![[PukiWiki]](diff.png "[PukiWiki]")
#author("2026-08-14T11:33:06+00:00","","") #author("2026-08-28T04:56:35+00:00","","") #topicpath * 構成ファイル [#v850ca48] - /usr/local/docker-compose/nginx-proxy/docker-compose.yml services: nginx-proxy: image: jwilder/nginx-proxy restart: always ports: - "80:80" - "443:443" environment: - TRUST_DOWNSTREAM_PROXY=false volumes: - /var/run/docker.sock:/tmp/docker.sock:ro - ./certs:/etc/nginx/certs - ./htpasswd/:/etc/nginx/htpasswd/:ro - ./.well-known:/usr/share/nginx/html/.well-known - ./conf/uploadsize.conf:/etc/nginx/conf.d/uploadsize.conf - ./vhost.d:/etc/nginx/vhost.d networks: default: name: proxy-network - /usr/local/docker-compose/nginx-proxy/certs/ -rw-r--r--. 1 root root 1631 7月 16 20:03 cert.pem -rw-r--r--. 1 root root 3523 7月 16 20:03 chain.pem -rw-r--r--. 1 root root 5154 7月 16 20:03 fullchain.pem lrwxrwxrwx. 1 root root 15 8月 13 20:08 netmaster-wiki.carrot.co.jp.crt -> ./fullchain.pem lrwxrwxrwx. 1 root root 13 1月 16 2026 netmaster-wiki.carrot.co.jp.key -> ./privkey.pem lrwxrwxrwx. 1 root root 15 8月 13 20:08 privacy.carrot.co.jp.crt -> ./fullchain.pem lrwxrwxrwx. 1 root root 13 2月 26 20:33 privacy.carrot.co.jp.key -> ./privkey.pem -rw-------. 1 root root 241 7月 16 20:03 privkey.pem lrwxrwxrwx. 1 root root 15 8月 13 20:08 study.carrot.co.jp.crt -> ./fullchain.pem lrwxrwxrwx. 1 root root 13 2月 26 20:36 study.carrot.co.jp.key -> ./privkey.pem lrwxrwxrwx. 1 root root 15 8月 13 20:07 test.carrot.co.jp.crt -> ./fullchain.pem lrwxrwxrwx. 1 root root 13 7月 2 20:45 test.carrot.co.jp.key -> ./privkey.pem lrwxrwxrwx. 1 root root 15 8月 13 20:04 www.carrot.co.jp.crt -> ./fullchain.pem lrwxrwxrwx. 1 root root 13 7月 17 20:21 www.carrot.co.jp.key -> ./privkey.pem - /usr/local/docker-compose/nginx-proxy/htpasswd/ ※ディレクトリのみ - /usr/local/docker-compose/nginx-proxy/htpasswd/netmaster-wiki.carrot.co.jp netmaster:$apr1$z9NevH4T$Hi59KIUci8v1LR8ge3qCw1 - /usr/local/docker-compose/nginx-proxy/.well-known/acme-challenge/ ※ディレクトリのみ - /usr/local/docker-compose/nginx-proxy/conf/uploadsize.conf client_max_body_size 1G; ※www.carrot.co.jp、WordPressのアップロードファイルサイズ制限解除対応 - /usr/local/docker-compose/nginx-proxy/vhost.d/www.carrot.co.jp sub_filter 'http://googleapis.com' 'https://googleapis.com'; sub_filter 'http://carrot.co.jp' 'https://carrot.co.jp'; sub_filter_once off; sub_filter_types text/css text/javascript application/javascript; proxy_set_header Accept-Encoding ""; add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: https://www.carrot.co.jp https://*.googleapis.com https://apis.google.com https://www.google-analytics.com https://www.googletagmanager.com https://*.facebook.net; worker-src 'self' blob:; style-src 'self' 'unsafe-inline' 'unsafe-hashes' https://www.carrot.co.jp https://*.bootstrapcdn.com https://*.googleapis.com; font-src 'self' data: https://*.bootstrapcdn.com https://*.gstatic.com; img-src 'self' data: blob: https://www.carrot.co.jp https://*.wp.com https://*.facebook.com https://www.google-analytics.com https://www.google.com; connect-src 'self' https://www.google-analytics.com https://www.google.com https://*.doubleclick.net; object-src 'self'; base-uri 'self'; frame-ancestors 'self'; upgrade-insecure-requests;" always; add_header X-Content-Type-Options "nosniff" always; add_header X-Frame-Options "SAMEORIGIN" always; add_header Strict-Transport-Security "max-age=31536000; includeSubDomains;" always; add_header Permissions-Policy "camera=(), microphone=(), geolocation=()" always; add_header Referrer-Policy "strict-origin-when-cross-origin" always; - /usr/local/docker-compose/nginx-proxy/vhost.d/netmaster-wiki.carrot.co.jp sub_filter_once off; sub_filter_types text/css text/javascript application/javascript; proxy_set_header Accept-Encoding ""; proxy_hide_header Content-Security-Policy; add_header Content-Security-Policy "default-src 'self'; img-src 'self' data:; object-src 'self'; base-uri 'self'; frame-ancestors 'self'; style-src 'self' 'unsafe-hashes' 'sha256-ycnKoY4l+kCv7aOzpqT5KHqEXlKynAoHuGH5D7ITu8w=' 'sha256-0EZqoz+oBhx7gF4nvY2bSqoGyy4zLjNF+SDQXGp/ZrY=';" always; add_header X-Content-Type-Options "nosniff" always; add_header X-Frame-Options "SAMEORIGIN" always; add_header Strict-Transport-Security "max-age=31536000; includeSubDomains;" always; add_header Permissions-Policy "camera=(), microphone=(), geolocation=()" always; add_header Referrer-Policy "strict-origin-when-cross-origin" always;
