From 9c8d32af8d72af97d75b39f32d7cdc096c8fca47 Mon Sep 17 00:00:00 2001 From: Christopher Berger Date: Fri, 29 May 2026 18:33:13 +0000 Subject: [PATCH] Add configs/nc.wittenberger.us-le-ssl.conf --- configs/nc.wittenberger.us-le-ssl.conf | 42 ++++++++++++++++++++++++++ 1 file changed, 42 insertions(+) create mode 100644 configs/nc.wittenberger.us-le-ssl.conf diff --git a/configs/nc.wittenberger.us-le-ssl.conf b/configs/nc.wittenberger.us-le-ssl.conf new file mode 100644 index 0000000..62e7654 --- /dev/null +++ b/configs/nc.wittenberger.us-le-ssl.conf @@ -0,0 +1,42 @@ + + + DocumentRoot "/var/www/nc.wittenberger.us" + ServerName nc.wittenberger.us + RemoteIPHeader X-Forwarded-For + RemoteIPTrustedProxy 10.10.14.199 + RemoteIPTrustedProxy 173.245.48.0/20 + RemoteIPTrustedProxy 103.21.244.0/22 + RemoteIPTrustedProxy 103.22.200.0/22 + RemoteIPTrustedProxy 103.31.4.0/22 + RemoteIPTrustedProxy 141.101.64.0/18 + RemoteIPTrustedProxy 108.162.192.0/18 + RemoteIPTrustedProxy 190.93.240.0/20 + RemoteIPTrustedProxy 188.114.96.0/20 + RemoteIPTrustedProxy 197.234.240.0/22 + RemoteIPTrustedProxy 198.41.128.0/17 + RemoteIPTrustedProxy 162.158.0.0/15 + RemoteIPTrustedProxy 104.16.0.0/13 + RemoteIPTrustedProxy 104.24.0.0/14 + RemoteIPTrustedProxy 172.64.0.0/13 + RemoteIPTrustedProxy 131.0.72.0/22 + + + Header always set Strict-Transport-Security "max-age=15552000; includeSubDomains" + + + + Options MultiViews FollowSymlinks + AllowOverride All + Order allow,deny + Allow from all + + + TransferLog /var/log/apache2/nc.wittenberger.us_access.log + ErrorLog /var/log/apache2/nc.wittenberger.us_error.log + + +SSLCertificateFile /etc/letsencrypt/live/nc.wittenberger.us/fullchain.pem +SSLCertificateKeyFile /etc/letsencrypt/live/nc.wittenberger.us/privkey.pem +Include /etc/letsencrypt/options-ssl-apache.conf + + \ No newline at end of file