Update

common/bloat.conf

@@ -1,8 +1,6 @@
-add_header Onion-Location http://bloat.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajhwvidqafczrad.onion$request_uri;
-
 location / {
 	client_max_body_size 100m;
-	proxy_pass http://localhost:5041/; # The / is important!
+	proxy_pass http://localhost:5041/;
 	proxy_redirect off;
 	proxy_set_header Host $http_host;
 	proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

common/breezewiki.conf

@@ -0,0 +1,11 @@
+add_header Onion-Location http://bw.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajhwvidqafczrad.onion$request_uri;
+
+error_log /var/log/nginx/bw.err;
+
+location / {
+	proxy_pass http://127.0.0.1:10416/;
+	proxy_redirect off;
+	proxy_set_header Host $host;
+	proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+	proxy_set_header X-Forwarded-Proto $scheme;
+}

common/convos.conf

@@ -1,7 +1,7 @@
 add_header Onion-Location http://cv.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajhwvidqafczrad.onion$request_uri;
 
 location / {
-	proxy_pass http://localhost:9000/; # The / is important!
+	proxy_pass http://localhost:9000/;
 	proxy_redirect off;
 	proxy_http_version 1.1;
 	proxy_set_header Upgrade $http_upgrade;

common/gitea.conf

@@ -2,7 +2,7 @@ add_header Onion-Location http://git.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kaj
 
 location / {
 	client_max_body_size 100m;
-	proxy_pass http://localhost:3000/; # The / is important!
+	proxy_pass http://localhost:3000/;
 	proxy_redirect off;
 	proxy_set_header Host $host;
 	proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

common/jellyfin.conf

@@ -3,7 +3,7 @@ add_header Onion-Location http://jf.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajh
 client_max_body_size 5120M;
 
 location / {
-	proxy_pass http://localhost:8096/; # The / is important!
+	proxy_pass http://localhost:8096/;
 	proxy_redirect off;
 	proxy_set_header Host $host;
 	proxy_set_header X-Real-IP $remote_addr;

common/libreddit.conf

@@ -3,7 +3,7 @@ add_header Onion-Location http://lr.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajh
 error_log off;
 
 location / {
-	proxy_pass http://localhost:2501/; # The / is important!
+	proxy_pass http://localhost:2501/;
 	proxy_http_version 1.1;
 	proxy_redirect off;
 	proxy_set_header Host $host;

common/libretranslate.conf

@@ -1,7 +1,7 @@
 add_header Onion-Location http://lt.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajhwvidqafczrad.onion$request_uri;
 
 location / {
-	proxy_pass http://localhost:5001/; # The / is important!
+	proxy_pass http://unix:/var/socks/libretranslate.sock;
 	proxy_redirect off;
 	proxy_set_header Host $host;
 	proxy_set_header X-Forwarded-Proto $scheme;

common/librex.conf

@@ -13,6 +13,3 @@ location ~ \.php$ {
 	fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
 	include /etc/nginx/fastcgi_params;
 }
-
-access_log /var/log/nginx/librex-access.log;
-error_log /var/log/nginx/librex-error.log;

common/mail.conf

@@ -42,7 +42,7 @@ location /mobileconfig {
 }
 
 location /radicale/ {
-	proxy_pass http://localhost:5232/; # The / is important!
+	proxy_pass http://localhost:5232/;
 	proxy_set_header X-Script-Name /radicale;
 	proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
 	proxy_pass_header Authorization;

common/morss.conf

@@ -1,7 +1,7 @@
 add_header Onion-Location http://morss.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajhwvidqafczrad.onion$request_uri;
 
 location / {
-	proxy_pass http://localhost:8000/; # The / is important!
+	proxy_pass http://localhost:8000/;
 	proxy_redirect off;
 	proxy_set_header Host $host;
 	proxy_set_header X-Forwarded-Proto $scheme;

common/nitter.conf

@@ -1,7 +1,7 @@
 add_header Onion-Location http://nt.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajhwvidqafczrad.onion$request_uri;
 
 location / {
-	proxy_pass http://localhost:5744/; # The / is important!
+	proxy_pass http://localhost:5744/;
 	proxy_http_version 1.1;
 	proxy_redirect off;
 	proxy_set_header Host $host;

common/piped.conf

@@ -1,4 +1,4 @@
 location / {
-	proxy_pass http://localhost:8005/; # The / is important!
+	proxy_pass http://localhost:8005/;
 	proxy_set_header Host $host;
 }

common/quetre.conf

@@ -3,12 +3,13 @@ add_header Onion-Location http://qr.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajh
 access_log /var/log/nginx/quetre-access.log;
 
 location / {
-	proxy_pass http://localhost:2498/; # The / is important!
+	proxy_pass http://localhost:2498/;
 	proxy_redirect off;
 	proxy_set_header Host $host;
 	proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
 	proxy_set_header X-Forwarded-Proto $scheme;
 }
-if ($http_user_agent = "Mozilla/5.0 (compatible; Farside/0.1.0; +https://farside.link)"){
-return 403;
+
+if ($http_user_agent = "Mozilla/5.0 (compatible; Farside/0.1.0; +https://farside.link)") {
+	return 403;
 }

common/rimgo.conf

@@ -4,7 +4,7 @@ access_log off;
 error_log /var/log/nginx/error.log crit;
 
 location / {
-	proxy_pass http://127.0.0.1:3506/;
+	proxy_pass http://localhost:5001/;
 	proxy_set_header X-Forwarded-For $remote_addr;
 	proxy_set_header Host $host;    # so Invidious knows domain
 	proxy_http_version 1.1;         # to keep alive

common/scribe.conf

@@ -1,7 +1,7 @@
 add_header Onion-Location http://scribe.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajhwvidqafczrad.onion$request_uri;
 
 location / {
-	proxy_pass http://127.0.0.1:5467/; # The / is important!
+	proxy_pass http://127.0.0.1:5467/;
 	proxy_redirect off;
 	proxy_set_header Host $host;
 	proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

common/simpleertube.conf

@@ -1,7 +1,7 @@
 add_header Onion-Location http://st.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajhwvidqafczrad.onion$request_uri;
 
 location / {
-	proxy_pass http://localhost:2503/; # The / is important!
+	proxy_pass http://unix:/var/socks/simpleertube.sock;
 	proxy_redirect off;
 	proxy_set_header Host $host;
 	proxy_set_header X-Forwarded-Proto $scheme;

common/simplytranslate.conf

@@ -1,7 +1,7 @@
 add_header Onion-Location http://tl.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajhwvidqafczrad.onion$request_uri;
 
 location / {
-	proxy_pass http://unix:/var/socks/simplytranslate.sock; # The / is important!
+	proxy_pass http://unix:/var/socks/simplytranslate.sock;
 	proxy_redirect off;
 	proxy_set_header Host $host;
 	proxy_set_header X-Forwarded-Proto $scheme;

common/teddit.conf

@@ -1,7 +1,7 @@
 add_header Onion-Location http://td.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajhwvidqafczrad.onion$request_uri;
 
 location / {
-	proxy_pass http://localhost:8003/; # The / is important!
+	proxy_pass http://localhost:8003/;
 	proxy_redirect off;
 	proxy_set_header Host $host;
 	proxy_set_header X-Forwarded-Proto $scheme;

common/vikunja.conf

@@ -1,5 +1,5 @@
 location / {
-	root /var/www/vikunja;
+	root /var/www/vikunja-frontend/dist;
 	try_files $uri $uri/ /;
 	index index.html index.htm;
 }

common/wikiless.conf

@@ -1,7 +1,7 @@
 add_header Onion-Location http://wl.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajhwvidqafczrad.onion$request_uri;
 
 location / {
-	proxy_pass http://127.0.0.1:6629/; # The / is important!
+	proxy_pass http://127.0.0.1:6629/;
 	proxy_http_version 1.1;
 	proxy_redirect off;
 	proxy_set_header Host $host;

common/znc.conf

@@ -0,0 +1,9 @@
+add_header Onion-Location http://znc.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajhwvidqafczrad.onion$request_uri;
+
+location / {
+	proxy_pass https://127.0.0.1:6697/;
+	proxy_redirect off;
+	proxy_set_header Host $host;
+	proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+	proxy_set_header X-Forwarded-Proto $scheme;
+}

sites-available/bloat.conf

@@ -1,21 +1,3 @@
-server {
-	listen 80;
-	listen [::]:80;
-
-	server_name bloat.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajhwvidqafczrad.onion;
-
-	include common/bloat.conf;
-}
-
-server {
-	listen 11020;
-	listen [::]:11020;
-
-	server_name vern4apuwvw4xtfz5dzlqpba2gcs7d3lqhs2bzd6j466wjxoynba.b32.i2p;
-
-	include common/bloat.conf;
-}
-
 server {
 	listen 443 ssl http2;
 	server_name bloat.vern.cc;

sites-available/breezewiki.conf

@@ -0,0 +1,33 @@
+server {
+	listen 80;
+	listen [::]:80;
+
+	server_name bw.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajhwvidqafczrad.onion breezewiki.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajhwvidqafczrad.onion fandom.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajhwvidqafczrad.onion;
+
+	include common/breezewiki.conf;
+}
+
+server {
+	listen 11041;
+	listen [::]:11041;
+
+	server_name vern3g7d7ykel6suo6fxiqk5ijzof7rz7k5xqcdjhm66vz65ijva.b32.i2p;
+
+	include common/breezewiki.conf;
+}
+
+server {
+	listen 443 ssl http2;
+	listen [::]:443 ssl http2;
+	include snippets/lets-encrypt.conf;
+	include snippets/headers.conf;
+	server_name bw.vern.cc breezewiki.vern.cc fandom.vern.cc;
+	include common/breezewiki.conf;
+}
+
+server {
+	listen 80;
+	listen [::]:80;
+	return 301 https://$host$request_uri;
+	server_name bw.vern.cc breezewiki.vern.cc fandom.vern.cc;
+}

sites-available/matrix.conf

@@ -1,3 +1,91 @@
+server {
+	listen 80;
+	listen [::]:80;
+
+	listen 8449 default_server;
+	listen [::]:8449 default_server;
+
+	server_name mtrx.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajhwvidqafczrad.onion;
+
+	add_header Onion-Location http://mtrx.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajhwvidqafczrad.onion$request_uri;
+
+	location ~ ^(/_matrix|/_synapse/client) {
+		# note: do not add a path (even a single /) after the port in `proxy_pass`,
+		# otherwise nginx will canonicalise the URI and cause signature verification
+		# errors.
+		proxy_pass http://localhost:8008;
+		proxy_set_header X-Forwarded-For $remote_addr;
+		proxy_set_header X-Forwarded-Proto $scheme;
+		proxy_set_header Host $host;
+
+		# Nginx by default only allows file uploads up to 1M in size
+		# Increase client_max_body_size to match max_upload_size defined in homeserver.yaml
+		client_max_body_size 1024M;
+	}
+	## well-known
+	location /.well-known/matrix/support {
+		add_header Access-Control-Allow-Origin '*' always;
+		add_header Content-Type application/json;
+		return 200 '{"admins": [{"matrix_id": "@root:vern.cc", "email_address": "tildemaster@vern.cc", "role": "admin"}], "support_page": "https://matrix.to/#/#vern:vern.cc"}';
+	}
+
+	location /.well-known/matrix/server {
+		add_header Access-Control-Allow-Origin '*' always;
+		add_header Content-Type application/json;
+		return 200 '{"m.server": "mtrx.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajhwvidqafczrad.onion:80"}';
+	}
+
+	location /.well-known/matrix/client {
+		add_header Access-Control-Allow-Origin '*' always;
+		add_header Content-Type application/json;
+		return 200 '{"m.homeserver": {"base_url": "http://mtrx.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajhwvidqafczrad.onion"}}';
+	}
+}
+
+server {
+	listen 11043;
+	listen [::]:11043;
+
+	listen 8450 default_server;
+	listen [::]:8450 default_server;
+
+	server_name verndnomc4cnte4aw7yrfpse33vrw2nlwoxozxmf77zqquk6ea7q.b32.i2p;
+
+	add_header Onion-Location http://mtrx.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajhwvidqafczrad.onion$request_uri;
+
+	location ~ ^(/_matrix|/_synapse/client) {
+		# note: do not add a path (even a single /) after the port in `proxy_pass`,
+		# otherwise nginx will canonicalise the URI and cause signature verification
+		# errors.
+		proxy_pass http://localhost:8008;
+		proxy_set_header X-Forwarded-For $remote_addr;
+		proxy_set_header X-Forwarded-Proto $scheme;
+		proxy_set_header Host $host;
+
+		# Nginx by default only allows file uploads up to 1M in size
+		# Increase client_max_body_size to match max_upload_size defined in homeserver.yaml
+		client_max_body_size 1024M;
+	}
+	## well-known
+	location /.well-known/matrix/support {
+		add_header Access-Control-Allow-Origin '*' always;
+		add_header Content-Type application/json;
+		return 200 '{"admins": [{"matrix_id": "@root:vern.cc", "email_address": "tildemaster@vern.cc", "role": "admin"}], "support_page": "https://matrix.to/#/#vern:vern.cc"}';
+	}
+
+	location /.well-known/matrix/server {
+		add_header Access-Control-Allow-Origin '*' always;
+		add_header Content-Type application/json;
+		return 200 '{"m.server": "verndnomc4cnte4aw7yrfpse33vrw2nlwoxozxmf77zqquk6ea7q.b32.i2p:80"}';
+	}
+
+	location /.well-known/matrix/client {
+		add_header Access-Control-Allow-Origin '*' always;
+		add_header Content-Type application/json;
+		return 200 '{"m.homeserver": {"base_url": "http://verndnomc4cnte4aw7yrfpse33vrw2nlwoxozxmf77zqquk6ea7q.b32.i2p"}}';
+	}
+}
+
 server {
 	listen 443 ssl http2;
 	listen [::]:443 ssl http2;
@@ -9,6 +97,8 @@ server {
 
 	server_name mtrx.vern.cc;
 
+	add_header Onion-Location http://mtrx.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajhwvidqafczrad.onion$request_uri;
+
 	location ~ ^(/_matrix|/_synapse/client) {
 		# note: do not add a path (even a single /) after the port in `proxy_pass`,
 		# otherwise nginx will canonicalise the URI and cause signature verification
@@ -40,8 +130,8 @@ server {
 		add_header Content-Type application/json;
 		return 200 '{"m.homeserver": {"base_url": "https://mtrx.vern.cc"}}';
 	}
-
 }
+
 server {
 	server_name dim.vern.cc;
 	listen 443 ssl;

sites-available/znc.conf

@@ -0,0 +1,33 @@
+server {
+	listen 80;
+	listen [::]:80;
+
+	server_name znc.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajhwvidqafczrad.onion;
+
+	include common/znc.conf;
+}
+
+server {
+	listen 11042;
+	listen [::]:11042;
+
+	server_name vernd722rkd3v2o5ppu3aphmfhdthmillq5patn4fa7qvk5ngiaq.b32.i2p;
+
+	include common/znc.conf;
+}
+
+server {
+	listen 443 ssl http2;
+	listen [::]:443 ssl http2;
+	include snippets/lets-encrypt.conf;
+	include snippets/headers.conf;
+	server_name znc.vern.cc;
+	include common/znc.conf;
+}
+
+server {
+	listen 80;
+	listen [::]:80;
+	return 301 https://$host$request_uri;
+	server_name znc.vern.cc;
+}

sites-enabled/breezewiki.conf

@@ -0,0 +1 @@
+/etc/nginx/sites-available/breezewiki.conf

sites-enabled/znc.conf

@@ -0,0 +1 @@
+/etc/nginx/sites-available/znc.conf