· 4 years ago · Aug 25, 2021, 07:50 PM
1# NOTE: you'll need to change the cert & key paths,
2# along with the cmyui.xyz domain.
3
4# if you wish to only connect using fallback, you can
5# remove all ssl related content from the configuration.
6
7# by default, we'll use a unix socket.
8upstream gulag {
9 server unix:/tmp/gulag.sock fail_timeout=0;
10}
11
12# c[4-6|e]?.ppy.sh is used for bancho
13# osu.ppy.sh is used for /web, /api, etc.
14# a.ppy.sh is used for osu! avatars
15
16server {
17 listen 80;
18 listen 443 ssl;
19 server_name ~^(?:c[e4-6]?|osu|a|b)\.wixdead\.xyz$;
20
21 ssl_certificate /etc/letsencrypt/live/wixdead.xyz/fullchain.pem;
22 ssl_certificate_key /etc/letsencrypt/live/wixdead.xyz/privkey.pem;
23 ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH:@SECLEVEL=1";
24
25 client_max_body_size 64m;
26
27 location / {
28 proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
29 proxy_set_header X-Real-IP $remote_addr;
30 proxy_set_header Host $http_host;
31 proxy_redirect off;
32 proxy_pass http://gulag;
33 }
34}
35
36server {
37 listen 80;
38 listen 443 ssl;
39 server_name assets.wixdead.xyz;
40
41 ssl_certificate /etc/letsencrypt/live/wixdead.xyz/fullchain.pem;
42 ssl_certificate_key /etc/letsencrypt/live/wixdead.xyz/privkey.pem;
43 ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH:@SECLEVEL=1";
44
45 location / {
46 default_type image/png;
47 root /home/wixdead/programming/akatsuki/gulag/.data/assets/;
48 }
49}
50
51