mirrors/raspiblitz
1
0
Fork 0
mirror of https://github.com/rootzoll/raspiblitz.git synced 2025-02-24 14:51:03 +01:00
Code Issues Projects Releases Packages Wiki Activity

add gzip to all nginx configs; add http2 support for all https nginx configs (#2955)

Browse source
This commit is contained in:
Christoph Stenglein 2022-05-17 19:33:56 +02:00 • committed by GitHub
parent 6a1617b6c1
commit 74286ca146
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
31 changed files with 98 additions and 31 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
home.admin/assets/nginx/sites-available/btcpay_ssl.conf
View file

@ -1,13 +1,15 @@
## btcpay_ssl.conf ## btcpay_ssl.conf
server { server {
listen 23001 ssl; listen 23001 ssl http2;
listen [::]:23001 ssl; listen [::]:23001 ssl http2;
server_name _; server_name _;
include /etc/nginx/snippets/ssl-params.conf; include /etc/nginx/snippets/ssl-params.conf;
include /etc/nginx/snippets/ssl-certificate-app-data.conf; include /etc/nginx/snippets/ssl-certificate-app-data.conf;
include /etc/nginx/snippets/gzip-params.conf;
access_log /var/log/nginx/access_btcpay.log; access_log /var/log/nginx/access_btcpay.log;
error_log /var/log/nginx/error_btcpay.log; error_log /var/log/nginx/error_btcpay.log;

2
home.admin/assets/nginx/sites-available/btcpay_tor.conf
View file

@ -4,6 +4,8 @@ server {
listen localhost:23002; listen localhost:23002;
server_name _; server_name _;
include /etc/nginx/snippets/gzip-params.conf;
access_log /var/log/nginx/access_btcpay.log; access_log /var/log/nginx/access_btcpay.log;
error_log /var/log/nginx/error_btcpay.log; error_log /var/log/nginx/error_btcpay.log;

4
home.admin/assets/nginx/sites-available/btcpay_tor_ssl.conf
View file

@ -1,12 +1,14 @@
## btcpay_tor_ssl.conf ## btcpay_tor_ssl.conf
server { server {
listen localhost:23003 ssl; listen localhost:23003 ssl http2;
server_name _; server_name _;
include /etc/nginx/snippets/ssl-params.conf; include /etc/nginx/snippets/ssl-params.conf;
include /etc/nginx/snippets/ssl-certificate-app-data-tor.conf; include /etc/nginx/snippets/ssl-certificate-app-data-tor.conf;
include /etc/nginx/snippets/gzip-params.conf;
access_log /var/log/nginx/access_btcpay.log; access_log /var/log/nginx/access_btcpay.log;
error_log /var/log/nginx/error_btcpay.log; error_log /var/log/nginx/error_btcpay.log;

4
home.admin/assets/nginx/sites-available/btcrpcexplorer_ssl.conf
View file

@ -2,12 +2,14 @@
server { server {
listen 3021 ssl; listen 3021 ssl;
listen [::]:3021 ssl; listen [::]:3021 ssl http2;
server_name _; server_name _;
include /etc/nginx/snippets/ssl-params.conf; include /etc/nginx/snippets/ssl-params.conf;
include /etc/nginx/snippets/ssl-certificate-app-data.conf; include /etc/nginx/snippets/ssl-certificate-app-data.conf;
include /etc/nginx/snippets/gzip-params.conf;
access_log /var/log/nginx/access_thub.log; access_log /var/log/nginx/access_thub.log;
error_log /var/log/nginx/error_thub.log; error_log /var/log/nginx/error_thub.log;

2
home.admin/assets/nginx/sites-available/btcrpcexplorer_tor.conf
View file

@ -4,6 +4,8 @@ server {
listen localhost:3022; listen localhost:3022;
server_name _; server_name _;
include /etc/nginx/snippets/gzip-params.conf;
access_log /var/log/nginx/access_thub.log; access_log /var/log/nginx/access_thub.log;
error_log /var/log/nginx/error_thub.log; error_log /var/log/nginx/error_thub.log;

4
home.admin/assets/nginx/sites-available/btcrpcexplorer_tor_ssl.conf
View file

@ -1,12 +1,14 @@
## btcrpcexplorer_tor_ssl.conf ## btcrpcexplorer_tor_ssl.conf
server { server {
listen localhost:3023 ssl; listen localhost:3023 ssl http2;
server_name _; server_name _;
include /etc/nginx/snippets/ssl-params.conf; include /etc/nginx/snippets/ssl-params.conf;
include /etc/nginx/snippets/ssl-certificate-app-data-tor.conf; include /etc/nginx/snippets/ssl-certificate-app-data-tor.conf;
include /etc/nginx/snippets/gzip-params.conf;
access_log /var/log/nginx/access_thub.log; access_log /var/log/nginx/access_thub.log;
error_log /var/log/nginx/error_thub.log; error_log /var/log/nginx/error_thub.log;

6
home.admin/assets/nginx/sites-available/joinmarket_webui_ssl.conf
View file

@ -1,13 +1,15 @@
## joinmarket_webui_ssl.conf ## joinmarket_webui_ssl.conf
server { server {
listen 7501 ssl; listen 7501 ssl http2;
listen [::]:7501 ssl; listen [::]:7501 ssl http2;
server_name _; server_name _;
include /etc/nginx/snippets/ssl-params.conf; include /etc/nginx/snippets/ssl-params.conf;
include /etc/nginx/snippets/ssl-certificate-app-data.conf; include /etc/nginx/snippets/ssl-certificate-app-data.conf;
include /etc/nginx/snippets/gzip-params.conf;
access_log /var/log/nginx/access_joinmarket_webui.log; access_log /var/log/nginx/access_joinmarket_webui.log;
error_log /var/log/nginx/error_joinmarket_webui.log; error_log /var/log/nginx/error_joinmarket_webui.log;

3
home.admin/assets/nginx/sites-available/joinmarket_webui_tor.conf
View file

@ -8,8 +8,7 @@ server {
access_log /var/log/nginx/access_joinmarket_webui.log; access_log /var/log/nginx/access_joinmarket_webui.log;
error_log /var/log/nginx/error_joinmarket_webui.log; error_log /var/log/nginx/error_joinmarket_webui.log;
gzip on; include /etc/nginx/snippets/gzip-params.conf;
gzip_types application/javascript application/json text/css image/svg+xml;
root /home/joinmarket/webui/build; root /home/joinmarket/webui/build;
index index.html; index index.html;

6
home.admin/assets/nginx/sites-available/joinmarket_webui_tor_ssl.conf
View file

@ -1,13 +1,15 @@
## joinmarket_webui_tor_ssl.conf ## joinmarket_webui_tor_ssl.conf
server { server {
listen 7503 ssl; listen 7503 ssl http2;
listen [::1]:7503 ssl; listen [::1]:7503 ssl http2;
server_name _; server_name _;
include /etc/nginx/snippets/ssl-params.conf; include /etc/nginx/snippets/ssl-params.conf;
include /etc/nginx/snippets/ssl-certificate-app-data-tor.conf; include /etc/nginx/snippets/ssl-certificate-app-data-tor.conf;
include /etc/nginx/snippets/gzip-params.conf;
access_log /var/log/nginx/access_joinmarket_webui.log; access_log /var/log/nginx/access_joinmarket_webui.log;
error_log /var/log/nginx/error_joinmarket_webui.log; error_log /var/log/nginx/error_joinmarket_webui.log;

6
home.admin/assets/nginx/sites-available/lnbits_ssl.conf
View file

@ -1,13 +1,15 @@
## lnbits_ssl.conf ## lnbits_ssl.conf
server { server {
listen 5001 ssl; listen 5001 ssl http2;
listen [::]:5001 ssl; listen [::]:5001 ssl http2;
server_name _; server_name _;
include /etc/nginx/snippets/ssl-params.conf; include /etc/nginx/snippets/ssl-params.conf;
include /etc/nginx/snippets/ssl-certificate-app-data.conf; include /etc/nginx/snippets/ssl-certificate-app-data.conf;
include /etc/nginx/snippets/gzip-params.conf;
access_log /var/log/nginx/access_lnbits.log; access_log /var/log/nginx/access_lnbits.log;
error_log /var/log/nginx/error_lnbits.log; error_log /var/log/nginx/error_lnbits.log;

2
home.admin/assets/nginx/sites-available/lnbits_tor.conf
View file

@ -4,6 +4,8 @@ server {
listen localhost:5002; listen localhost:5002;
server_name _; server_name _;
include /etc/nginx/snippets/gzip-params.conf;
access_log /var/log/nginx/access_lnbits.log; access_log /var/log/nginx/access_lnbits.log;
error_log /var/log/nginx/error_lnbits.log; error_log /var/log/nginx/error_lnbits.log;

4
home.admin/assets/nginx/sites-available/lnbits_tor_ssl.conf
View file

@ -1,12 +1,14 @@
## lnbits_tor_ssl.conf ## lnbits_tor_ssl.conf
server { server {
listen localhost:5003 ssl; listen localhost:5003 ssl http2;
server_name _; server_name _;
include /etc/nginx/snippets/ssl-params.conf; include /etc/nginx/snippets/ssl-params.conf;
include /etc/nginx/snippets/ssl-certificate-app-data-tor.conf; include /etc/nginx/snippets/ssl-certificate-app-data-tor.conf;
include /etc/nginx/snippets/gzip-params.conf;
access_log /var/log/nginx/access_lnbits.log; access_log /var/log/nginx/access_lnbits.log;
error_log /var/log/nginx/error_lnbits.log; error_log /var/log/nginx/error_lnbits.log;

2
home.admin/assets/nginx/sites-available/mempool_.conf
View file

@ -8,4 +8,6 @@ server {
include /etc/nginx/snippets/ssl-params.conf; include /etc/nginx/snippets/ssl-params.conf;
include /etc/nginx/snippets/ssl-certificate-app-data.conf; include /etc/nginx/snippets/ssl-certificate-app-data.conf;
include /etc/nginx/snippets/mempool.conf; include /etc/nginx/snippets/mempool.conf;
include /etc/nginx/snippets/gzip-params.conf;
} }

6
home.admin/assets/nginx/sites-available/mempool_ssl.conf
View file

@ -3,11 +3,13 @@
include /etc/nginx/snippets/mempool-http.conf; include /etc/nginx/snippets/mempool-http.conf;
server { server {
listen 4081 ssl; listen 4081 ssl http2;
listen [::]:4081 ssl; listen [::]:4081 ssl http2;
server_name _; server_name _;
include /etc/nginx/snippets/ssl-params.conf; include /etc/nginx/snippets/ssl-params.conf;
include /etc/nginx/snippets/ssl-certificate-app-data.conf; include /etc/nginx/snippets/ssl-certificate-app-data.conf;
include /etc/nginx/snippets/mempool.conf; include /etc/nginx/snippets/mempool.conf;
include /etc/nginx/snippets/gzip-params.conf;
} }

2
home.admin/assets/nginx/sites-available/mempool_tor.conf
View file

@ -7,4 +7,6 @@ server {
include /etc/nginx/snippets/ssl-params.conf; include /etc/nginx/snippets/ssl-params.conf;
include /etc/nginx/snippets/ssl-certificate-app-data-tor.conf; include /etc/nginx/snippets/ssl-certificate-app-data-tor.conf;
include /etc/nginx/snippets/mempool.conf; include /etc/nginx/snippets/mempool.conf;
include /etc/nginx/snippets/gzip-params.conf;
} }

4
home.admin/assets/nginx/sites-available/mempool_tor_ssl.conf
View file

@ -1,10 +1,12 @@
## mempool_tor_ssl.conf ## mempool_tor_ssl.conf
server { server {
listen localhost:4083 ssl; listen localhost:4083 ssl http2;
server_name _; server_name _;
include /etc/nginx/snippets/ssl-params.conf; include /etc/nginx/snippets/ssl-params.conf;
include /etc/nginx/snippets/ssl-certificate-app-data-tor.conf; include /etc/nginx/snippets/ssl-certificate-app-data-tor.conf;
include /etc/nginx/snippets/mempool.conf; include /etc/nginx/snippets/mempool.conf;
include /etc/nginx/snippets/gzip-params.conf;
} }

8
home.admin/assets/nginx/sites-available/public.conf
View file

@ -3,11 +3,19 @@
server { server {
listen 80 default_server; listen 80 default_server;
listen [::]:80 default_server; listen [::]:80 default_server;
listen 443 ssl http2;
listen [::]:443 ssl http2;
root /var/www/public; root /var/www/public;
index index.html; index index.html;
server_name _; server_name _;
include /etc/nginx/snippets/ssl-params.conf;
include /etc/nginx/snippets/ssl-certificate-app-data.conf;
include /etc/nginx/snippets/gzip-params.conf;
# proxy for API # proxy for API
location /api/ { location /api/ {
proxy_pass http://127.0.0.1:11111/; proxy_pass http://127.0.0.1:11111/;

6
home.admin/assets/nginx/sites-available/rtl_ssl.conf
View file

@ -1,13 +1,15 @@
## rtl_ssl.conf ## rtl_ssl.conf
server { server {
listen 3001 ssl; listen 3001 ssl http2;
listen [::]:3001 ssl; listen [::]:3001 ssl http2;
server_name _; server_name _;
include /etc/nginx/snippets/ssl-params.conf; include /etc/nginx/snippets/ssl-params.conf;
include /etc/nginx/snippets/ssl-certificate-app-data.conf; include /etc/nginx/snippets/ssl-certificate-app-data.conf;
include /etc/nginx/snippets/gzip-params.conf;
access_log /var/log/nginx/access_rtl.log; access_log /var/log/nginx/access_rtl.log;
error_log /var/log/nginx/error_rtl.log; error_log /var/log/nginx/error_rtl.log;

2
home.admin/assets/nginx/sites-available/rtl_tor.conf
View file

@ -4,6 +4,8 @@ server {
listen localhost:3002; listen localhost:3002;
server_name _; server_name _;
include /etc/nginx/snippets/gzip-params.conf;
access_log /var/log/nginx/access_rtl.log; access_log /var/log/nginx/access_rtl.log;
error_log /var/log/nginx/error_rtl.log; error_log /var/log/nginx/error_rtl.log;

4
home.admin/assets/nginx/sites-available/rtl_tor_ssl.conf
View file

@ -1,12 +1,14 @@
## rtl_tor_ssl.conf ## rtl_tor_ssl.conf
server { server {
listen localhost:3003 ssl; listen localhost:3003 ssl http2;
server_name _; server_name _;
include /etc/nginx/snippets/ssl-params.conf; include /etc/nginx/snippets/ssl-params.conf;
include /etc/nginx/snippets/ssl-certificate-app-data-tor.conf; include /etc/nginx/snippets/ssl-certificate-app-data-tor.conf;
include /etc/nginx/snippets/gzip-params.conf;
access_log /var/log/nginx/access_rtl.log; access_log /var/log/nginx/access_rtl.log;
error_log /var/log/nginx/error_rtl.log; error_log /var/log/nginx/error_rtl.log;

6
home.admin/assets/nginx/sites-available/sphinxrelay_ssl.conf
View file

@ -1,13 +1,15 @@
## lnbits_ssl.conf ## lnbits_ssl.conf
server { server {
listen 3301 ssl; listen 3301 ssl http2;
listen [::]:3301 ssl; listen [::]:3301 ssl http2;
server_name _; server_name _;
include /etc/nginx/snippets/ssl-params.conf; include /etc/nginx/snippets/ssl-params.conf;
include /etc/nginx/snippets/ssl-certificate-app-data.conf; include /etc/nginx/snippets/ssl-certificate-app-data.conf;
include /etc/nginx/snippets/gzip-params.conf;
access_log /var/log/nginx/access_sphinxrelay.log; access_log /var/log/nginx/access_sphinxrelay.log;
error_log /var/log/nginx/error_sphinxrelay.log; error_log /var/log/nginx/error_sphinxrelay.log;

2
home.admin/assets/nginx/sites-available/sphinxrelay_tor.conf
View file

@ -4,6 +4,8 @@ server {
listen localhost:3302; listen localhost:3302;
server_name _; server_name _;
include /etc/nginx/snippets/gzip-params.conf;
access_log /var/log/nginx/access_sphinxrelay.log; access_log /var/log/nginx/access_sphinxrelay.log;
error_log /var/log/nginx/error_sphinxrelay.log; error_log /var/log/nginx/error_sphinxrelay.log;

4
home.admin/assets/nginx/sites-available/sphinxrelay_tor_ssl.conf
View file

@ -1,12 +1,14 @@
## sphinxrelay_tor_ssl.conf ## sphinxrelay_tor_ssl.conf
server { server {
listen localhost:3303 ssl; listen localhost:3303 ssl http2;
server_name _; server_name _;
include /etc/nginx/snippets/ssl-params.conf; include /etc/nginx/snippets/ssl-params.conf;
include /etc/nginx/snippets/ssl-certificate-app-data-tor.conf; include /etc/nginx/snippets/ssl-certificate-app-data-tor.conf;
include /etc/nginx/snippets/gzip-params.conf;
access_log /var/log/nginx/access_sphinxrelay.log; access_log /var/log/nginx/access_sphinxrelay.log;
error_log /var/log/nginx/error_sphinxrelay.log; error_log /var/log/nginx/error_sphinxrelay.log;

6
home.admin/assets/nginx/sites-available/tallycoin_connect_ssl.conf
View file

@ -1,13 +1,15 @@
## tallycoin_connect_ssl.conf ## tallycoin_connect_ssl.conf
server { server {
listen 8124 ssl; listen 8124 ssl http2;
listen [::]:8124 ssl; listen [::]:8124 ssl http2;
server_name _; server_name _;
include /etc/nginx/snippets/ssl-params.conf; include /etc/nginx/snippets/ssl-params.conf;
include /etc/nginx/snippets/ssl-certificate-app-data.conf; include /etc/nginx/snippets/ssl-certificate-app-data.conf;
include /etc/nginx/snippets/gzip-params.conf;
access_log /var/log/nginx/access_tallycoin_connect.log; access_log /var/log/nginx/access_tallycoin_connect.log;
error_log /var/log/nginx/error_tallycoin_connect.log; error_log /var/log/nginx/error_tallycoin_connect.log;

2
home.admin/assets/nginx/sites-available/tallycoin_connect_tor.conf
View file

@ -5,6 +5,8 @@ server {
listen [::]:8125; listen [::]:8125;
server_name _; server_name _;
include /etc/nginx/snippets/gzip-params.conf;
access_log /var/log/nginx/access_tallycoin_connect.log; access_log /var/log/nginx/access_tallycoin_connect.log;
error_log /var/log/nginx/error_tallycoin_connect.log; error_log /var/log/nginx/error_tallycoin_connect.log;

6
home.admin/assets/nginx/sites-available/tallycoin_connect_tor_ssl.conf
View file

@ -1,13 +1,15 @@
## tallycoin_connect_tor_ssl.conf ## tallycoin_connect_tor_ssl.conf
server { server {
listen localhost:8126 ssl; listen localhost:8126 ssl http2;
listen [::]:8126 ssl; listen [::]:8126 ssl http2;
server_name _; server_name _;
include /etc/nginx/snippets/ssl-params.conf; include /etc/nginx/snippets/ssl-params.conf;
include /etc/nginx/snippets/ssl-certificate-app-data-tor.conf; include /etc/nginx/snippets/ssl-certificate-app-data-tor.conf;
include /etc/nginx/snippets/gzip-params.conf;
access_log /var/log/nginx/access_tallycoin_connect.log; access_log /var/log/nginx/access_tallycoin_connect.log;
error_log /var/log/nginx/error_tallycoin_connect.log; error_log /var/log/nginx/error_tallycoin_connect.log;

6
home.admin/assets/nginx/sites-available/thub_ssl.conf
View file

@ -1,13 +1,15 @@
## thub_ssl.conf ## thub_ssl.conf
server { server {
listen 3011 ssl; listen 3011 ssl http2;
listen [::]:3011 ssl; listen [::]:3011 ssl http2;
server_name _; server_name _;
include /etc/nginx/snippets/ssl-params.conf; include /etc/nginx/snippets/ssl-params.conf;
include /etc/nginx/snippets/ssl-certificate-app-data.conf; include /etc/nginx/snippets/ssl-certificate-app-data.conf;
include /etc/nginx/snippets/gzip-params.conf;
access_log /var/log/nginx/access_thub.log; access_log /var/log/nginx/access_thub.log;
error_log /var/log/nginx/error_thub.log; error_log /var/log/nginx/error_thub.log;

2
home.admin/assets/nginx/sites-available/thub_tor.conf
View file

@ -4,6 +4,8 @@ server {
listen localhost:3012; listen localhost:3012;
server_name _; server_name _;
include /etc/nginx/snippets/gzip-params.conf;
access_log /var/log/nginx/access_thub.log; access_log /var/log/nginx/access_thub.log;
error_log /var/log/nginx/error_thub.log; error_log /var/log/nginx/error_thub.log;

4
home.admin/assets/nginx/sites-available/thub_tor_ssl.conf
View file

@ -1,12 +1,14 @@
## thub_tor_ssl.conf ## thub_tor_ssl.conf
server { server {
listen localhost:3013 ssl; listen localhost:3013 ssl http2;
server_name _; server_name _;
include /etc/nginx/snippets/ssl-params.conf; include /etc/nginx/snippets/ssl-params.conf;
include /etc/nginx/snippets/ssl-certificate-app-data-tor.conf; include /etc/nginx/snippets/ssl-certificate-app-data-tor.conf;
include /etc/nginx/snippets/gzip-params.conf;
access_log /var/log/nginx/access_thub.log; access_log /var/log/nginx/access_thub.log;
error_log /var/log/nginx/error_thub.log; error_log /var/log/nginx/error_thub.log;

6
home.admin/assets/nginx/snippets/gzip-params.conf Normal file
View file

@ -0,0 +1,6 @@
# gzip-params.conf
gzip on;
gzip_vary on;
gzip_proxied any;
gzip_types *;

2
home.admin/config.scripts/tor.network.sh
View file

@ -112,7 +112,7 @@ case "$1" in
# ACTIVATE APPS OVER TOR # ACTIVATE APPS OVER TOR
. /mnt/hdd/raspiblitz.conf 2>/dev/null . /mnt/hdd/raspiblitz.conf 2>/dev/null
/home/admin/config.scripts/tor.onion-service.sh web80 80 80 /home/admin/config.scripts/tor.onion-service.sh web80 80 80 443 443
/home/admin/config.scripts/tor.onion-service.sh debuglogs 80 6969 /home/admin/config.scripts/tor.onion-service.sh debuglogs 80 6969
[ "${BTCRPCexplorer}" = "on" ] && /home/admin/config.scripts/tor.onion-service.sh btc-rpc-explorer 80 3022 443 3023 [ "${BTCRPCexplorer}" = "on" ] && /home/admin/config.scripts/tor.onion-service.sh btc-rpc-explorer 80 3022 443 3023
[ "${rtlWebinterface}" = "on" ] && /home/admin/config.scripts/tor.onion-service.sh RTL 80 3002 443 3003 [ "${rtlWebinterface}" = "on" ] && /home/admin/config.scripts/tor.onion-service.sh RTL 80 3002 443 3003