xeiaso.net
Proof of concept mechanical port of ircnet/ircd to Rust as part of a bit about C being insecure for network services
1server {
2 listen 80;
3 listen [::]:80;
4 server_name althyk.yolo-swag.com;
5
6 # Redirect all plaintext traffic to HTTPS.
7 return 301 https://$host$request_uri;
8}
9
10server {
11 listen 443 ssl;
12 listen [::]:443 ssl;
13 http2 on;
14 server_name althyk.yolo-swag.com;
15
16 ssl_certificate /etc/ssl/althyk.yolo-swag.com/fullchain.pem;
17 ssl_certificate_key /etc/ssl/althyk.yolo-swag.com/privkey.pem;
18
19 root /srv/www/althyk.yolo-swag.com;
20 index index.html;
21
22 location / {
23 try_files $uri $uri/ =404;
24 }
25
26 location /socket {
27 proxy_pass http://127.0.0.1:8097;
28 proxy_read_timeout 600s;
29 proxy_http_version 1.1;
30 proxy_set_header Upgrade $http_upgrade;
31 proxy_set_header Connection "Upgrade";
32 proxy_set_header Host $host;
33 proxy_set_header X-Forwarded-For $remote_addr;
34 proxy_set_header X-Forwarded-Proto $scheme;
35 }
36}