add s3.hantim.net proxy, fix dns ttl to 3600

docker/nginx/conf.d/s3.hantim.net.conf

@@ -0,0 +1,32 @@
+# Garage S3 API
+server {
+    listen 80;
+    listen [::]:80;
+    server_name s3.hantim.net;
+
+    location /.well-known/acme-challenge/ {
+        root /var/www/certbot;
+    }
+
+    location / {
+        return 301 https://s3.hantim.net$request_uri;
+    }
+}
+
+server {
+    listen 443 ssl;
+    listen [::]:443 ssl;
+    http2 on;
+    server_name s3.hantim.net;
+
+    ssl_certificate     /etc/letsencrypt/live/s3.hantim.net/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/s3.hantim.net/privkey.pem;
+
+    add_header Strict-Transport-Security "max-age=63072000; preload" always;
+
+    client_max_body_size 100M;
+
+    location / {
+        proxy_pass http://garage:3900;
+    }
+}

tools/new-app.sh

@@ -159,7 +159,7 @@ HTTP_CODE=$(curl -s -o "$RESP" -w "%{http_code}" \
     -X POST "$VULTR_API/domains/$APP/records" \
     -H "$VULTR_AUTH" \
     -H "Content-Type: application/json" \
-    -d "{\"name\": \"\", \"type\": \"A\", \"data\": \"$SERVER_IP\", \"ttl\": 300}")
+    -d "{\"name\": \"\", \"type\": \"A\", \"data\": \"$SERVER_IP\", \"ttl\": 3600}")
 if [ "$HTTP_CODE" != "200" ] && [ "$HTTP_CODE" != "201" ] && [ "$HTTP_CODE" != "204" ]; then
     echo "Error: Failed to create A record for $APP (HTTP $HTTP_CODE)"
     cat "$RESP"
@@ -175,7 +175,7 @@ HTTP_CODE=$(curl -s -o "$RESP" -w "%{http_code}" \
     -X POST "$VULTR_API/domains/$APP/records" \
     -H "$VULTR_AUTH" \
     -H "Content-Type: application/json" \
-    -d "{\"name\": \"www\", \"type\": \"A\", \"data\": \"$SERVER_IP\", \"ttl\": 300}")
+    -d "{\"name\": \"www\", \"type\": \"A\", \"data\": \"$SERVER_IP\", \"ttl\": 3600}")
 if [ "$HTTP_CODE" != "200" ] && [ "$HTTP_CODE" != "201" ] && [ "$HTTP_CODE" != "204" ]; then
     echo "Error: Failed to create A record for www.$APP (HTTP $HTTP_CODE)"
     cat "$RESP"