From efa3b7f6da62105d5373b2cae369653d9ceb303a Mon Sep 17 00:00:00 2001 From: mandalore Date: Fri, 4 Sep 2026 16:00:25 -0500 Subject: [PATCH] Sync events.gateway-gamers.net.conf to match live production MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit DNS was pointed at gg1-roc-web1, so ran certbot --nginx to issue the cert (same flow as the other 4 sites), then re-applied the security headers/CSP/shared-asset alias blocks the same way as before. Site is now live at https://events.gateway-gamers.net — verified header, footer, images, and compiled CSS all resolve correctly. Co-Authored-By: Claude Sonnet 5 Claude-Session: https://claude.ai/code/session_01SBzcNkW7JcYipnAX6HfgmK --- sites/events/events.gateway-gamers.net.conf | 42 ++++++++++----------- 1 file changed, 21 insertions(+), 21 deletions(-) diff --git a/sites/events/events.gateway-gamers.net.conf b/sites/events/events.gateway-gamers.net.conf index cde173c..e113e35 100644 --- a/sites/events/events.gateway-gamers.net.conf +++ b/sites/events/events.gateway-gamers.net.conf @@ -1,28 +1,9 @@ server { - listen 80; - listen [::]:80; server_name events.gateway-gamers.net; - return 301 https://$host$request_uri; -} - -server { - listen 443 ssl; - listen [::]:443 ssl; - server_name events.gateway-gamers.net; - root /var/www/domains/gateway-gamers.net/events; index index.html; - - # SSL — managed by Certbot - # ssl_certificate /etc/letsencrypt/live/events.gateway-gamers.net/fullchain.pem; - # ssl_certificate_key /etc/letsencrypt/live/events.gateway-gamers.net/privkey.pem; - # include /etc/letsencrypt/options-ssl-nginx.conf; - # ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; - - # Hide nginx version server_tokens off; - # Security headers add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always; add_header X-Content-Type-Options "nosniff" always; add_header X-Frame-Options "SAMEORIGIN" always; @@ -30,8 +11,6 @@ server { add_header Permissions-Policy "geolocation=(), microphone=(), camera=()" always; add_header Content-Security-Policy "default-src 'self'; script-src 'self'; style-src 'self'; connect-src 'self' https://newprod-api.bestcoastpairings.com; img-src 'self' data:;" always; - # Shared assets (images + footer) — single on-disk copy under shared/, - # deployed once and aliased by every gateway-gamers.net site. location /images/ { alias /var/www/domains/gateway-gamers.net/shared/images/; } @@ -43,4 +22,25 @@ server { location / { try_files $uri $uri/ =404; } + + listen 443 ssl; # managed by Certbot + listen [::]:443 ssl; # managed by Certbot + ssl_certificate /etc/letsencrypt/live/events.gateway-gamers.net/fullchain.pem; # managed by Certbot + ssl_certificate_key /etc/letsencrypt/live/events.gateway-gamers.net/privkey.pem; # managed by Certbot + include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot + ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot + } +server { + if ($host = events.gateway-gamers.net) { + return 301 https://$host$request_uri; + } # managed by Certbot + + + listen 80; + listen [::]:80; + server_name events.gateway-gamers.net; + return 404; # managed by Certbot + + +} \ No newline at end of file