@@ -1,18 +0,0 @@
|
|||||||
name: Deploy thekims.family
|
|
||||||
|
|
||||||
on:
|
|
||||||
push:
|
|
||||||
branches: [main]
|
|
||||||
paths:
|
|
||||||
- 'docker/thekims.family/**'
|
|
||||||
|
|
||||||
jobs:
|
|
||||||
deploy:
|
|
||||||
runs-on: ubuntu-latest
|
|
||||||
steps:
|
|
||||||
- name: Deploy via SSH
|
|
||||||
run: |
|
|
||||||
mkdir -p ~/.ssh
|
|
||||||
echo "${{ secrets.DEPLOY_SSH_KEY }}" > ~/.ssh/deploy_key
|
|
||||||
chmod 600 ~/.ssh/deploy_key
|
|
||||||
ssh -o StrictHostKeyChecking=accept-new -i ~/.ssh/deploy_key deploy@${{ vars.DEPLOY_HOST }} deploy-thekims.family
|
|
||||||
@@ -1,48 +0,0 @@
|
|||||||
# Redirect HTTP to HTTPS, bare domain to www
|
|
||||||
server {
|
|
||||||
listen 80;
|
|
||||||
listen [::]:80;
|
|
||||||
server_name thekims.family www.thekims.family;
|
|
||||||
|
|
||||||
location /.well-known/acme-challenge/ {
|
|
||||||
root /var/www/certbot;
|
|
||||||
}
|
|
||||||
|
|
||||||
location / {
|
|
||||||
return 301 https://www.thekims.family$request_uri;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
# Redirect bare HTTPS domain to www
|
|
||||||
server {
|
|
||||||
listen 443 ssl;
|
|
||||||
listen [::]:443 ssl;
|
|
||||||
http2 on;
|
|
||||||
server_name thekims.family;
|
|
||||||
|
|
||||||
ssl_certificate /etc/letsencrypt/live/thekims.family/fullchain.pem;
|
|
||||||
ssl_certificate_key /etc/letsencrypt/live/thekims.family/privkey.pem;
|
|
||||||
|
|
||||||
return 301 https://www.thekims.family$request_uri;
|
|
||||||
}
|
|
||||||
|
|
||||||
# Main site
|
|
||||||
server {
|
|
||||||
listen 443 ssl;
|
|
||||||
listen [::]:443 ssl;
|
|
||||||
http2 on;
|
|
||||||
server_name www.thekims.family;
|
|
||||||
|
|
||||||
ssl_certificate /etc/letsencrypt/live/thekims.family/fullchain.pem;
|
|
||||||
ssl_certificate_key /etc/letsencrypt/live/thekims.family/privkey.pem;
|
|
||||||
|
|
||||||
add_header Strict-Transport-Security "max-age=63072000; preload" always;
|
|
||||||
|
|
||||||
location / {
|
|
||||||
proxy_pass http://thekims_family:80;
|
|
||||||
proxy_set_header Host $host;
|
|
||||||
proxy_set_header X-Real-IP $remote_addr;
|
|
||||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
||||||
proxy_set_header X-Forwarded-Proto $scheme;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
@@ -1,11 +0,0 @@
|
|||||||
services:
|
|
||||||
app:
|
|
||||||
image: git.timothykim.net/hantim/thekims.family:latest
|
|
||||||
restart: unless-stopped
|
|
||||||
container_name: thekims_family
|
|
||||||
networks:
|
|
||||||
- shared
|
|
||||||
|
|
||||||
networks:
|
|
||||||
shared:
|
|
||||||
external: true
|
|
||||||
Reference in New Issue
Block a user