aljaz/addons
1
0
Fork 0
mirror of https://github.com/aljazceru/addons.git synced 2025-12-17 05:04:21 +01:00
Code Issues Packages Projects Releases Wiki Activity

nginx_proxy: Remove IPv6 Listen statements from nginx.conf (#991)

Browse Source 
* nginx_proxy: Remove IPv6 Listen statements from nginx.conf

Pursuant to PR https://github.com/home-assistant/hassio-addons/pull/972, making this change hard-coded, rather than an option to be set in the Addon Config.

* remove ipv6only=off statement from nginx.conf

As mentioned in https://github.com/home-assistant/hassio-addons/pull/991#issuecomment-573351637

* Update config.json

* Update CHANGELOG.md

Co-authored-by: Pascal Vizeli <pascal.vizeli@syshack.ch>
This commit is contained in:
blacktirion
2020-01-14 02:40:48 -06:00
committed by Pascal Vizeli
parent 216b6245a9
commit 9e3e9fdeff
3 changed files with 13 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
nginx_proxy/CHANGELOG.md
View File

@@ -1,5 +1,13 @@
# Changelog
## 2.6
- Remove ipv6 listener because we run only inside virtual network on a ipv4 range
## 2.5
- Migrate to Bashio
## 2.4
- Added Cloudflare mechanism for creating auto-generated ipv4/ipv6 list for real visitor ip

2
nginx_proxy/config.json
View File

@@ -1,6 +1,6 @@
{
"name": "NGINX Home Assistant SSL proxy",
"version": "2.5",
"version": "2.6",
"slug": "nginx_proxy",
"description": "An SSL/TLS proxy",
"url": "https://github.com/home-assistant/hassio-addons/tree/master/nginx_proxy",

8
nginx_proxy/data/nginx.conf
View File

@@ -18,8 +18,8 @@ http {
server {
server_name _;
listen [::]:80 default_server ipv6only=off;
listen [::]:443 ssl http2 default_server ipv6only=off;
listen 80 default_server;
listen 443 ssl http2 default_server;
ssl_certificate /data/ssl-cert-snakeoil.pem;
ssl_certificate_key /data/ssl-cert-snakeoil.key;
return 444;
@@ -29,7 +29,7 @@ http {
server_name %%DOMAIN%%;
# These shouldn't need to be changed
listen [::]:80;
listen 80;
return 301 https://$host$request_uri;
}
@@ -42,7 +42,7 @@ http {
# dhparams file
ssl_dhparam /data/dhparams.pem;
listen [::]:443 ssl http2;
listen 443 ssl http2;
%%HSTS%%
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4";