modified files

production/nginx/docker-compose.yml

@@ -80,6 +80,7 @@ services:
       salva:
       doom:
       wtorrent:
+      g-plv:
 
 networks:
   mynet:
@@ -233,3 +234,7 @@ networks:
   wtorrent:
     external:
       name: wtorrent_mynet
+
+  g-plv:
+    external:
+      name: gplv_mynet

production/nginx/nginx/conf.d/hatthieves.conf

@@ -21,7 +21,7 @@ server {
   ssl_prefer_server_ciphers on;
   ssl_session_cache shared:SSL:10m;
 #  add_header Alt-Svc 'h3-25=":443"; ma=86400';
-  add_header alt-svc 'h3-25=":443"; h3-24=":443"; ma=86400, h3-23=":443"';
+  add_header alt-svc 'h3-25=":443"; ma=3600, h2=":443"; ma=3600';
 }
 
 server {
@@ -40,7 +40,7 @@ server {
   ssl_prefer_server_ciphers on;
   ssl_session_cache shared:SSL:10m;
 #  add_header Alt-Svc 'h3-25=":443"; ma=86400';
-  add_header alt-svc 'h3-25=":443"; h3-24=":443"; ma=86400, h3-23=":443"';
+  add_header alt-svc 'h3-25=":443"; ma=3600, h2=":443"; ma=3600';
   location / {
   return 301 https://www.hatthieves.es;
 #  rewrite ^/(.*)$ https://www.hatthieves.es/$1 permanent;
@@ -61,7 +61,7 @@ server {
   ssl_prefer_server_ciphers on;
   ssl_session_cache shared:SSL:10m;
 #  add_header Alt-Svc 'h3-25=":443"; ma=86400';
-  add_header alt-svc 'h3-25=":443"; h3-24=":443"; ma=86400, h3-23=":443"';
+  add_header alt-svc 'h3-25=":443"; ma=3600, h2=":443"; ma=3600';
   location / {
   return 301 https://www.hatthieves.es;
 #  rewrite ^/(.*)$ https://www.hatthieves.es/$1 permanent;

production/nginx/nginx/sites-available/bbb

@@ -13,7 +13,7 @@ server {
      proxy_set_header Upgrade $http_upgrade;
      proxy_set_header Connection "Upgrade";
      proxy_http_version 1.1;
-     add_header Alt-Svc 'h3-25=":443"; h3-24=":443"; ma=86400, h3-23=":443"';
+     add_header Alt-Svc 'h3-25=":443"; ma=3600, h2=":443"; ma=3600';
   }
 }
 

production/nginx/nginx/sites-available/chat

@@ -13,7 +13,7 @@ server {
      proxy_set_header Connection "Upgrade";
      proxy_buffering off;
      proxy_http_version 1.1;
-     add_header Alt-Svc 'h3-25=":443"; h3-24=":443"; ma=86400, h3-23=":443"';
+     add_header Alt-Svc 'h3-25=":443"; ma=3600, h2=":443"; ma=3600';
   }
 }
 

production/nginx/nginx/sites-available/codimd

@@ -12,6 +12,6 @@ server {
      proxy_set_header Upgrade $http_upgrade;
      proxy_set_header Connection "Upgrade";
      proxy_http_version 1.1;
-     add_header Alt-Svc 'h3-25=":443"; h3-24=":443"; ma=86400, h3-23=":443"';
+     add_header Alt-Svc 'h3-25=":443"; ma=3600, h2=":443"; ma=3600';
   }
 }

production/nginx/nginx/sites-available/crossposter

@@ -15,7 +15,7 @@ server {
      proxy_set_header Connection "Upgrade";
 #     proxy_buffering off;
      proxy_http_version 1.1;
-     add_header Alt-Svc 'h3-25=":443"; h3-24=":443"; ma=86400, h3-23=":443"';
+     add_header Alt-Svc 'h3-25=":443"; ma=3600, h2=":443"; ma=3600';
   }
 }
 

production/nginx/nginx/sites-available/defaultdrop

@@ -30,7 +30,7 @@ server {
      proxy_set_header X-Forwarded-Proto $scheme;
      proxy_set_header X-Real-IP $remote_addr;
      proxy_set_header Host $host;
-     add_header Alt-Svc 'h3-25=":443"; h3-24=":443"; ma=86400, h3-23=":443"';
+     add_header Alt-Svc 'h3-25=":443"; ma=3600, h2=":443"; ma=3600';
   }
 
 }

production/nginx/nginx/sites-available/dvwa

@@ -15,6 +15,6 @@ server {
      proxy_set_header Connection "Upgrade";
      proxy_buffering off;
      proxy_http_version 1.1;
-     add_header Alt-Svc 'h3-25=":443"; h3-24=":443"; ma=86400, h3-23=":443"';
+     add_header Alt-Svc 'h3-25=":443"; ma=3600, h2=":443"; ma=3600';
   }
 }

production/nginx/nginx/sites-available/elastic

@@ -15,7 +15,7 @@ server {
      proxy_set_header Connection "Upgrade";
      proxy_buffering off;
      proxy_http_version 1.1;
-     add_header Alt-Svc 'h3-25=":443"; h3-24=":443"; ma=86400, h3-23=":443"';
+     add_header Alt-Svc 'h3-25=":443"; ma=3600, h2=":443"; ma=3600';
   }
 }
 

production/nginx/nginx/sites-available/etherpad

@@ -11,7 +11,7 @@ server {
      proxy_set_header Upgrade $http_upgrade;
      proxy_set_header Connection "Upgrade";
      proxy_buffering off;
-     add_header Alt-Svc 'h3-25=":443"; h3-24=":443"; ma=86400, h3-23=":443"';
+     add_header Alt-Svc 'h3-25=":443"; ma=3600, h2=":443"; ma=3600';
   }
 }
 

production/nginx/nginx/sites-available/familyark

@@ -13,6 +13,6 @@ server {
      proxy_set_header Connection "Upgrade";
      proxy_buffering off;
      proxy_http_version 1.1;
-     add_header Alt-Svc 'h3-25=":443"; h3-24=":443"; ma=86400, h3-23=":443"';
+     add_header Alt-Svc 'h3-25=":443"; ma=3600, h2=":443"; ma=3600';
   }
 }

production/nginx/nginx/sites-available/gitea

@@ -10,7 +10,7 @@ server {
      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
      proxy_set_header X-Forwarded-Proto $scheme;
      proxy_buffering off;
-     add_header Alt-Svc 'h3-25=":443"; h3-24=":443"; ma=86400, h3-23=":443"';
+     add_header Alt-Svc 'h3-25=":443"; ma=3600, h2=":443"; ma=3600';
   }
 }
 

production/nginx/nginx/sites-available/glances

@@ -15,6 +15,6 @@ server {
      proxy_set_header Connection "Upgrade";
      proxy_buffering off;
      proxy_http_version 1.1;
-     add_header Alt-Svc 'h3-25=":443"; h3-24=":443"; ma=86400, h3-23=":443"';
+     add_header Alt-Svc 'h3-25=":443"; ma=3600, h2=":443"; ma=3600';
   }
 }

production/nginx/nginx/sites-available/ipfs

@@ -2,7 +2,6 @@ server {
   listen 443 ssl http2;
   listen [::]:443 ssl http2;
   server_name ipfs.hatthieves.es;
-  proxy_pass_request_headers on;
   location / {
      proxy_pass http://172.105.0.101:5001;
      auth_basic "Registry realm";
@@ -15,8 +14,26 @@ server {
      proxy_set_header Connection "Upgrade";
      proxy_buffering off;
      proxy_http_version 1.1;
-     add_header Alt-Svc 'h3-25=":443"; h3-24=":443"; ma=86400, h3-23=":443"';
+     add_header Alt-Svc 'h3-25=":443"; ma=3600, h2=":443"; ma=3600';
+#     add_header 'Access-Control-Allow-Origin' $http_origin;
+#     add_header 'Access-Control-Allow-Methods' '*';
+#     add_header 'Access-Control-Allow-Credentials' 'true';
+     add_header 'Vary' 'Origin';
   }
+#  location /webui {
+#     proxy_pass http://172.105.0.101:5001/webui;
+#     auth_basic "Registry realm";
+#     auth_basic_user_file /etc/nginx/registry.htpasswd;
+#     proxy_set_header X-Real-IP $remote_addr;
+#     proxy_set_header Host $host;
+#     proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+#     proxy_set_header X-Forwarded-Proto $scheme;
+#     proxy_set_header Upgrade $http_upgrade;
+#     proxy_set_header Connection "Upgrade";
+#     proxy_buffering off;
+#     proxy_http_version 1.1;
+#     add_header Alt-Svc 'h3-25=":443"; ma=3600, h2=":443"; ma=3600';
+#  }
   location /ipfs {
      proxy_pass http://172.105.0.101:8080/ipfs;
      proxy_set_header X-Real-IP $remote_addr;
@@ -27,7 +44,11 @@ server {
      proxy_set_header Connection "Upgrade";
      proxy_buffering off;
      proxy_http_version 1.1;
-     add_header Alt-Svc 'h3-25=":443"; h3-24=":443"; ma=86400, h3-23=":443"';
+#     add_header 'Access-Control-Allow-Origin' '*';
+#     add_header 'Access-Control-Allow-Methods' '*';
+#     add_header 'Access-Control-Allow-Credentials' 'true';
+#     add_header 'Vary' 'Origin';
+     add_header Alt-Svc 'h3-25=":443"; ma=3600, h2=":443"; ma=3600';
   }
   location /ipns {
      proxy_pass http://172.105.0.101:8080/ipns;
@@ -39,7 +60,11 @@ server {
      proxy_set_header Connection "Upgrade";
      proxy_buffering off;
      proxy_http_version 1.1;
-     add_header Alt-Svc 'h3-25=":443"; h3-24=":443"; ma=86400, h3-23=":443"';
+#     add_header 'Access-Control-Allow-Origin' '*';
+#     add_header 'Access-Control-Allow-Methods' '*';
+#     add_header 'Access-Control-Allow-Credentials' 'true';
+#     add_header 'Vary' 'Origin';
+     add_header Alt-Svc 'h3-25=":443"; ma=3600, h2=":443"; ma=3600';
   }
 #  location /p2p {
 #     proxy_pass http://172.105.0.101:4002;
@@ -51,10 +76,10 @@ server {
 #     proxy_set_header Connection "Upgrade";
 #     proxy_buffering off;
 #     proxy_http_version 1.1;
-#     add_header Alt-Svc 'h3-25=":443"; h3-24=":443"; ma=86400, h3-23=":443"';
+#     add_header Alt-Svc 'h3-25=":443"; ma=3600, h2=":443"; ma=3600';
 #  }
 #  location /ws {
-#     proxy_pass http://172.105.0.101:4003;
+#     proxy_pass http://172.105.0.101:8081;
 #     proxy_set_header X-Real-IP $remote_addr;
 #     proxy_set_header Host $host;
 #     proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
@@ -63,7 +88,7 @@ server {
 #     proxy_set_header Connection "Upgrade";
 #     proxy_buffering off;
 #     proxy_http_version 1.1;
-#     add_header Alt-Svc 'h3-25=":443"; h3-24=":443"; ma=86400, h3-23=":443"';
+#     add_header Alt-Svc 'h3-25=":443"; ma=3600, h2=":443"; ma=3600';
 #  }
 #  location /api {
 #     proxy_pass http://172.105.0.101:5001/ipfs/api/v0;
@@ -75,7 +100,7 @@ server {
 #     proxy_set_header Connection "Upgrade";
 #     proxy_buffering off;
 #     proxy_http_version 1.1;
-#     add_header Alt-Svc 'h3-25=":443"; h3-24=":443"; ma=86400, h3-23=":443"';
+#     add_header Alt-Svc 'h3-25=":443"; ma=3600, h2=":443"; ma=3600';
 #     add_header Access-Control-Allow-Origin '*';
 #     add_header Access-Control-Allow-Methods '*';
 #  }

production/nginx/nginx/sites-available/jitsi

@@ -11,7 +11,7 @@ server {
      proxy_set_header Upgrade $http_upgrade;
      proxy_set_header Connection "Upgrade";
      proxy_buffering off;
-     add_header Alt-Svc 'h3-25=":443"; h3-24=":443"; ma=86400, h3-23=":443"';
+     add_header Alt-Svc 'h3-25=":443"; ma=3600, h2=":443"; ma=3600';
   }
 }
 

production/nginx/nginx/sites-available/kanban

@@ -15,6 +15,6 @@ server {
      proxy_set_header Connection "Upgrade";
      proxy_buffering off;
      proxy_http_version 1.1;
-     add_header Alt-Svc 'h3-25=":443"; h3-24=":443"; ma=86400, h3-23=":443"';
+     add_header Alt-Svc 'h3-25=":443"; ma=3600, h2=":443"; ma=3600';
   }
 }

production/nginx/nginx/sites-available/kibana

@@ -15,7 +15,7 @@ server {
      proxy_set_header Connection "Upgrade";
      proxy_buffering off;
      proxy_http_version 1.1;
-     add_header Alt-Svc 'h3-25=":443"; h3-24=":443"; ma=86400, h3-23=":443"';
+     add_header Alt-Svc 'h3-25=":443"; ma=3600, h2=":443"; ma=3600';
   }
 }
 

production/nginx/nginx/sites-available/mastodon

@@ -15,7 +15,7 @@ server {
 #     proxy_set_header Connection "Upgrade";
 #     proxy_buffering off;
 #     proxy_http_version 1.1;
-#     add_header Alt-Svc 'h3-25=":443"; h3-24=":443"; ma=86400, h3-23=":443"';
+#     add_header Alt-Svc 'h3-25=":443"; ma=3600, h2=":443"; ma=3600';
 #  }
 #  location /api/v1/streaming {
 #     proxy_set_header Host $host;
@@ -29,7 +29,7 @@ server {
 #     proxy_http_version 1.1;
 #     proxy_set_header Upgrade $http_upgrade;
 #     proxy_set_header Connection "Upgrade";
-#     add_header Alt-Svc 'h3-25=":443"; h3-24=":443"; ma=86400, h3-23=":443"';
+#     add_header Alt-Svc 'h3-25=":443"; ma=3600, h2=":443"; ma=3600';
 #     tcp_nodelay on;
 #  }
 }

production/nginx/nginx/sites-available/meta

@@ -15,6 +15,6 @@ server {
      proxy_set_header Connection "Upgrade";
      proxy_buffering off;
      proxy_http_version 1.1;
-     add_header Alt-Svc 'h3-25=":443"; h3-24=":443"; ma=86400, h3-23=":443"';
+     add_header Alt-Svc 'h3-25=":443"; ma=3600, h2=":443"; ma=3600';
   }
 }

production/nginx/nginx/sites-available/mumble

@@ -12,7 +12,7 @@ server {
      proxy_set_header Connection "Upgrade";
      proxy_buffering off;
      proxy_http_version 1.1;
-     add_header Alt-Svc 'h3-25=":443"; h3-24=":443"; ma=86400, h3-23=":443"';
+     add_header Alt-Svc 'h3-25=":443"; ma=3600, h2=":443"; ma=3600';
   }
 }
 

production/nginx/nginx/sites-available/netdata

@@ -14,6 +14,6 @@ server {
      proxy_set_header Upgrade $http_upgrade;
      proxy_set_header Connection "Upgrade";
      proxy_http_version 1.1;
-     add_header Alt-Svc 'h3-25=":443"; h3-24=":443"; ma=86400, h3-23=":443"';
+     add_header Alt-Svc 'h3-25=":443"; ma=3600, h2=":443"; ma=3600';
   }
 }

production/nginx/nginx/sites-available/nextcloud

@@ -14,7 +14,7 @@ server {
      proxy_http_version 1.1;
      rewrite ^/\.well-known/carddav(.*)$ /remote.php/dav$1 redirect;
      rewrite ^/\.well-known/caldav(.*)$ /remote.php/dav$1 redirect;
-     add_header Alt-Svc 'h3-25=":443"; h3-24=":443"; ma=86400, h3-23=":443"';
+     add_header Alt-Svc 'h3-25=":443"; ma=3600, h2=":443"; ma=3600';
      add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
   }
 }

production/nginx/nginx/sites-available/p2p

@@ -11,9 +11,11 @@ server {
      proxy_set_header Upgrade $http_upgrade;
      proxy_set_header Connection "Upgrade";
      proxy_buffering off;
-     add_header Alt-Svc 'h3-25=":443"; h3-24=":443"; ma=86400, h3-23=":443"';
+     add_header Alt-Svc 'h3-25=":443"; ma=3600, h2=":443"; ma=3600';
      add_header 'Access-Control-Allow-Origin' $http_origin;
+     add_header 'Access-Control-Allow-Methods' '*';
      add_header 'Access-Control-Allow-Credentials' 'true';
+     add_header 'Vary' 'Origin';
   }
   location /ws {
      proxy_pass http://172.136.0.101:9000;
@@ -24,7 +26,7 @@ server {
      proxy_set_header Upgrade $http_upgrade;
      proxy_set_header Connection "Upgrade";
      proxy_buffering off;
-     add_header Alt-Svc 'h3-25=":443"; h3-24=":443"; ma=86400, h3-23=":443"';
+     add_header Alt-Svc 'h3-25=":443"; ma=3600, h2=":443"; ma=3600';
   }
 }
 

production/nginx/nginx/sites-available/peertube

@@ -13,7 +13,7 @@ server {
      proxy_set_header Connection "Upgrade";
      proxy_buffering off;
      proxy_http_version 1.1;
-     add_header Alt-Svc 'h3-25=":443"; h3-24=":443"; ma=86400, h3-23=":443"';
+     add_header Alt-Svc 'h3-25=":443"; ma=3600, h2=":443"; ma=3600';
   }
 }
 

production/nginx/nginx/sites-available/pleroma

@@ -13,7 +13,7 @@ server {
      proxy_set_header Connection "Upgrade";
      proxy_buffering off;
      proxy_http_version 1.1;
-     add_header Alt-Svc 'h3-25=":443"; h3-24=":443"; ma=86400, h3-23=":443"';
+     add_header Alt-Svc 'h3-25=":443"; ma=3600, h2=":443"; ma=3600';
   }
 }
 

production/nginx/nginx/sites-available/pleroma-old

@@ -14,7 +14,7 @@ server {
 #     proxy_set_header Connection "Upgrade";
 #     proxy_buffering off;
 #     proxy_http_version 1.1;
-#     add_header Alt-Svc 'h3-25=":443"; h3-24=":443"; ma=86400, h3-23=":443"';
+#     add_header Alt-Svc 'h3-25=":443"; ma=3600, h2=":443"; ma=3600';
 #  }
 }
 

production/nginx/nginx/sites-available/privatebin

@@ -13,7 +13,7 @@ server {
      proxy_set_header Connection "Upgrade";
      proxy_buffering off;
      proxy_http_version 1.1;
-     add_header Alt-Svc 'h3-25=":443"; h3-24=":443"; ma=86400, h3-23=":443"';
+     add_header Alt-Svc 'h3-25=":443"; ma=3600, h2=":443"; ma=3600';
   }
 }
 

production/nginx/nginx/sites-available/rocketchat

@@ -12,7 +12,7 @@ server {
      proxy_set_header Connection "Upgrade";
      proxy_http_version 1.1;
      proxy_buffering off;
-     add_header Alt-Svc 'h3-25=":443"; h3-24=":443"; ma=86400, h3-23=":443"';
+     add_header Alt-Svc 'h3-25=":443"; ma=3600, h2=":443"; ma=3600';
   }
 }
 

production/nginx/nginx/sites-available/tail

@@ -15,7 +15,7 @@ server {
 #     proxy_set_header Upgrade $http_upgrade;
 #     proxy_set_header Connection "Upgrade";
      proxy_http_version 1.1;
-     add_header Alt-Svc 'h3-25=":443"; h3-24=":443"; ma=86400, h3-23=":443"';
+     add_header Alt-Svc 'h3-25=":443"; ma=3600, h2=":443"; ma=3600';
      http2_push_preload on;
      proxy_socket_keepalive on;
      proxy_connect_timeout 5m;

production/nginx/nginx/sites-available/theia

@@ -13,7 +13,7 @@ server {
      proxy_set_header Upgrade $http_upgrade;
      proxy_set_header Connection "Upgrade";
      proxy_buffering off;
-     add_header Alt-Svc 'h3-25=":443"; h3-24=":443"; ma=86400, h3-23=":443"';
+     add_header Alt-Svc 'h3-25=":443"; ma=3600, h2=":443"; ma=3600';
   }
 }
 

production/nginx/nginx/sites-available/traefik

@@ -15,6 +15,6 @@ server {
      proxy_set_header Connection "Upgrade";
      proxy_buffering off;
      proxy_http_version 1.1;
-     add_header Alt-Svc 'h3-25=":443"; h3-24=":443"; ma=86400, h3-23=":443"';
+     add_header Alt-Svc 'h3-25=":443"; ma=3600, h2=":443"; ma=3600';
   }
 }

production/nginx/nginx/sites-available/video

@@ -11,7 +11,7 @@ server {
      proxy_set_header Upgrade $http_upgrade;
      proxy_set_header Connection "Upgrade";
      proxy_buffering off;
-     add_header Alt-Svc 'h3-25=":443"; h3-24=":443"; ma=86400, h3-23=":443"';
+     add_header Alt-Svc 'h3-25=":443"; ma=3600, h2=":443"; ma=3600';
   }
 }
 

production/nginx/nginx/sites-available/voip

@@ -12,7 +12,7 @@ server {
      proxy_set_header Connection "Upgrade";
      proxy_buffering off;
      proxy_http_version 1.1;
-     add_header Alt-Svc 'h3-25=":443"; h3-24=":443"; ma=86400, h3-23=":443"';
+     add_header Alt-Svc 'h3-25=":443"; ma=3600, h2=":443"; ma=3600';
   }
 }
 

production/nginx/nginx/sites-available/webmail

@@ -12,7 +12,7 @@ server {
      proxy_set_header Connection "Upgrade";
      proxy_buffering off;
      proxy_http_version 1.1;
-     add_header Alt-Svc 'h3-25=":443"; h3-24=":443"; ma=86400, h3-23=":443"';
+     add_header Alt-Svc 'h3-25=":443"; ma=3600, h2=":443"; ma=3600';
   }
 }
 

production/nginx/nginx/sites-available/wordpress

@@ -3,6 +3,7 @@ server {
   listen [::]:443 ssl http2;
   server_name www.hatthieves.es;
   client_max_body_size 2G;
+  proxy_pass_request_headers on;
   location / {
      proxy_pass http://172.126.0.101;
      proxy_set_header X-Real-IP $remote_addr;
@@ -10,8 +11,9 @@ server {
      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
      proxy_set_header X-Forwarded-Proto $scheme;
      proxy_set_header Upgrade $http_upgrade;
-     proxy_set_header Connection "Upgrade";
+     proxy_set_header Connection 'Upgrade';
+     proxy_buffering off;
      proxy_http_version 1.1;
-     add_header Alt-Svc 'h3-25=":443"; h3-24=":443"; ma=86400, h3-23=":443"';
+     add_header Alt-Svc 'h3-25=":443"; ma=3600, h2=":443"; ma=3600';
   }
 }