lingkai5wu
5d53aed6c0
feat: update homepage server_name to home subdomain
2026-10-24 23:47:18 +08:00
lingkai5wu
82ff78cae0
feat: add homepage reverse proxy
2026-10-24 21:29:47 +08:00
lingkai5wu
70ef71eefd
feat: add miyouqian reverse proxy
2026-10-18 13:06:45 +08:00
lingkai5wu
cf4c6983e2
fix: resolve container backends dynamically to allow nginx startup
2026-10-16 16:06:17 +08:00
lingkai5wu
c323507de4
chore: disable OCSP stapling (origin cert lacks OCSP URI)
...
The origin certificate does not include an OCSP responder URL,
causing nginx warnings. Comment out stapling directives until
a proper certificate with OCSP support is deployed.
2026-10-12 13:20:42 +08:00
lingkai5wu
ac9e744692
feat: enable OCSP stapling
...
OCSP stapling improves TLS handshake performance and privacy by
having the server provide certificate revocation status directly,
so clients don't need to query the CA separately.
2026-10-12 13:02:30 +08:00
lingkai5wu
a7a1051ea1
feat: redirect HTTP requests to HTTPS
...
Replace the 404 response on port 80 with a 301 redirect to the
equivalent HTTPS URL, so users who type http:// are seamlessly
upgraded to a secure connection.
2026-10-12 13:00:22 +08:00
lingkai5wu
1be33450f0
chore: disable TLS session tickets
...
Session tickets weaken forward secrecy; disable them to prevent
past sessions from being decrypted if the ticket key is compromised.
2026-10-12 13:00:10 +08:00
lingkai5wu
b01d4e8f1e
feat: migrate SSL configuration to centralized https.conf snippet
2026-10-12 12:54:07 +08:00
lingkai5wu
fc14ba0e87
fix: enable IPv6 listener for qBittorrent
2026-10-08 13:12:25 +08:00
lingkai5wu
c9cce852bf
feat: centralize nginx TLS and proxy defaults
2026-09-25 13:13:37 +08:00
lingkai5wu
7cc6b34d31
chore: enforce LF line endings
2026-09-25 13:13:37 +08:00
lingkai5wu
4e17dfc9c9
feat: add trusted client IP support for multiple gateways
2026-09-22 17:08:25 +08:00
lingkai5wu
9ad36c999c
fix: prevent origin token from being forwarded upstream
2026-09-22 13:09:23 +08:00
lingkai5wu
adcdf6e8c8
feat: add EdgeOne X-Origin-Token validation
2026-09-21 23:58:08 +08:00
lingkai5wu
8edc218dbf
feat: add IPv6 listeners
2026-09-20 17:24:56 +08:00
lingkai5wu
50c04fa5bf
feat: restrict AdGuard Home, Backrest, and qBittorrent to internal network
2026-09-18 19:12:48 +08:00
lingkai5wu
8b6e3fd004
feat: add qBittorrent reverse proxy
2026-09-18 19:12:48 +08:00
lingkai5wu
3080c7eea9
feat: add Home Assistant reverse proxy
2026-09-18 19:12:48 +08:00
lingkai5wu
e7a1549977
feat: add conf.d templates for AdGuard Home and Backrest
2026-09-18 19:12:42 +08:00
lingkai5wu
0bced87fff
feat: initial Nginx templates
2026-09-18 19:12:34 +08:00
lingkai5wu