server { listen 80; server_name ntfy.vern.cc; location / { # Redirect HTTP to HTTPS, but only for GET topic addresses, since we want # it to work with curl without the annoying https:// prefix set $redirect_https ""; if ($request_method = GET) { set $redirect_https "yes"; } if ($request_uri ~* "^/([-_a-z0-9]{0,64}$|docs/|static/)") { set $redirect_https "${redirect_https}yes"; } if ($redirect_https = "yesyes") { return 302 https://$http_host$request_uri$is_args$query_string; } proxy_pass http://127.0.0.1:2586; proxy_http_version 1.1; proxy_buffering off; proxy_request_buffering off; proxy_redirect off; proxy_set_header Host $http_host; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_connect_timeout 3m; proxy_send_timeout 3m; proxy_read_timeout 3m; client_max_body_size 20m; # Must be >= attachment-file-size-limit in /etc/ntfy/server.yml } } server { listen 443 ssl; listen [::]:443 ssl; server_name ntfy.vern.cc; include snippets/lets-encrypt.conf; include common/ntfy.conf; } server { listen 80; listen [::]:80; server_name ntfy.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajhwvidqafczrad.onion; include common/ntfy.conf; } server { listen 11052; listen [::]:11052; server_name vernvx3w4jkwznya72gnslmkabthu6behn7mlfunezcubsjazaxq.b32.i2p; include common/ntfy.conf; }