diff --git a/host_aliases b/host_aliases new file mode 100644 index 0000000..17d68a1 --- /dev/null +++ b/host_aliases @@ -0,0 +1,3 @@ +shuttle haggis.no-ip.org +server csbnw.no-ip.org +sepia boukefalos.no-ip.org \ No newline at end of file diff --git a/jenkins/config.xml b/jenkins/config.xml new file mode 100644 index 0000000..7ad30d6 --- /dev/null +++ b/jenkins/config.xml @@ -0,0 +1,33 @@ + + + + 1.0 + 2 + NORMAL + true + + + false + + ${ITEM_ROOTDIR}/workspace + ${ITEM_ROOTDIR}/builds + + + + + 0 + + + + all + false + false + + + + all + 0 + + + + \ No newline at end of file diff --git a/jenkins/hudson.model.UpdateCenter.xml b/jenkins/hudson.model.UpdateCenter.xml new file mode 100644 index 0000000..4f317e7 --- /dev/null +++ b/jenkins/hudson.model.UpdateCenter.xml @@ -0,0 +1,7 @@ + + + + default + http://updates.jenkins-ci.org/update-center.json + + \ No newline at end of file diff --git a/jenkins/nodeMonitors.xml b/jenkins/nodeMonitors.xml new file mode 100644 index 0000000..01d5f3d --- /dev/null +++ b/jenkins/nodeMonitors.xml @@ -0,0 +1,23 @@ + + + + false + + + false + + + false + 1GB + + + false + + + false + 1GB + + + false + + \ No newline at end of file diff --git a/jenkins/queue.xml b/jenkins/queue.xml new file mode 100644 index 0000000..dbf8130 --- /dev/null +++ b/jenkins/queue.xml @@ -0,0 +1,5 @@ + + + 0 + + \ No newline at end of file diff --git a/lighttpd/etc/.lighttpdpassword b/lighttpd/etc/.lighttpdpassword new file mode 100644 index 0000000..9e56a87 --- /dev/null +++ b/lighttpd/etc/.lighttpdpassword @@ -0,0 +1 @@ +user:makreel diff --git a/lighttpd/etc/lighttpd/global.conf b/lighttpd/etc/lighttpd/global.conf new file mode 100644 index 0000000..c69407f --- /dev/null +++ b/lighttpd/etc/lighttpd/global.conf @@ -0,0 +1,61 @@ +server.modules += ("mod_auth", "mod_setenv") + +$SERVER["socket"] == ":81" { + server.document-root = "/host/var/www/global" + auth.backend = "plain" + auth.backend.plain.userfile = "/host/etc/.lighttpdpassword" + + $HTTP["url"] !~ "^(/public/.*|/.well-known/.*)" { + auth.require = ( + "/" => ( + "method" => "basic", + "realm" => "Password protected area", + "require" => "valid-user" + ) + ) + } + + $HTTP["host"] =~ "^bewind\.veenboer\.online" { + url.redirect = ( "^/(.*)" => "https://bewind.veenboer.online/" ) + } +} + +$SERVER["socket"] == ":443" { + server.document-root = "/host/var/www/global" + + # Enable SSL + ssl.engine = "enable" + ssl.pemfile = "/host/etc/certs/key+certificate.pem" + ssl.ca-file = "/host/etc/certs/intermediate.pem" + ssl.dh-file = "/host/etc/certs/dh.pem" + + # Increased security, from https://cipherli.st/ + ssl.honor-cipher-order = "enable" + ssl.cipher-list = "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH" + setenv.add-response-header = ( + "Strict-Transport-Security" => "max-age=63072000; includeSubdomains; preload", + "X-Frame-Options" => "DENY", + "X-Content-Type-Options" => "nosniff" + ) + ssl.use-sslv2 = "disable" + ssl.use-sslv3 = "disable" + + # Increased security, from https://raymii.org/s/tutorials/HTTP_Strict_Transport_Security_for_Apache_NGINX_and_Lighttpd.html + $HTTP["scheme"] == "https" { + setenv.add-response-header = ( + # "Strict-Transport-Security" => "max-age=63072000; includeSubdomains; preload", + "X-Frame-Options" => "DENY" + ) + } + + # Authentication + auth.backend = "plain" + auth.backend.plain.userfile = "/host/etc/.lighttpdpassword" + auth.require = ( + "/" => ( + "method" => "basic", + "realm" => "Password protected area", + "require" => "valid-user" + ) + ) +}