diff --git a/sites/events/events.gateway-gamers.net.conf b/sites/events/events.gateway-gamers.net.conf index cde173c..e113e35 100644 --- a/sites/events/events.gateway-gamers.net.conf +++ b/sites/events/events.gateway-gamers.net.conf @@ -1,28 +1,9 @@ server { - listen 80; - listen [::]:80; server_name events.gateway-gamers.net; - return 301 https://$host$request_uri; -} - -server { - listen 443 ssl; - listen [::]:443 ssl; - server_name events.gateway-gamers.net; - root /var/www/domains/gateway-gamers.net/events; index index.html; - - # SSL — managed by Certbot - # ssl_certificate /etc/letsencrypt/live/events.gateway-gamers.net/fullchain.pem; - # ssl_certificate_key /etc/letsencrypt/live/events.gateway-gamers.net/privkey.pem; - # include /etc/letsencrypt/options-ssl-nginx.conf; - # ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; - - # Hide nginx version server_tokens off; - # Security headers add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always; add_header X-Content-Type-Options "nosniff" always; add_header X-Frame-Options "SAMEORIGIN" always; @@ -30,8 +11,6 @@ server { add_header Permissions-Policy "geolocation=(), microphone=(), camera=()" always; add_header Content-Security-Policy "default-src 'self'; script-src 'self'; style-src 'self'; connect-src 'self' https://newprod-api.bestcoastpairings.com; img-src 'self' data:;" always; - # Shared assets (images + footer) — single on-disk copy under shared/, - # deployed once and aliased by every gateway-gamers.net site. location /images/ { alias /var/www/domains/gateway-gamers.net/shared/images/; } @@ -43,4 +22,25 @@ server { location / { try_files $uri $uri/ =404; } + + listen 443 ssl; # managed by Certbot + listen [::]:443 ssl; # managed by Certbot + ssl_certificate /etc/letsencrypt/live/events.gateway-gamers.net/fullchain.pem; # managed by Certbot + ssl_certificate_key /etc/letsencrypt/live/events.gateway-gamers.net/privkey.pem; # managed by Certbot + include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot + ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot + } +server { + if ($host = events.gateway-gamers.net) { + return 301 https://$host$request_uri; + } # managed by Certbot + + + listen 80; + listen [::]:80; + server_name events.gateway-gamers.net; + return 404; # managed by Certbot + + +} \ No newline at end of file