patx/gitman

# Install as /etc/nginx/sites-available/gitman; preserve its enabled symlink.
server {
    listen 80;
    server_name gitman.io *.gitman.io;
    server_tokens off;
    client_max_body_size 64k;
    client_header_timeout 15s;
    return 301 https://$host$request_uri;
}
server {
    listen 80;
    server_name voldservices.com www.voldservices.com;
    server_tokens off;
    return 301 https://voldservices.com$request_uri;
}
server {
    listen 443 ssl;
    http2 on;
    server_name www.voldservices.com;
    server_tokens off;
    ssl_certificate /etc/letsencrypt/live/voldservices.com/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/voldservices.com/privkey.pem;
    include /etc/letsencrypt/options-ssl-nginx.conf;
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
    return 301 https://voldservices.com$request_uri;
}
server {
    listen 443 ssl;
    http2 on;
    server_name voldservices.com;
    ssl_certificate /etc/letsencrypt/live/voldservices.com/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/voldservices.com/privkey.pem;
    include /etc/letsencrypt/options-ssl-nginx.conf;
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
    include /etc/nginx/snippets/gitman-server.conf;
}
server {
    listen 443 ssl;
    http2 on;
    server_name www.gitman.io;
    server_tokens off;
    ssl_certificate /etc/letsencrypt/live/gitman.io/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/gitman.io/privkey.pem;
    include /etc/letsencrypt/options-ssl-nginx.conf;
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
    add_header Strict-Transport-Security $gitman_hsts always;
    return 301 https://gitman.io$request_uri;
}
server {
    listen 443 ssl default_server;
    http2 on;
    server_name gitman.io *.gitman.io;
    ssl_certificate /etc/letsencrypt/live/gitman.io/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/gitman.io/privkey.pem;
    include /etc/letsencrypt/options-ssl-nginx.conf;
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
    location ^~ /static/ {
        alias /opt/apps/gitman/static/;
        add_header Strict-Transport-Security $gitman_hsts always;
        add_header X-Content-Type-Options nosniff always;
        limit_except GET { deny all; }
    }
    # Retain default routing for verified custom-domain Pages sites.
    include /etc/nginx/snippets/gitman-server.conf;
}