commit fa332176a1fcf403893bcad6936ed864dc554fe4 parent 8313693265194fc24a89bc97252b900766c7acc9 Author: Chris Roberts <chris.roberts@learningunix.net> Date: Mon, 1 Jun 2026 05:28:51 -0500 added default site to nginx to block unwanted traffic Diffstat:
| A | roles/nginx/files/default.conf | | | 11 | +++++++++++ |
| M | roles/nginx/tasks/main.yml | | | 13 | +++++++++++++ |
2 files changed, 24 insertions(+), 0 deletions(-)
diff --git a/roles/nginx/files/default.conf b/roles/nginx/files/default.conf @@ -0,0 +1,11 @@ +server { + listen 80 default_server; + listen [::]:80 default_server; + listen 443 ssl default_server; + listen [::]:443 ssl default_server; + + ssl_certificate /etc/letsencrypt/live/learningunix.net/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/learningunix.net/privkey.pem; + + return 444; +} diff --git a/roles/nginx/tasks/main.yml b/roles/nginx/tasks/main.yml @@ -87,3 +87,16 @@ src: gitea-ssl.conf dest: /etc/nginx/sites-available/gitea.conf notify: reload nginx + +- name: Deploy default server block + copy: + src: default.conf + dest: /etc/nginx/sites-available/default.conf + notify: reload nginx + +- name: Enable default server block + file: + src: /etc/nginx/sites-available/default.conf + dest: /etc/nginx/sites-enabled/default.conf + state: link + notify: reload nginx