From e00e71fd0d7ee01003a495f41ab56db2ec79ae5b Mon Sep 17 00:00:00 2001 From: Kazuhiro MUSASHI Date: Sat, 28 Jan 2023 19:58:52 +0900 Subject: [PATCH] Delete unnecessary confs. --- consul-template.d/templates/guacamole.tmpl | 103 --------------------- sites-available/minio | 42 --------- 2 files changed, 145 deletions(-) delete mode 100644 consul-template.d/templates/guacamole.tmpl delete mode 100644 sites-available/minio diff --git a/consul-template.d/templates/guacamole.tmpl b/consul-template.d/templates/guacamole.tmpl deleted file mode 100644 index 5729032..0000000 --- a/consul-template.d/templates/guacamole.tmpl +++ /dev/null @@ -1,103 +0,0 @@ -server { - listen 443 ssl http2; - server_name g.kazu634.com; - - ssl_certificate /etc/lego/.lego/certificates/_.kazu634.com.crt; - ssl_certificate_key /etc/lego/.lego/certificates/_.kazu634.com.key; - ssl_dhparam /etc/lego/dhparams_4096.pem; - - ssl_session_timeout 1d; - ssl_session_cache shared:SSL:3m; - ssl_buffer_size 4k; - ssl_session_tickets off; - - ssl_protocols TLSv1.3 TLSv1.2; - ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384; - - ssl_stapling on; - ssl_stapling_verify on; - - resolver 8.8.4.4 8.8.8.8 valid=300s; - resolver_timeout 10s; - - # Enable HSTS (HTTP Strict Transport Security) - add_header Strict-Transport-Security "max-age=31536000; includeSubdomains; preload"; - - access_log /var/log/nginx/guacamole.access.log ltsv; - error_log /var/log/nginx/guacamole.error.log; - - send_timeout 180; - proxy_connect_timeout 600; - proxy_read_timeout 600; - proxy_send_timeout 600; - - client_max_body_size 1024m; - - http2_max_field_size 256k; - http2_max_header_size 256k; - - location / { - # oauth2-proxy here: - auth_request /oauth2/auth; - error_page 401 = /oauth2/sign_in; - - auth_request_set $user $upstream_http_x_auth_request_user; - auth_request_set $email $upstream_http_x_auth_request_email; - proxy_set_header X-User $user; - proxy_set_header X-Email $email; - - # if you enabled --pass-access-token, this will pass the token to the backend - auth_request_set $token $upstream_http_x_auth_request_access_token; - proxy_set_header X-Access-Token $token; - - # guacamole here: - proxy_pass http://g/guacamole/; - proxy_buffering off; - proxy_http_version 1.1; - proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; - proxy_set_header Upgrade $http_upgrade; - proxy_set_header Connection $http_connection; - proxy_cookie_path /guacamole/ /; - } - - - location /oauth2/ { - proxy_pass http://127.0.0.1:4181; - - # Configure proxying to auth - proxy_set_header Host $host; - proxy_set_header X-Real-IP $remote_addr; - proxy_set_header X-Scheme $scheme; - proxy_set_header X-Auth-Request-Redirect $request_uri; - - proxy_buffering on; - proxy_buffer_size 256k; - proxy_buffers 4 256k; - proxy_busy_buffers_size 256k; - } - - location = /oauth2/auth { - proxy_pass http://127.0.0.1:4181; - - # Configure proxying to auth - proxy_pass_request_body off; - proxy_set_header Content-Length ""; - proxy_set_header Host $host; - proxy_set_header X-Real-IP $remote_addr; - proxy_set_header X-Scheme $scheme; - client_max_body_size "1m"; - - proxy_buffering on; - proxy_buffer_size 128k; - proxy_buffers 4 256k; - proxy_busy_buffers_size 256k; - } -} - -upstream g { -{{ range service "guacamole-guacamole" }} - server {{ .Address }}:{{ .Port }}; -{{else}} - server 127.0.0.1:60000; -{{ end }} -} diff --git a/sites-available/minio b/sites-available/minio deleted file mode 100644 index fc44a9c..0000000 --- a/sites-available/minio +++ /dev/null @@ -1,42 +0,0 @@ -server { - listen 443 ssl http2; - server_name minio.kazu634.com; - - ssl_certificate /etc/lego/.lego/certificates/_.kazu634.com.crt; - ssl_certificate_key /etc/lego/.lego/certificates/_.kazu634.com.key; - ssl_dhparam /etc/lego/dhparams_4096.pem; - - ssl_session_timeout 1d; - ssl_session_cache shared:SSL:3m; - ssl_buffer_size 4k; - ssl_session_tickets off; - - ssl_protocols TLSv1.3 TLSv1.2; - ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384; - - ssl_stapling on; - ssl_stapling_verify on; - - resolver 8.8.4.4 8.8.8.8 valid=300s; - resolver_timeout 10s; - - # Enable HSTS (HTTP Strict Transport Security) - add_header Strict-Transport-Security "max-age=31536000; includeSubdomains; preload"; - - access_log /var/log/nginx/minio.access.log ltsv; - error_log /var/log/nginx/minio.error.log; - - proxy_buffering off; - proxy_set_header Host $host; - proxy_set_header X-Real-IP $remote_addr; - proxy_set_header X-Forwarded-Host $host; - proxy_set_header X-Forwarded-Server $host; - proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; - - ignore_invalid_headers off; - client_max_body_size 0; - - location / { - proxy_pass http://192.168.10.200:9000/; - } -}