From e2fc0433de38c322ce46ad250bc0f0f03e7710c8 Mon Sep 17 00:00:00 2001 From: Cullum Smith Date: Thu, 24 Oct 2024 06:43:08 -0400 Subject: add icinga --- .../usr/local/etc/nginx/vhosts.conf.icinga_server | 33 ++++++++++++++++++++++ 1 file changed, 33 insertions(+) create mode 100644 files/usr/local/etc/nginx/vhosts.conf.icinga_server (limited to 'files/usr/local/etc/nginx/vhosts.conf.icinga_server') diff --git a/files/usr/local/etc/nginx/vhosts.conf.icinga_server b/files/usr/local/etc/nginx/vhosts.conf.icinga_server new file mode 100644 index 0000000..43fa82e --- /dev/null +++ b/files/usr/local/etc/nginx/vhosts.conf.icinga_server @@ -0,0 +1,33 @@ +server { + listen 443 ssl default_server; + listen [::]:443 ssl default_server; + http2 on; + + root ${icingaweb_webroot}; + index index.php index.html; + + ssl_certificate ${icingaweb_https_cert}; + ssl_certificate_key ${icingaweb_https_key}; + + add_header Strict-Transport-Security "max-age=63072000" always; + + auth_gss_keytab ${nginx_keytab}; + auth_gss_allow_basic_fallback off; + auth_gss on; + satisfy any; +$(printf ' deny %s;\n' $kerberized_cidrs) + allow all; + + location ~ ^/index\.php(.*)$ { + fastcgi_pass unix:${icingaweb_fpm_socket}; + fastcgi_index index.php; + include fastcgi_params; + fastcgi_param SCRIPT_FILENAME ${icingaweb_webroot}/index.php; + fastcgi_param ICINGAWEB_CONFIGDIR ${icingaweb_conf_dir}; + } + + location ~ ^/(.+)? { + index index.php; + try_files \$1 \$uri \$uri/ /index.php\$is_args\$args; + } +} -- cgit v1.2.3