justin/new-site
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

infra: MTA-STS HTTPS vhost (cert issued, policy live)

Browse source
This commit is contained in:
justin 2026-06-06 21:03:30 -05:00
parent 7399211271
commit bf4e8c2277
1 changed files with 13 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

15
infra/mta-sts/pw-mta-sts.conf
View file

@ -1,7 +1,18 @@
server {
listen 443 ssl;
http2 on;
server_name mta-sts.performancewest.net;
ssl_certificate /etc/letsencrypt/live/mta-sts.performancewest.net/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/mta-sts.performancewest.net/privkey.pem;
ssl_protocols TLSv1.2 TLSv1.3;
ssl_ciphers ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256;
location /.well-known/mta-sts.txt { root /var/www/mta-sts; default_type text/plain; add_header Cache-Control "max-age=86400"; }
location /.well-known/acme-challenge/ { root /var/www/certbot; }
location / { return 404; }
}
server {
listen 80;
server_name mta-sts.performancewest.net;
location /.well-known/acme-challenge/ { root /var/www/certbot; }
location /.well-known/mta-sts.txt { root /var/www/mta-sts; default_type text/plain; }
location / { return 404; }
location / { return 301 https://$host$request_uri; }
}