diff options
Diffstat (limited to 'etc/relayd.conf')
| -rw-r--r-- | etc/relayd.conf | 14 |
1 files changed, 8 insertions, 6 deletions
diff --git a/etc/relayd.conf b/etc/relayd.conf index 46342c1..40f0298 100644 --- a/etc/relayd.conf +++ b/etc/relayd.conf @@ -1,7 +1,6 @@ ip4="193.26.157.243" table <www> { 127.0.0.1 } -table <wwwtext> { REPLACEME } -table <wwwgit> { REPLACEME } +table <home> { REPLACEME } log connection @@ -14,10 +13,12 @@ http protocol https { tls { keypair iwakura.page } tls { keypair text.iwakura.page } tls { keypair git.iwakura.page } + tls { keypair chat.iwakura.page } match request header "Host" value "iwakura.page" forward to <www> match request header "Host" value "www.iwakura.page" forward to <www> - match request header "Host" value "text.iwakura.page" forward to <wwwtext> - match request header "Host" value "git.iwakura.page" forward to <wwwgit> + match request header "Host" value "text.iwakura.page" forward to <home> + match request header "Host" value "git.iwakura.page" forward to <home> + match request header "Host" value "chat.iwakura.page" forward to <www> match response header append "Strict-Transport-Security" value "max-age=31536000; includeSubDomains; preload" match response header append "Cache-Control" value "public, max-age=86400" match response header append "Content-Security-Policy" value "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; object-src 'none';" @@ -32,6 +33,7 @@ relay wwwtls { listen on $ip4 port 443 tls protocol https forward to <www> port 8080 check tcp - forward to <wwwtext> port 8834 check tcp - forward to <wwwgit> port 8855 check tcp + forward to <www> port 7070 check tcp + forward to <home> port 8834 check tcp + forward to <home> port 8855 check tcp } |