Updating Ubiqtorate

roles/WebServer/files/conf.d/aaa_default.conf

@@ -0,0 +1,17 @@
+server {
+    #listen      443 ssl http2;
+    listen      444 ssl http2;
+    server_name default_server;
+
+    include sec.conf;
+    include default.csp.conf;
+
+    location /
+    {
+      proxy_set_header Host $http_host;
+      proxy_set_header X-Forwarded-Host $host;
+      proxy_set_header X-Forwarded-Server $host;
+      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+      proxy_pass       http://127.0.0.1:3000;
+    }
+}

roles/WebServer/files/conf.d/adhan.conf

@@ -0,0 +1,12 @@
+server {
+    listen      444 ssl http2;
+    server_name adhan.aninix.net; 
+
+    include sec.conf;
+    include default.csp.conf;
+
+    location /
+    {
+        root /srv/adhan/;
+    }
+}

roles/WebServer/files/conf.d/graylog.conf

@@ -0,0 +1,18 @@
+server {
+    #listen      443 ssl http2;
+    listen      444 ssl http2;
+    server_name sharingan.aninix.net;
+
+    include sec.conf;
+    # include default.csp.conf;
+
+    location /
+    {
+      proxy_set_header Host $http_host;
+      proxy_set_header X-Forwarded-Host $host;
+      proxy_set_header X-Forwarded-Server $host;
+      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+      proxy_set_header X-Graylog-Server-URL https://$server_name/;
+      proxy_pass       http://10.0.1.5:9000;
+    }
+}

roles/WebServer/files/conf.d/lykos-wiki.conf

@@ -0,0 +1,46 @@
+server {
+    listen      444 ssl;
+    server_name lykos.aninix.net; 
+
+    include sec.conf;
+    include default.csp.conf;
+
+    root /usr/share/webapps/; 
+
+    location ~ ^/$ {
+        return 302 https://lykos.aninix.net:444/lykos-wiki/Main_Page;
+    } 
+
+    location ~ ^/lykos-wiki/ {
+        index /mediawiki/index.php;
+        try_files $uri $uri/ @mediawiki;
+    }
+    location @mediawiki {
+        rewrite ^/lykos-wiki/(.*)$ /mediawiki/index.php?title=$1;
+    }
+    location ~ \.php?$ {
+        fastcgi_pass unix:/var/run/php-fpm/php-fpm.sock;
+        fastcgi_index /mediawiki/index.php;
+        try_files $uri @mediawiki;
+    }
+    location ~* \.(js|css|png|jpg|jpeg|gif|ico)$ {
+        try_files $uri /lykos-wiki/index.php;
+        expires max;
+        log_not_found off;
+    }
+# Restrictions based on the .htaccess files
+    location ~ ^/lykos-wiki/(cache|includes|maintenance|languages|serialized|tests|images/deleted)/ {
+        deny all;
+    }
+    location ~ ^/lykos-wiki/(bin|docs|extensions|includes|maintenance|mw-config|resources|serialized|tests)/ {
+        internal;
+    }
+    location ^~ /images/ {
+        try_files $uri /index.php;
+    }
+    location ~ /\. {
+        access_log off;
+        log_not_found off; 
+        deny all;
+    }
+}

roles/WebServer/files/conf.d/password.conf

@@ -0,0 +1,12 @@
+server {
+    listen      444 ssl http2;
+    server_name password.aninix.net; 
+
+    include sec.conf;
+    include default.csp.conf;
+
+    location /
+    {
+        root /usr/share/webapps/self-service-password/;
+    }
+}

roles/WebServer/files/nginx.conf

@@ -0,0 +1,34 @@
+user  http;
+worker_processes  4;
+
+# Logs
+error_log              logs/error.log;
+error_log              logs/error.log notice;
+error_log              logs/error.log info;
+
+events {
+    worker_connections 1024;
+}
+
+
+http {
+
+    include            mime.types;
+    include            fastcgi.conf;
+    default_type       application/octet-stream;
+
+    server_tokens      off;
+    sendfile           on;
+    keepalive_timeout  65;
+    gzip               on;
+
+    # Redirect all HTTP to HTTPS
+    server {
+        listen 81      default_server;
+    	listen [::]:81 default_server;
+        server_name    _;
+        return 301     https://$host$request_uri;
+    }
+
+    include            ../conf.d/*.conf;
+}