From c7371c7381e5283969896dc4d6fdc0eee6219e96 Mon Sep 17 00:00:00 2001
From: root <root@vern.cc>
Date: Fri, 25 Nov 2022 15:42:15 +0000
Subject: [PATCH] penpot

---
 common/penpot.conf       | 10 ++++++++++
 conf.d/mail.vern.cc.conf |  3 ---
 conf.d/penpot.conf       | 32 ++++++++++++++++++++++++++++++++
 3 files changed, 42 insertions(+), 3 deletions(-)
 create mode 100644 common/penpot.conf
 create mode 100644 conf.d/penpot.conf

diff --git a/common/penpot.conf b/common/penpot.conf
new file mode 100644
index 0000000..86d6f87
--- /dev/null
+++ b/common/penpot.conf
@@ -0,0 +1,10 @@
+add_header Onion-Location http://pp.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajhwvidqafczrad.onion$request_uri;
+add_header X-I2P-Location http://vernbrpw2ivyireljmadepiwl2zwukfs3qq3neqiygdzd2swyb3a.b32.i2p$request_uri;
+
+location / {
+	proxy_pass http://localhost:9002/;
+	proxy_redirect off;
+	proxy_set_header Host $host;
+	proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+	proxy_set_header X-Forwarded-Proto $scheme;
+}
diff --git a/conf.d/mail.vern.cc.conf b/conf.d/mail.vern.cc.conf
index d74727e..12db6f0 100644
--- a/conf.d/mail.vern.cc.conf
+++ b/conf.d/mail.vern.cc.conf
@@ -8,8 +8,6 @@ server {
 	listen [::]:80;
 
 	server_name mail.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajhwvidqafczrad.onion;
-
-#	rewrite ^ https://$server_name$request_uri permanent;
 	include common/mail.conf;
 }
 
@@ -29,5 +27,4 @@ server {
 
 	include snippets/lets-encrypt.conf;
 	include common/mail.conf;
-	ssl_protocols TLSv1.2 TLSv1.3;
 }
diff --git a/conf.d/penpot.conf b/conf.d/penpot.conf
new file mode 100644
index 0000000..7e2f2ab
--- /dev/null
+++ b/conf.d/penpot.conf
@@ -0,0 +1,32 @@
+server {
+	listen 80;
+	listen [::]:80;
+
+	server_name pp.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajhwvidqafczrad.onion penpot.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajhwvidqafczrad.onion;
+
+	include common/penpot.conf;
+}
+
+server {
+	listen 11067;
+	listen [::]:11067;
+
+	server_name vernbrpw2ivyireljmadepiwl2zwukfs3qq3neqiygdzd2swyb3a.b32.i2p;
+
+	include common/penpot.conf;
+}
+
+server {
+	listen 443 ssl http2;
+	listen [::]:443 ssl http2;
+	server_name pp.vern.cc penpot.vern.cc;
+	include snippets/lets-encrypt.conf;
+	include common/penpot.conf;
+}
+
+server {
+	listen 80;
+	listen [::]:80;
+	return 301 https://$host$request_uri;
+	server_name pp.vern.cc penpot.vern.cc;
+}