52 lines
1 KiB
Text
52 lines
1 KiB
Text
server {
|
|
listen 443 ssl;
|
|
listen 443 quic;
|
|
|
|
listen [::]:443 ssl;
|
|
listen [::]:443 quic;
|
|
|
|
server_name id.example.com;
|
|
|
|
ssl_certificate_key /etc/ssl/id.example.com/key.pem;
|
|
ssl_certificate /etc/ssl/id.example.com/fullchain.pem;
|
|
|
|
location / {
|
|
proxy_pass http://192.168.81.2:8923;
|
|
proxy_http_version 1.1; # to keep alive
|
|
proxy_set_header Host $host;
|
|
proxy_set_header Connection ""; # to keep alive
|
|
proxy_set_header X-Real-IP "127.0.0.1"; # docker rootless doesn't have that anyway
|
|
}
|
|
|
|
location /latest_version {
|
|
return 403;
|
|
}
|
|
|
|
location /api/manifest/dash/id/ {
|
|
return 403;
|
|
}
|
|
|
|
location /videoplayback {
|
|
return 403;
|
|
}
|
|
|
|
location /api/v1/videos {
|
|
default_type text/plain;
|
|
return 403 "This endpoint has been disabled due to potent abuse";
|
|
}
|
|
|
|
location /rphealth {
|
|
default_type text/plain;
|
|
return 200 "Proxy alive";
|
|
}
|
|
|
|
location /about {
|
|
root /var/www/html/invidious;
|
|
index index.html;
|
|
}
|
|
|
|
location /.well-known/acme-challenge {
|
|
root /var/www/html/invidious;
|
|
}
|
|
}
|
|
|