nginx.conf 02/03/2020 [INSTALLER]

# Hanayo frontend
server {
    listen 80;
    listen [::]:80;
    server_name osu.ppy.sh www.osu.ppy.sh;
    return 301 https://$server_name$request_uri;
}

server {
    listen 443 ssl;
    server_name osu.ppy.sh www.osu.ppy.sh;

    #ssl on;
    ssl_certificate DIRECTORY/nginx/cert.pem;
    ssl_certificate_key DIRECTORY/nginx/key.pem;
    ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH";
    ssl_prefer_server_ciphers on;

    # Redirect to same site but not osu.ppy.sh
    location / {
        return 302 https://DOMAIN$request_uri;
    }

    #rippleapi
    location /api {
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded_for $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto https;
        proxy_redirect off;
        proxy_pass http://127.0.0.1:40001;
    }

    #lets
    location ~ ^/(web|ss|d)/ {
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto https;
        proxy_set_header Host $http_host;
        proxy_redirect off;
        proxy_pass http://127.0.0.1:5002;
    }

}

# Avatar server
server {
    listen 80;
    listen [::]:80;
    server_name a.ppy.sh;
    return 301 https://$server_name$request_uri;
}

server {
    listen 443 ssl;
    server_name a.ppy.sh;

    ssl_certificate DIRECTORY/nginx/cert.pem;
    ssl_certificate_key DIRECTORY/nginx/key.pem;
    ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH";
    ssl_prefer_server_ciphers on;

    location / {
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto https;
        proxy_set_header Host $http_host;
        proxy_redirect off;
        proxy_pass http://127.0.0.1:5000;    # default port is 5000
    }
}

server {
    listen 80;
    listen 443 ssl;
    server_name i.ppy.sh;

    ssl_certificate DIRECTORY/nginx/cert.pem;
    ssl_certificate_key DIRECTORY/nginx/key.pem;
    ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH";
    ssl_prefer_server_ciphers on;

    root /var/www/osu.ppy.sh/main_menu_icons;
    index index.html;
    location / {
        try_files $uri =404;
    }
}

# Servers
server {
    listen 80;
    listen [::]:80;
    server_name PRE-SETUP-SERVER-BY-AOBA-OSU-AINU.ppy.sh;
    return 301 https://$server_name$request_uri;
}

server {
    listen 443 ssl;
    server_name PRE-SETUP-SERVER-BY-AOBA-OSU-AINU.ppy.sh;

    ssl_certificate DIRECTORY/nginx/cert.pem;
    ssl_certificate_key DIRECTORY/nginx/key.pem;
    ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH";
    ssl_prefer_server_ciphers on;

    location / {
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto https;
        proxy_set_header Host $http_host;
        proxy_redirect off;
        proxy_pass http://127.0.0.1:5001;    # default port is 5000
    }
}

# Bancho server
server {
    listen 443 ssl;
    listen 80;
    server_name c.ppy.sh c1.ppy.sh c2.ppy.sh c3.ppy.sh c4.ppy.sh c5.ppy.sh c6.ppy.sh c7.ppy.sh c8.ppy.sh c9.ppy.sh ce.ppy.sh;

    ssl_certificate DIRECTORY/nginx/cert.pem;
    ssl_certificate_key DIRECTORY/nginx/key.pem;
    ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH";
    ssl_prefer_server_ciphers on;

    location / {
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto https;
        proxy_set_header Host $http_host;
        proxy_redirect off;
        proxy_pass http://127.0.0.1:5001;
    }
}