Anubis with classic nginx env (no docker, no socket)

[Anagastes]

I operate a classic NGINX structure without Docker. Several domains run on it. Partly with reverse proxy (gitea/forgejo) partly ‘normal’ call with 80/443 to a directory.

So really very classic, without sockets.

In your instructions for nginx I only find examples with nginx socket. Does it also work without?

[SuperSandro2000]

What is the problem of sockets? It allows you to restrict who can connect to the service and it also illuminates the need to track which service uses which port.

But it should also work with ports as well as sockets.

[Anagastes]

There is no direct problem. Except my own stupidity.

I can see the advantage of sockets.

I confess, I don't yet understand how to switch my setup to sockets.

So I thought I could go the ‘easy’ way and realise Anubis on the existing construct. Shame on me, I know.

As an example of a page, this is the structure.

/etc/nginx/sites-enabled/xx.XXX.xx.conf

server {
    listen 443 ssl http2;
    listen [::]:443 ssl http2;
    server_name xx.XXX.xx;

    root /opt/www/website;
    index index.php;

    include /etc/nginx/templates/misc.tmpl;
    include /etc/nginx/templates/ssl-website.tmpl;
    include /etc/nginx/templates/website-subdomain.tmpl;
}

/etc/nginx/templates/website-subdomain.tmpl;

location /.well-known/ {
        alias /opt/www/website/.well-known/;
}

location / {
try_files $uri /index.html;
add_header X-Frame-Options "SAMEORIGIN";
add_header X-Content-Type-Options "nosniff";
add_header Content-Security-Polixy "default-src 'self 'unsafe-eval' 'unsafe-inline'" always;
add_header X-XSS-Protection "1; mode=block";
add_header Referrer-Policy "strict-origin";
add_header Permissions-Policy "geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()";
add_header Strict-Transport-Security 'max-age=31536000; includeSubDomains; preload';

}

location ~* .(ico|css|js|gif|jpe?g)$ {
    expires 30d;
    access_log off;
    add_header Pragma public;
    add_header Cache-Control "public";
}

location ~* .(css|js)$ {
    expires 24h;
    access_log off;
    add_header Pragma public;
    add_header Cache-Control "public";
}

location ~* .(png|woff2|woff|svg)$ {
    expires 4h;
    access_log off;
    add_header Pragma public;
    add_header Cache-Control "public";
}

 error_page 404 /404.html;

 client_max_body_size 10M;

 proxy_connect_timeout 60s;
 proxy_send_timeout 60s;
 proxy_read_timeout 60s;
 send_timeout 60s;

location ~ ^\. {
    deny all;
}