@@ -26,14 +26,13 @@ server {
2626 rewrite ^ http ://edgeapi.rubyonrails.org$request_uri redirect;
2727 }
2828
29-
3029 listen 443 ssl ; # managed by Certbot
3130 ssl_certificate /etc/letsencrypt/live/api.rubyonrails.org/fullchain.pem; # managed by Certbot
3231 ssl_certificate_key /etc/letsencrypt/live/api.rubyonrails.org/privkey.pem; # managed by Certbot
3332 include /etc/letsencrypt/options-ssl -nginx.conf; # managed by Certbot
3433 ssl_dhparam /etc/letsencrypt/ssl -dhparams.pem; # managed by Certbot
35- add_header Strict-Transport-Security "max-age=63072000; includeSubdomains;" always; # config to enable HSTS
3634
35+ add_header Strict-Transport-Security "max-age=63072000; includeSubdomains;" always; # enable HSTS
3736}
3837
3938server {
@@ -64,13 +63,13 @@ server {
6463 rewrite ^ http ://edgeguides.rubyonrails.org$request_uri redirect;
6564 }
6665
67-
6866 listen 443 ssl ; # managed by Certbot
6967 ssl_certificate /etc/letsencrypt/live/api.rubyonrails.org/fullchain.pem; # managed by Certbot
7068 ssl_certificate_key /etc/letsencrypt/live/api.rubyonrails.org/privkey.pem; # managed by Certbot
7169 include /etc/letsencrypt/options-ssl -nginx.conf; # managed by Certbot
7270 ssl_dhparam /etc/letsencrypt/ssl -dhparams.pem; # managed by Certbot
73- add_header Strict-Transport-Security "max-age=63072000; includeSubdomains;" always; # config to enable HSTS
71+
72+ add_header Strict-Transport-Security "max-age=63072000; includeSubdomains;" always; # enable HSTS
7473}
7574
7675#
@@ -84,14 +83,13 @@ server {
8483 root /home/rails/api/edge;
8584 index index .html;
8685
87-
8886 listen 443 ssl ; # managed by Certbot
8987 ssl_certificate /etc/letsencrypt/live/api.rubyonrails.org/fullchain.pem; # managed by Certbot
9088 ssl_certificate_key /etc/letsencrypt/live/api.rubyonrails.org/privkey.pem; # managed by Certbot
9189 include /etc/letsencrypt/options-ssl -nginx.conf; # managed by Certbot
9290 ssl_dhparam /etc/letsencrypt/ssl -dhparams.pem; # managed by Certbot
93- add_header Strict-Transport-Security "max-age=63072000; includeSubdomains;" always; # config to enable HSTS
9491
92+ add_header Strict-Transport-Security "max-age=63072000; includeSubdomains;" always; # enable HSTS
9593}
9694
9795server {
@@ -106,14 +104,13 @@ server {
106104 root /home/rails/guides/edge;
107105 index index .html;
108106
109-
110107 listen 443 ssl ; # managed by Certbot
111108 ssl_certificate /etc/letsencrypt/live/api.rubyonrails.org/fullchain.pem; # managed by Certbot
112109 ssl_certificate_key /etc/letsencrypt/live/api.rubyonrails.org/privkey.pem; # managed by Certbot
113110 include /etc/letsencrypt/options-ssl -nginx.conf; # managed by Certbot
114111 ssl_dhparam /etc/letsencrypt/ssl -dhparams.pem; # managed by Certbot
115- add_header Strict-Transport-Security "max-age=63072000; includeSubdomains;" always; # config to enable HSTS
116112
113+ add_header Strict-Transport-Security "max-age=63072000; includeSubdomains;" always; # enable HSTS
117114}
118115
119116#
@@ -145,55 +142,42 @@ server {
145142 return 301 http ://rubyonrails.org;
146143}
147144
148-
149145server {
150146 if ( $host = api.rubyonrails.org) {
151147 return 301 https://$host$request_uri ;
152148 } # managed by Certbot
153149
154-
155150 server_name api.rubyonrails.org;
156151 listen 80 ;
157152 return 404 ; # managed by Certbot
158-
159-
160153}
161154
162155server {
163156 if ( $host = edgeapi.rubyonrails.org) {
164157 return 301 https://$host$request_uri ;
165158 } # managed by Certbot
166159
167-
168160 server_name edgeapi.rubyonrails.org;
169161 listen 80 ;
170162 return 404 ; # managed by Certbot
171-
172-
173163}
174164
175165server {
176166 if ( $host = edgeguides.rubyonrails.org) {
177167 return 301 https://$host$request_uri ;
178168 } # managed by Certbot
179169
180-
181170 server_name edgeguides.rubyonrails.org;
182171 listen 80 ;
183172 return 404 ; # managed by Certbot
184-
185-
186173}
187174
188175server {
189176 if ( $host = guides.rubyonrails.org) {
190177 return 301 https://$host$request_uri ;
191178 } # managed by Certbot
192179
193-
194180 server_name guides.rubyonrails.org;
195181 listen 80 ;
196182 return 404 ; # managed by Certbot
197-
198-
199183}
0 commit comments