mirror of
https://github.com/TheBinaryNinja/tvapp2.git
synced 2026-06-04 18:55:41 -04:00
build: push tvapp v2 docker files
This commit is contained in:
@@ -1,12 +1,13 @@
|
||||
# #
|
||||
# @project thetvapp-docker
|
||||
# @about Nginx site-configs default configuration file
|
||||
# @file /root/defaults/nginx/nginx.conf.sample
|
||||
# @repo https://github.com/Aetherinox/thetvapp-docker
|
||||
# @generated 2024-11-30
|
||||
# @project tvapp2
|
||||
# @usage docker image which allows you to download a m3u playlist and EPG guide data for the
|
||||
# IPTV service TheTvApp.
|
||||
# @file nginx.conf.sample
|
||||
# @repo https://github.com/Aetherinox/docker-base-alpine
|
||||
# https://git.binaryninja.net/pub_projects/tvapp2
|
||||
# #
|
||||
|
||||
user abc;
|
||||
user dockerx;
|
||||
|
||||
# Set number of worker processes automatically based on number of CPU cores.
|
||||
include /config/nginx/worker_processes.conf;
|
||||
@@ -39,7 +40,7 @@ http
|
||||
|
||||
# Name servers used to resolve names of upstream servers into addresses.
|
||||
# It's also needed when using tcpsocket and udpsocket in Lua modules.
|
||||
#resolver 1.1.1.1 1.0.0.1 2606:4700:4700::1111 2606:4700:4700::1001;
|
||||
# resolver 1.1.1.1 1.0.0.1 2606:4700:4700::1111 2606:4700:4700::1001;
|
||||
include /config/nginx/resolver.conf;
|
||||
|
||||
# Don't tell nginx version to the clients. Default is 'on'.
|
||||
@@ -63,7 +64,7 @@ http
|
||||
# included in server blocks where listen 443 is defined
|
||||
|
||||
# Enable gzipping of responses.
|
||||
#gzip on;
|
||||
# gzip on;
|
||||
|
||||
# Set the Vary HTTP header as defined in the RFC 2616. Default is 'off'.
|
||||
gzip_vary on;
|
||||
|
||||
@@ -1,9 +1,10 @@
|
||||
# #
|
||||
# @project thetvapp-docker
|
||||
# @about Nginx site-configs default configuration file
|
||||
# @file /root/defaults/nginx/site-confs/default.conf
|
||||
# @repo https://github.com/Aetherinox/thetvapp-docker
|
||||
# @generated 2024-11-30
|
||||
# @project tvapp2
|
||||
# @usage docker image which allows you to download a m3u playlist and EPG guide data for the
|
||||
# IPTV service TheTvApp.
|
||||
# @file nginx.conf.sample
|
||||
# @repo https://github.com/Aetherinox/docker-base-alpine
|
||||
# https://git.binaryninja.net/pub_projects/tvapp2
|
||||
# #
|
||||
|
||||
server
|
||||
@@ -29,39 +30,35 @@ server
|
||||
location /
|
||||
{
|
||||
# enable for basic auth
|
||||
# auth_basic "Restricted";
|
||||
# auth_basic_user_file /config/nginx/.htpasswd;
|
||||
#auth_basic "Restricted";
|
||||
#auth_basic_user_file /config/nginx/.htpasswd;
|
||||
|
||||
# index > fancy
|
||||
fancyindex on;
|
||||
fancyindex_header "/theme/header.html";
|
||||
fancyindex_footer "/theme/footer.html";
|
||||
fancyindex_ignore "theme";
|
||||
fancyindex_time_format "%m-%d-%Y %l:%M:%S %P";
|
||||
fancyindex_directories_first on;
|
||||
fancyindex_localtime on;
|
||||
fancyindex_name_length 255;
|
||||
fancyindex_show_path off;
|
||||
fancyindex_show_dotfiles off;
|
||||
fancyindex_hide_symlinks on;
|
||||
fancyindex_hide_parent_dir on;
|
||||
fancyindex_default_sort name;
|
||||
fancyindex on;
|
||||
fancyindex_header "/theme/header.html";
|
||||
fancyindex_footer "/theme/footer.html";
|
||||
fancyindex_ignore "theme";
|
||||
fancyindex_time_format "%m-%d-%Y %T";
|
||||
fancyindex_name_length 255;
|
||||
fancyindex_show_dotfiles off;
|
||||
fancyindex_hide_symlinks on;
|
||||
fancyindex_default_sort name;
|
||||
|
||||
# index > auto
|
||||
autoindex_exact_size off;
|
||||
autoindex_format html;
|
||||
autoindex_localtime on;
|
||||
autoindex_exact_size off;
|
||||
autoindex_format html;
|
||||
autoindex_localtime on;
|
||||
|
||||
gzip on;
|
||||
gzip_vary on;
|
||||
gzip_types text/css text/javascript text/xml application/atom+xml application/rss+xml text/markdown text/mathml text/plain text/vnd.sun.j2me.app-descriptor text/vnd.wap.wml text/x-component application/json application/xhtml+xml application/xspf+xml font/woff font/woff2 image/avif image/bmp image/png image/svg+xml image/tiff image/vnd.wap.wbmp image/webp image/x-icon image/x-jng audio/midi audio/mpeg audio/ogg audio/x-m4a audio/x-realaudio;
|
||||
gzip_proxied any;
|
||||
gzip_comp_level 1;
|
||||
gzip_http_version 1.0;
|
||||
gunzip on;
|
||||
gzip_static on;
|
||||
gzip on;
|
||||
gzip_vary on;
|
||||
gzip_types text/css text/javascript text/xml application/atom+xml application/rss+xml text/markdown text/mathml text/plain text/vnd.sun.j2me.app-descriptor text/vnd.wap.wml text/x-component application/json application/xhtml+xml application/xspf+xml font/woff font/woff2 image/avif image/bmp image/png image/svg+xml image/tiff image/vnd.wap.wbmp image/webp image/x-icon image/x-jng audio/midi audio/mpeg audio/ogg audio/x-m4a audio/x-realaudio;
|
||||
gzip_proxied any;
|
||||
gzip_comp_level 1;
|
||||
gzip_http_version 1.0;
|
||||
gunzip on;
|
||||
gzip_static on;
|
||||
|
||||
try_files $uri $uri/ /index.html /index.htm /index.php$is_args$args;
|
||||
try_files $uri $uri/ /index.html /index.htm /index.php$is_args$args;
|
||||
}
|
||||
|
||||
location ~ ^(.+\.php)(.*)$
|
||||
|
||||
@@ -1,45 +1,67 @@
|
||||
|
||||
# #
|
||||
# @project thetvapp-docker
|
||||
# @about Nginx site-configs default configuration file
|
||||
# @file /root/defaults/nginx/ssl.conf.sample
|
||||
# @repo https://github.com/Aetherinox/thetvapp-docker
|
||||
# @generated 2024-11-30
|
||||
# @project tvapp2
|
||||
# @usage docker image which allows you to download a m3u playlist and EPG guide data for the
|
||||
# IPTV service TheTvApp.
|
||||
# @file nginx.conf.sample
|
||||
# @repo https://github.com/Aetherinox/docker-base-alpine
|
||||
# https://git.binaryninja.net/pub_projects/tvapp2
|
||||
# #
|
||||
|
||||
### Mozilla Recommendations
|
||||
# generated 2023-06-25, Mozilla Guideline v5.7, nginx 1.24.0, OpenSSL 3.1.1, intermediate configuration
|
||||
# https://ssl-config.mozilla.org/#server=nginx&version=1.24.0&config=intermediate&openssl=3.1.1&guideline=5.7
|
||||
# #
|
||||
# generated 2023-06-25, Mozilla Guideline v5.7, nginx 1.24.0, OpenSSL 3.1.1, intermediate configuration
|
||||
# https://ssl-config.mozilla.org/#server=nginx&version=1.24.0&config=intermediate&openssl=3.1.1&guideline=5.7
|
||||
# #
|
||||
|
||||
ssl_certificate /config/keys/cert.crt;
|
||||
ssl_certificate_key /config/keys/cert.key;
|
||||
ssl_session_timeout 1d;
|
||||
ssl_session_cache shared:MozSSL:10m; # about 40000 sessions
|
||||
ssl_session_tickets off;
|
||||
ssl_certificate /config/keys/cert.crt;
|
||||
ssl_certificate_key /config/keys/cert.key;
|
||||
ssl_session_timeout 1d;
|
||||
ssl_session_cache shared:MozSSL:10m; # about 40000 sessions
|
||||
ssl_session_tickets off;
|
||||
|
||||
# curl https://ssl-config.mozilla.org/ffdhe2048.txt > /path/to/dhparam
|
||||
ssl_dhparam /config/nginx/dhparams.pem;
|
||||
# #
|
||||
# curl https://ssl-config.mozilla.org/ffdhe2048.txt > /path/to/dhparam
|
||||
# #
|
||||
|
||||
# intermediate configuration
|
||||
ssl_protocols TLSv1.2 TLSv1.3;
|
||||
ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CHACHA20-POLY1305;
|
||||
ssl_prefer_server_ciphers off;
|
||||
ssl_dhparam /config/nginx/dhparams.pem;
|
||||
|
||||
# HSTS (ngx_http_headers_module is required) (63072000 seconds)
|
||||
#add_header Strict-Transport-Security "max-age=63072000" always;
|
||||
# #
|
||||
# intermediate configuration
|
||||
# #
|
||||
|
||||
# OCSP stapling
|
||||
#ssl_stapling on;
|
||||
#ssl_stapling_verify on;
|
||||
ssl_protocols TLSv1.2 TLSv1.3;
|
||||
ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256;
|
||||
ssl_prefer_server_ciphers on;
|
||||
|
||||
# verify chain of trust of OCSP response using Root CA and Intermediate certs
|
||||
#ssl_trusted_certificate /config/keys/cert.crt;
|
||||
# #
|
||||
# OCSP stapling
|
||||
# #
|
||||
|
||||
# Optional additional headers
|
||||
#add_header Cache-Control "no-transform" always;
|
||||
#add_header Content-Security-Policy "upgrade-insecure-requests; frame-ancestors 'self'" always;
|
||||
#add_header Permissions-Policy "interest-cohort=()" always;
|
||||
#add_header Referrer-Policy "same-origin" always;
|
||||
#add_header X-Content-Type-Options "nosniff" always;
|
||||
#add_header X-Frame-Options "SAMEORIGIN" always;
|
||||
#add_header X-UA-Compatible "IE=Edge" always;
|
||||
#add_header X-XSS-Protection "1; mode=block" always;
|
||||
# ssl_stapling on;
|
||||
# ssl_stapling_verify on;
|
||||
|
||||
# #
|
||||
# verify chain of trust of OCSP response using Root CA and Intermediate certs
|
||||
# #
|
||||
|
||||
# ssl_trusted_certificate /config/keys/cert.crt;
|
||||
|
||||
# #
|
||||
# HSTS (ngx_http_headers_module is required) (63072000 seconds)
|
||||
# #
|
||||
|
||||
add_header X-Content-Type-Options nosniff;
|
||||
add_header Strict-Transport-Security "max-age=31536000; includeSubdomains" always;
|
||||
|
||||
# #
|
||||
# Optional additional headers
|
||||
# #
|
||||
|
||||
# add_header Cache-Control "no-transform" always;
|
||||
# add_header Content-Security-Policy "upgrade-insecure-requests; frame-ancestors 'self'" always;
|
||||
# add_header Permissions-Policy "interest-cohort=()" always;
|
||||
# add_header Referrer-Policy "same-origin" always;
|
||||
# add_header X-Content-Type-Options "nosniff" always;
|
||||
# add_header X-Frame-Options "SAMEORIGIN" always;
|
||||
# add_header X-UA-Compatible "IE=Edge" always;
|
||||
# add_header X-XSS-Protection "1; mode=block" always;
|
||||
|
||||
Reference in New Issue
Block a user