luke/ansible-roles/nginx, branch main Ansible roles for nth.io infrastructure https://src.nth.io/luke/ansible-roles/atom?h=main 2026-08-10T14:37:37Z nginx: add catch-all default_server returning 404 for unmatched hosts 2026-08-10T14:37:37Z Luke Hoersten luke@hoersten.org 2026-08-10T14:36:28Z urn:sha1:3610744c6a2324cbffeb49bd2e8a2b7c58a2e9e6 Without an explicit default_server, nginx falls back to the first alphabetically-loaded vhost for any request whose Host or SNI matches no server_name. Add an explicit catch-all that returns a plain 404 over HTTP and rejects the TLS handshake (ssl_reject_handshake, nginx >= 1.19.4) so unmatched HTTPS requests are not served a mismatched cert. Use checksum-based rsync for nginx root file sync 2026-04-19T00:06:12Z Luke Hoersten luke@hoersten.org 2026-04-19T00:06:12Z urn:sha1:eb73ba26e2ef66e38097b784fb3c4621a2991a40 Fixed paper build URL and nginx logging off. 2026-03-27T19:56:43Z Luke Hoersten luke@hoersten.org 2026-03-27T19:56:43Z urn:sha1:0e8a85cd7c3a4ee1de23ffd78cc49b727382acae Update versions and fix nginx logging. 2026-03-26T02:42:49Z Luke Hoersten luke@hoersten.org 2026-03-26T02:42:49Z urn:sha1:58d4444b06de49587417791bb06a4fe1aeda571d Lots of updates and fixes for Ubuntu 24.04 Noble. 2024-10-07T20:25:37Z Luke Hoersten luke@hoersten.org 2024-10-07T20:25:37Z urn:sha1:27739609362360b2bf533f5a59106ce52c8d4b9f Use rsync for nginx root copy. 2023-02-11T16:49:06Z Luke Hoersten luke@hoersten.org 2023-02-11T16:49:06Z urn:sha1:c2fc624dd77c8e50564e7619cf6f52f2e174f67f Changing www root content does not require an nginx reload. 2021-07-26T21:08:03Z Luke Hoersten luke@hoersten.org 2021-07-26T21:08:03Z urn:sha1:c2e3b8017d94161dbf170e02c26b52cbd9d45429 Added nginx and oragono HUP reloading to systemd handlers. Added nginx config. 2020-07-05T15:25:32Z Luke Hoersten luke@hoersten.org 2020-07-05T15:25:32Z urn:sha1:d67fdf8ed71f6927a00cf6bc812777091e5a026d Minor update. 2020-06-16T15:54:40Z Luke Hoersten luke@hoersten.org 2020-06-16T15:54:40Z urn:sha1:28e0e53a0f4fb020c8d01c75f3dd16c7819dab5f Added stream support to nginx configs. 2020-06-16T04:25:16Z Luke Hoersten luke@hoersten.org 2020-06-16T04:25:16Z urn:sha1:a10a0a3f06f514e4e7968b1b8db37342211979a7