From cb8f20c9d5dd95191ce0e2fa3c0150f24fddfeb3 Mon Sep 17 00:00:00 2001
From: Paweł Dybiec <pawel@dybiec.info>
Date: Sun, 11 Jul 2021 20:41:24 +0100
Subject: Add ipv6 in nginx, move certs

---
 nginx/nginx.conf | 10 ++--------
 1 file changed, 2 insertions(+), 8 deletions(-)

(limited to 'nginx/nginx.conf')

diff --git a/nginx/nginx.conf b/nginx/nginx.conf
index 0857b7e..683efdb 100644
--- a/nginx/nginx.conf
+++ b/nginx/nginx.conf
@@ -19,8 +19,8 @@ http {
                       '"$http_user_agent" "$server_name"';
 
     access_log  /var/log/nginx/access.log  main;
-    ssl_certificate	/root/dybiec.info/fullchain.pem;
-    ssl_certificate_key /root/dybiec.info/privkey.pem;
+    ssl_certificate	/etc/letsencrypt/live/dybiec.info/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/dybiec.info/privkey.pem;
 
     ssl_protocols TLSv1.2 TLSv1.3;
     ssl_prefer_server_ciphers on;
@@ -51,12 +51,6 @@ http {
 
     add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
 
-    server {
-	listen 80;
-	allow 127.0.0.1;
-	allow 172.0.0.0/8;
-	deny all;
-    }
     include /etc/nginx/conf.d/*.conf;
 
     error_page 500 501 502 503 504 /50x.html;
-- 
cgit 1.4.1