サーバー設定/netvmsv2501.carrot.co.jp/docker_nginx-proxy の編集

#topicpath

* 構成ファイル [#v850ca48]
- /usr/local/docker-compose/nginx-proxy/docker-compose.yml
 services:
  nginx-proxy:
    image: jwilder/nginx-proxy
    restart: always
    ports:
      - "80:80"
      - "443:443"
    environment:
      - TRUST_DOWNSTREAM_PROXY=false
    volumes:
      - /var/run/docker.sock:/tmp/docker.sock:ro
      - ./certs:/etc/nginx/certs
      - ./htpasswd/:/etc/nginx/htpasswd/:ro
      - ./.well-known:/usr/share/nginx/html/.well-known
      - ./conf/uploadsize.conf:/etc/nginx/conf.d/uploadsize.conf
      - ./vhost.d:/etc/nginx/vhost.d
 networks:
  default:
    name: proxy-network
- /usr/local/docker-compose/nginx-proxy/certs/
 -rw-r--r--. 1 root root 1631  7月 16 20:03 cert.pem
 -rw-r--r--. 1 root root 3523  7月 16 20:03 chain.pem
 -rw-r--r--. 1 root root 5154  7月 16 20:03 fullchain.pem
 lrwxrwxrwx. 1 root root   15  8月 13 20:08 netmaster-wiki.carrot.co.jp.crt -> ./fullchain.pem
 lrwxrwxrwx. 1 root root   13  1月 16  2026 netmaster-wiki.carrot.co.jp.key -> ./privkey.pem
 lrwxrwxrwx. 1 root root   15  8月 13 20:08 privacy.carrot.co.jp.crt -> ./fullchain.pem
 lrwxrwxrwx. 1 root root   13  2月 26 20:33 privacy.carrot.co.jp.key -> ./privkey.pem
 -rw-------. 1 root root  241  7月 16 20:03 privkey.pem
 lrwxrwxrwx. 1 root root   15  8月 13 20:08 study.carrot.co.jp.crt -> ./fullchain.pem
 lrwxrwxrwx. 1 root root   13  2月 26 20:36 study.carrot.co.jp.key -> ./privkey.pem
 lrwxrwxrwx. 1 root root   15  8月 13 20:07 test.carrot.co.jp.crt -> ./fullchain.pem
 lrwxrwxrwx. 1 root root   13  7月  2 20:45 test.carrot.co.jp.key -> ./privkey.pem
 lrwxrwxrwx. 1 root root   15  8月 13 20:04 www.carrot.co.jp.crt -> ./fullchain.pem
 lrwxrwxrwx. 1 root root   13  7月 17 20:21 www.carrot.co.jp.key -> ./privkey.pem
- /usr/local/docker-compose/nginx-proxy/htpasswd/netmaster-wiki.carrot.co.jp
 netmaster:$apr1$z9NevH4T$Hi59KIUci8v1LR8ge3qCw1
- /usr/local/docker-compose/nginx-proxy/.well-known/acme-challenge/
 ※ディレクトリのみ
- /usr/local/docker-compose/nginx-proxy/conf/uploadsize.conf
 client_max_body_size 1G;
 ※www.carrot.co.jp、WordPressのアップロードファイルサイズ制限解除対応
- /usr/local/docker-compose/nginx-proxy/vhost.d/www.carrot.co.jp
 sub_filter 'http://googleapis.com' 'https://googleapis.com';
 sub_filter 'http://carrot.co.jp' 'https://carrot.co.jp';
 sub_filter_once off;
 sub_filter_types text/css text/javascript application/javascript;
 proxy_set_header Accept-Encoding "";
 
 add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: https://www.carrot.co.jp https://*.googleapis.com https://apis.google.com https://www.google-analytics.com https://www.googletagmanager.com https://*.facebook.net; worker-src 'self' blob:; style-src 'self' 'unsafe-inline' 'unsafe-hashes' https://www.carrot.co.jp https://*.bootstrapcdn.com https://*.googleapis.com; font-src 'self' data: https://*.bootstrapcdn.com https://*.gstatic.com; img-src 'self' data: blob: https://www.carrot.co.jp https://*.wp.com https://*.facebook.com https://www.google-analytics.com https://www.google.com; connect-src 'self' https://www.google-analytics.com https://www.google.com https://*.doubleclick.net; object-src 'self'; base-uri 'self'; frame-ancestors 'self'; upgrade-insecure-requests;" always;
 add_header X-Content-Type-Options "nosniff" always;
 add_header X-Frame-Options "SAMEORIGIN" always;
 add_header Strict-Transport-Security "max-age=31536000; includeSubDomains;" always;
 add_header Permissions-Policy "camera=(), microphone=(), geolocation=()" always;
 add_header Referrer-Policy "strict-origin-when-cross-origin" always;
- /usr/local/docker-compose/nginx-proxy/vhost.d/netmaster-wiki.carrot.co.jp
 sub_filter_once off;
 sub_filter_types text/css text/javascript application/javascript;
 proxy_set_header Accept-Encoding "";
 
 proxy_hide_header Content-Security-Policy;
 add_header Content-Security-Policy "default-src 'self'; img-src 'self' data:; object-src 'self'; base-uri 'self'; frame-ancestors 'self'; style-src 'self' 'unsafe-hashes' 'sha256-ycnKoY4l+kCv7aOzpqT5KHqEXlKynAoHuGH5D7ITu8w=' 'sha256-0EZqoz+oBhx7gF4nvY2bSqoGyy4zLjNF+SDQXGp/ZrY=';" always;
 add_header X-Content-Type-Options "nosniff" always;
 add_header X-Frame-Options "SAMEORIGIN" always;
 add_header Strict-Transport-Security "max-age=31536000; includeSubDomains;" always;
 add_header Permissions-Policy "camera=(), microphone=(), geolocation=()" always;
 add_header Referrer-Policy "strict-origin-when-cross-origin" always;

タイムスタンプを変更しない

#topicpath

テキスト整形のルールを表示する