uptime-kuma config

2026-01-25 14:43:24 +00:00
parent d84e412532
commit 73d80ea2b2
32 changed files with 422 additions and 0 deletions
@@ -0,0 +1 @@
+include /etc/nginx/vhost.d/private;
@@ -0,0 +1 @@
+public
@@ -0,0 +1 @@
+include /etc/nginx/vhost.d/private;
@@ -0,0 +1 @@
+include /etc/nginx/vhost.d/private;
@@ -0,0 +1 @@
+include /etc/nginx/vhost.d/private;
@@ -0,0 +1,12 @@
+# Default configuration applied to all virtual hosts
+# Security headers and WAF rules - applied to ALL hosts (public and private)
+
+# Security headers
+add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
+add_header X-Content-Type-Options "nosniff" always;
+add_header X-Frame-Options "SAMEORIGIN" always;
+add_header X-XSS-Protection "1; mode=block" always;
+add_header Referrer-Policy "strict-origin-when-cross-origin" always;
+
+# Include block-exploits rules
+include /etc/nginx/conf.d/block-exploits.conf;
@@ -0,0 +1 @@
+include /etc/nginx/vhost.d/private;
@@ -0,0 +1,6 @@
+# Docker registry needs Authorization header passthrough
+proxy_set_header Authorization $http_authorization;
+proxy_pass_header Authorization;
+
+# Private access control
+include /etc/nginx/vhost.d/private;
@@ -0,0 +1 @@
+include /etc/nginx/vhost.d/private;
@@ -0,0 +1 @@
+include /etc/nginx/vhost.d/private;
@@ -0,0 +1 @@
+include /etc/nginx/vhost.d/private;
@@ -0,0 +1 @@
+include /etc/nginx/vhost.d/private;
@@ -0,0 +1 @@
+public
@@ -0,0 +1 @@
+include /etc/nginx/vhost.d/private;
@@ -0,0 +1 @@
+include /etc/nginx/vhost.d/private;
@@ -0,0 +1 @@
+include /etc/nginx/vhost.d/private;
@@ -0,0 +1 @@
+public
@@ -0,0 +1 @@
+include /etc/nginx/vhost.d/private;
@@ -0,0 +1,7 @@
+# Access control for private hosts
+# Symlink this file to restrict access to local networks only
+
+allow 192.168.1.0/24;
+allow 172.16.0.0/12;
+# allow 162.10.130.22;  # Netskope - uncomment if needed for corporate VPN
+deny all;
@@ -0,0 +1 @@
+include /etc/nginx/vhost.d/private;
@@ -0,0 +1 @@
+include /etc/nginx/vhost.d/private;
@@ -0,0 +1 @@
+public
@@ -0,0 +1 @@
+public
@@ -0,0 +1 @@
+public
@@ -0,0 +1 @@
+include /etc/nginx/vhost.d/private;
@@ -0,0 +1 @@
+public
@@ -0,0 +1 @@
+include /etc/nginx/vhost.d/private;
@@ -0,0 +1 @@
+include /etc/nginx/vhost.d/private;
@@ -0,0 +1 @@
+public