diyIT/FreeBSD
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

December 22 update

Browse Source
This commit is contained in:
Sharad Ahlawat
2022-12-03 17:32:20 -08:00
parent 82a613d160
commit a2cdf26594
224 changed files with 6862 additions and 2341 deletions
Download Patch File Download Diff File Expand all files Collapse all files

49
jails/config/auto/nginx.conf
View File

@ -56,23 +56,42 @@ http {
server_name portfolio.ahlawat.com portfolio;
location / {
add_header alt-svc 'h3=":443"';
return 301 https://portfolio.ahlawat.com$request_uri;
}
}
server {
listen 0.0.0.0:443 ssl;
listen [::]:443 ssl;
listen 0.0.0.0:443 ssl http2;
listen 0.0.0.0:443 http3 reuseport;
listen [::]:443 ssl http2;
listen [::]:443 http3 reuseport;
server_name portfolio.ahlawat.com;
add_header alt-svc 'h3=":443"';
ssl_certificate /mnt/certs/fullchain.pem;
ssl_certificate_key /mnt/certs/privkey.pem;
ssl_session_cache shared:SSL:1m;
ssl_session_timeout 5m;
ssl_ciphers HIGH:!aNULL:!MD5;
ssl_prefer_server_ciphers on;
# ssl_ciphers HIGH:!aNULL:!MD5;
# ssl_prefer_server_ciphers on;
# modern configuration
ssl_protocols TLSv1.3;
ssl_prefer_server_ciphers off;
# HSTS (ngx_http_headers_module is required) (63072000 seconds)
add_header Strict-Transport-Security "max-age=63072000" always;
# OCSP stapling
ssl_stapling on;
ssl_stapling_verify on;
# verify chain of trust of OCSP response using Root CA and Intermediate certs
ssl_trusted_certificate /mnt/certs/fullchain.pem;
#charset koi8-r;
@ -135,8 +154,8 @@ http {
}
server {
listen 0.0.0.0:443 ssl;
listen [::]:443 ssl;
listen 0.0.0.0:443 ssl http2;
listen [::]:443 ssl http2;
server_name producthunt.ahlawat.com;
ssl_certificate /mnt/certs/fullchain.pem;
@ -145,8 +164,22 @@ http {
ssl_session_cache shared:SSL:1m;
ssl_session_timeout 5m;
ssl_ciphers HIGH:!aNULL:!MD5;
ssl_prefer_server_ciphers on;
# ssl_ciphers HIGH:!aNULL:!MD5;
# ssl_prefer_server_ciphers on;
# modern configuration
ssl_protocols TLSv1.3;
ssl_prefer_server_ciphers off;
# HSTS (ngx_http_headers_module is required) (63072000 seconds)
add_header Strict-Transport-Security "max-age=63072000" always;
# OCSP stapling
ssl_stapling on;
ssl_stapling_verify on;
# verify chain of trust of OCSP response using Root CA and Intermediate certs
ssl_trusted_certificate /mnt/certs/fullchain.pem;
#access_log logs/host.access.log main;

13
jails/config/auto/pkg-list-details-old.txt Normal file
View File

@ -0,0 +1,13 @@
pkgp123____bash-5.2.12
pkgp123____bash-completion-2.11_2,2
pkgp123____nginx-devel-1.23.2_4
pkgp123____pkg-1.18.4
pkgp-freebsd-pkg____nano-6.4
pkgp-freebsd-pkg____py39-ansible-6.1.0
pkgp-freebsd-pkg____py39-django32-3.2.16
pkgp-freebsd-pkg____py39-gunicorn-20.1.0
pkgp-freebsd-pkg____py39-pillow-9.2.0
pkgp-freebsd-pkg____py39-pip-22.2.2
pkgp-freebsd-pkg____py39-psycopg2-2.9.4
pkgp-freebsd-pkg____py39-tkinter-3.9.15_6
pkgp-freebsd-pkg____sudo-1.9.12p1

27
jails/config/auto/pkg-list-details.txt
View File

@ -1,14 +1,13 @@
pkgp-freebsd-pkg____bash-5.1.16
pkgp-freebsd-pkg____bash-completion-2.11_1,2
pkgp-freebsd-pkg____mc-4.8.28
pkgp-freebsd-pkg____nano-6.0
pkgp-freebsd-pkg____nginx-1.20.2_9,2
pkgp-freebsd-pkg____pkg-1.17.5_1
pkgp-freebsd-pkg____postgresql14-client-14.2
pkgp-freebsd-pkg____py38-ansible-5.5.0
pkgp-freebsd-pkg____py38-django32-3.2.12
pkgp-freebsd-pkg____py38-gunicorn-20.1.0
pkgp-freebsd-pkg____py38-pillow-9.0.1_1
pkgp-freebsd-pkg____py38-pip-20.3.4
pkgp-freebsd-pkg____py38-tkinter-3.8.13_6
pkgp-freebsd-pkg____sudo-1.9.10
pkgp123____bash-completion-2.11_2,2
pkgp123____pkg-1.18.4
pkgp-freebsd-pkg____bash-5.2.12
pkgp-freebsd-pkg____nano-7.0
pkgp-freebsd-pkg____nginx-devel-1.23.2_4
pkgp-freebsd-pkg____py39-ansible-6.1.0
pkgp-freebsd-pkg____py39-django32-3.2.16
pkgp-freebsd-pkg____py39-gunicorn-20.1.0
pkgp-freebsd-pkg____py39-pillow-9.2.0
pkgp-freebsd-pkg____py39-pip-22.2.2
pkgp-freebsd-pkg____py39-psycopg2-2.9.4
pkgp-freebsd-pkg____py39-tkinter-3.9.15_6
pkgp-freebsd-pkg____sudo-1.9.12p1

1
jails/config/auto/pkg-list-old.txt Normal file
View File

@ -0,0 +1 @@
bash bash-completion nano nginx-devel pkg py39-ansible py39-django32 py39-gunicorn py39-pillow py39-pip py39-psycopg2 py39-tkinter sudo

2
jails/config/auto/pkg-list.txt
View File

@ -1 +1 @@
bash bash-completion mc nano nginx pkg postgresql14-client py38-ansible py38-django32 py38-gunicorn py38-pillow py38-pip py38-tkinter sudo
bash bash-completion nano nginx-devel pkg py39-ansible py39-django32 py39-gunicorn py39-pillow py39-pip py39-psycopg2 py39-tkinter sudo