay.app, cdnsponsor.ajay.app, wiki.sponsor.ajay.app; return 404; # managed by Certbot @@ -279,6 +283,7 @@ http { listen [::]:443 ssl http2; listen 443 ssl http2; # managed by Certbot + listen 8081 proxy_protocol; #listen 443 http3 reuseport; #ssl_protocols TLSv1.2 TLSv1.3; #listen 80;