feat: add wordpress site variant

2026-06-25 07:36:25 +02:00
parent cae9180bc6
commit c66dd7e511
46 changed files with 2091 additions and 136 deletions
@@ -0,0 +1,54 @@
+map $http_x_forwarded_proto $effective_forwarded_proto {
+    default $scheme;
+    https https;
+}
+
+server_tokens off;
+limit_req_status 429;
+limit_req_zone $binary_remote_addr zone=site:10m rate=30r/s;
+limit_req_zone $binary_remote_addr zone=login:10m rate=5r/m;
+
+resolver 127.0.0.11 valid=10s ipv6=off;
+
+upstream wordpress_backend {
+    zone wordpress_backend 64k;
+    server wordpress:80 resolve;
+    keepalive 16;
+}
+
+server {
+    listen 80 default_server;
+    server_name _;
+
+    location = /nginx-health {
+        access_log off;
+        return 200 "ok\n";
+    }
+
+    location = /wordpress-health {
+        access_log off;
+        allow 127.0.0.1;
+        deny all;
+        proxy_set_header Host __DOMAIN__;
+        proxy_pass http://wordpress_backend/wp-login.php;
+    }
+
+    location / {
+        return 404;
+    }
+}
+
+server {
+    listen 80;
+    server_name __DOMAIN__;
+
+    location ^~ /.well-known/acme-challenge/ {
+        root /var/www/certbot;
+        default_type text/plain;
+        try_files $uri =404;
+    }
+
+    include /etc/nginx/http-enabled/site.conf;
+}
+
+include /etc/nginx/tls-enabled/*.conf;