サーバー設定/netvmsv2501.carrot.co.jp/docker_nginx-proxy の履歴(No.2)

履歴一覧
差分を表示
現在との差分を表示
ソースを表示
サーバー設定/netvmsv2501.carrot.co.jp/docker_nginx-proxy へ行く。
- 1 (2026-04-23 (木) 22:10:58)
- 2 (2026-08-13 (木) 21:42:01)
- 3 (2026-08-14 (金) 20:33:06)

Top/サーバー設定/netvmsv2501.carrot.co.jp/docker_nginx-proxy

構成ファイル†

/usr/local/docker-compose/nginx-proxy/docker-compose.yml

services:
 nginx-proxy:
   image: jwilder/nginx-proxy
   restart: always
   ports:
     - "80:80"
     - "443:443"
   environment:
     - TRUST_DOWNSTREAM_PROXY=false
   volumes:
     - /var/run/docker.sock:/tmp/docker.sock:ro
     - ./certs:/etc/nginx/certs
     - ./htpasswd/:/etc/nginx/htpasswd/:ro
     - ./.well-known:/usr/share/nginx/html/.well-known
     - ./conf/uploadsize.conf:/etc/nginx/conf.d/uploadsize.conf
     - ./vhost.d:/etc/nginx/vhost.d
networks:
 default:
   name: proxy-network

/usr/local/docker-compose/nginx-proxy/certs/

-rw-r--r--. 1 root root 1631  7月 16 20:03 cert.pem
-rw-r--r--. 1 root root 3523  7月 16 20:03 chain.pem
-rw-r--r--. 1 root root 5154  7月 16 20:03 fullchain.pem
lrwxrwxrwx. 1 root root   15  8月 13 20:08 netmaster-wiki.carrot.co.jp.crt -> ./fullchain.pem
lrwxrwxrwx. 1 root root   13  1月 16  2026 netmaster-wiki.carrot.co.jp.key -> ./privkey.pem
lrwxrwxrwx. 1 root root   15  8月 13 20:08 privacy.carrot.co.jp.crt -> ./fullchain.pem
lrwxrwxrwx. 1 root root   13  2月 26 20:33 privacy.carrot.co.jp.key -> ./privkey.pem
-rw-------. 1 root root  241  7月 16 20:03 privkey.pem
lrwxrwxrwx. 1 root root   15  8月 13 20:08 study.carrot.co.jp.crt -> ./fullchain.pem
lrwxrwxrwx. 1 root root   13  2月 26 20:36 study.carrot.co.jp.key -> ./privkey.pem
lrwxrwxrwx. 1 root root   15  8月 13 20:07 test.carrot.co.jp.crt -> ./fullchain.pem
lrwxrwxrwx. 1 root root   13  7月  2 20:45 test.carrot.co.jp.key -> ./privkey.pem
lrwxrwxrwx. 1 root root   15  8月 13 20:04 www.carrot.co.jp.crt -> ./fullchain.pem
lrwxrwxrwx. 1 root root   13  7月 17 20:21 www.carrot.co.jp.key -> ./privkey.pem

/usr/local/docker-compose/nginx-proxy/htpasswd/
```
※ディレクトリのみ
```
/usr/local/docker-compose/nginx-proxy/.well-known/acme-challenge/
```
※ディレクトリのみ
```

/usr/local/docker-compose/nginx-proxy/conf/uploadsize.conf

client_max_body_size 1G;
※www.carrot.co.jp、WordPressのアップロードファイルサイズ制限解除対応

/usr/local/docker-compose/nginx-proxy/vhost.d/www.carrot.co.jp

sub_filter 'http://googleapis.com' 'https://googleapis.com';
sub_filter 'http://carrot.co.jp' 'https://carrot.co.jp';
sub_filter_once off;
sub_filter_types text/css text/javascript application/javascript;
proxy_set_header Accept-Encoding "";

add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: https://www.carrot.co.jp https://*.googleapis.com https://apis.google.com https://www.google-analytics.com https://www.googletagmanager.com https://*.facebook.net; worker-src 'self' blob:; style-src 'self' 'unsafe-inline' 'unsafe-hashes' https://www.carrot.co.jp https://*.bootstrapcdn.com https://*.googleapis.com; font-src 'self' data: https://*.bootstrapcdn.com https://*.gstatic.com; img-src 'self' data: blob: https://www.carrot.co.jp https://*.wp.com https://*.facebook.com https://www.google-analytics.com https://www.google.com; connect-src 'self' https://www.google-analytics.com https://www.google.com https://*.doubleclick.net; object-src 'self'; base-uri 'self'; frame-ancestors 'self'; upgrade-insecure-requests;" always;
add_header X-Content-Type-Options "nosniff" always;
add_header X-Frame-Options "SAMEORIGIN" always;
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains;" always;
add_header Permissions-Policy "camera=(), microphone=(), geolocation=()" always;
add_header Referrer-Policy "strict-origin-when-cross-origin" always;

/usr/local/docker-compose/nginx-proxy/vhost.d/netmaster-wiki.carrot.co.jp

sub_filter_once off;
sub_filter_types text/css text/javascript application/javascript;
proxy_set_header Accept-Encoding "";

add_header Content-Security-Policy "default-src 'self'; img-src 'self' data:; object-src 'self'; base-uri 'self'; frame-ancestors 'self'; style-src 'self' 'unsafe-hashes' 'sha256-ycnKoY4l+kCv7aOzpqT5KHqEXlKynAoHuGH5D7ITu8w=' 'sha256-0EZqoz+oBhx7gF4nvY2bSqoGyy4zLjNF+SDQXGp/ZrY=';" always;
add_header X-Content-Type-Options "nosniff" always;
add_header X-Frame-Options "SAMEORIGIN" always;
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains;" always;
add_header Permissions-Policy "camera=(), microphone=(), geolocation=()" always;
add_header Referrer-Policy "strict-origin-when-cross-origin" always;