1 files changed, 59 insertions, 43 deletions
diff --git a/tools/conf/etc/nginx/sites-enabled/default.conf b/tools/conf/etc/nginx/sites-enabled/default.conf
index fb9fb8e..1bb8afd 100644
--- a/tools/conf/etc/nginx/sites-enabled/default.conf
+++ b/tools/conf/etc/nginx/sites-enabled/default.conf
@@ -1,8 +1,19 @@
 server {
+#if ($http_user_agent ~* (AhrefsBot|SemrushBot|MJ12Bot|DotBot)) {
+#     return 410;
+#}
+
+##listen 443 ssl http2;
     server_name tribu.semdestino.org;
 
     listen 80 default_server;
     listen 443 ssl default_server;
+#  listen [::]:443 ssl http2;
+
+    access_log syslog:server=unix:/dev/log,facility=daemon,tag=nginx_vhost,nohostname main;
+    error_log syslog:server=unix:/dev/log,facility=daemon,tag=nginx_vhost_err,nohostname debug;
+
+    root /etc/nginx/html/;
 
     ssl_certificate /etc/letsencrypt/live/tribu.semdestino.org/fullchain.pem;
     ssl_certificate_key /etc/letsencrypt/live/tribu.semdestino.org/privkey.pem;
@@ -18,62 +29,67 @@ server {
     ssl_stapling on;
     ssl_stapling_verify on;
 
-    access_log syslog:server=unix:/dev/log,facility=daemon,tag=nginx_vhost,nohostname main;
-    error_log syslog:server=unix:/dev/log,facility=daemon,tag=nginx_vhost_err,nohostname debug;
+#proxy_redirect off;
+#proxy_set_header Host $http_host;
+#proxy_set_header X-Forwarded-Host $http_host;
+#proxy_set_header X-Real-IP $remote_addr;
+#proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
 
-    root /etc/html/;
 
-    location /doc {
-        alias /srv/www/doc;
-        index index.html;
+   location /doc {
+       alias /srv/www/doc;
+       index index.html;
+        autoindex on;
     }
 
-    location /pub {
+   location /mirror {
+       proxy_pass http://c1.ank;
+   }
+
+   location /pub {
+       proxy_pass http://wiki.c2.ank:8080;
+   }
+   location ^~ /.well-known {
+       # ACME challenge
+       proxy_pass http://wiki.c2.ank;
+   }
+   location /wiki {
         proxy_pass http://wiki.c2.ank:8080;
-    }
+   }
 
-    location /wiki {
-        proxy_pass http://wiki.c2.ank:8080;
-    }
+   location /git {
+       proxy_pass http://git.c2.ank:8080;
+   }
 
-    location /git {
-        proxy_pass http://git.c2.ank:8080;
-    }
+   location /forum/ {
+        proxy_pass http://forum.c2.ank:8080/;
+   }
 
-    location /forum {
-        proxy_pass http://forum.c2.ank:8080;
-    }
-
-    location /task {
-        proxy_pass http://task.c2.ank:8080;
-    }
-
-    location /shop {
-        proxy_pass http://shop.c2.ank:8080;
-    }
+   #location /task {
+   #    proxy_pass http://task.c2.ank:8080;
+   #}
 
-    location /email {
-        proxy_pass http://email.c2.ank:8080;
-    }
+   # location /shop {
+   #     proxy_pass http://shop.c2.ank:8080;
+   # }
 
-    location /mirror {
-        proxy_pass http://c1.ank;
-    }
+   location /vexim/ {
+       proxy_pass http://vexim.c2.ank:8080/;
+   }
 
-    location /awstats {
-        proxy_pass http://awstats.c2.ank:8080;
-    }
+   # location /email {
+   #     proxy_pass http://email.c2.ank:8080;
+   # }
 
-    location /stats {
-        proxy_pass http://stats.c2.ank:8080;
-    }
+   # location /awstats {
+   #     proxy_pass http://awstats.c2.ank:8080;
+   # }
 
-    # ACME challenge
-    location ^~ /.well-known {
-        proxy_pass http://wiki.c2.ank;
-    }
+   # location /stats {
+   #     proxy_pass http://stats.c2.ank:8080;
+   # }
 
-    location / {
-        proxy_pass http://frontpage.c2.ank;
+   location / {
+        proxy_pass http://frontpage.c2.ank:8080/;
     }
 }