Initial Argus web catalog

2026-06-20 19:55:11 +03:00
commit 5f80c4bf6a
30 changed files with 2620 additions and 0 deletions
@@ -0,0 +1,36 @@
+<VirtualHost *:80>
+    ServerName argus.kusoft.xyz
+
+    Alias /.well-known/acme-challenge/ /var/www/argus/.well-known/acme-challenge/
+
+    <Directory "/var/www/argus/.well-known/acme-challenge/">
+        Options None
+        AllowOverride None
+        Require all granted
+    </Directory>
+
+    ProxyPass /.well-known/acme-challenge/ !
+
+    RewriteEngine On
+    RewriteCond %{REQUEST_URI} !^/\.well-known/acme-challenge/
+    RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,NE,R=permanent]
+</VirtualHost>
+
+<VirtualHost *:443>
+    ServerName argus.kusoft.xyz
+
+    SSLEngine On
+    SSLCertificateFile /etc/letsencrypt/live/argus.kusoft.xyz/fullchain.pem
+    SSLCertificateKeyFile /etc/letsencrypt/live/argus.kusoft.xyz/privkey.pem
+
+    ProxyPreserveHost On
+    ProxyRequests Off
+    AllowEncodedSlashes NoDecode
+    ProxyTimeout 600
+
+    RequestHeader set X-Forwarded-Proto "https"
+    RequestHeader set X-Forwarded-Host "argus.kusoft.xyz"
+
+    ProxyPass / http://127.0.0.1:5105/
+    ProxyPassReverse / http://127.0.0.1:5105/
+</VirtualHost>
@@ -0,0 +1,41 @@
+server {
+    listen 80;
+    listen [::]:80;
+    server_name argus.kusoft.xyz;
+
+    location ^~ /.well-known/acme-challenge/ {
+        root /var/www/certbot;
+    }
+
+    location / {
+        return 301 https://$host$request_uri;
+    }
+}
+
+server {
+    listen 443 ssl http2;
+    listen [::]:443 ssl http2;
+    server_name argus.kusoft.xyz;
+
+    ssl_certificate /etc/letsencrypt/live/argus.kusoft.xyz/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/argus.kusoft.xyz/privkey.pem;
+    include /etc/letsencrypt/options-ssl-nginx.conf;
+    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
+
+    client_max_body_size 2g;
+    proxy_read_timeout 600s;
+    proxy_send_timeout 600s;
+
+    location / {
+        proxy_pass http://127.0.0.1:5105;
+        proxy_http_version 1.1;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto https;
+        proxy_set_header X-Forwarded-Host $host;
+        proxy_set_header X-Forwarded-Port 443;
+        proxy_set_header Connection "";
+        proxy_buffering off;
+    }
+}