1 # This is the nginx config for Mailman. The configs for http and https
   2 # are essentially the same except for the added SSL stuff for https.
   3 # The critical stuff is the /static/ location and the proxy stuff
   4 # for proxying to gunicorn at port 8000.
   5 
   6 server {
   7 	listen 80 default_server;
   8 	# listen [::]:80 default_server ipv6only=on;
   9 
  10 	root /usr/share/nginx/html;
  11 	index index.html index.htm;
  12 
  13 	server_name lists.mailman3.org;
  14 
  15 	location / {
  16 		proxy_pass http://127.0.0.1:8000/;
  17 		proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  18 		proxy_set_header X-Forwarded-Host $host;
  19 		proxy_set_header X-Forwarded-Server $host;
  20 		proxy_set_header X-Forwarded-Proto $scheme;
  21 		proxy_redirect off;
  22 	}
  23 
  24 	location /static/ {
  25 		alias /opt/mailman/mm/static/;
  26 	}
  27 
  28 	location /robots.txt {
  29 		alias /usr/share/nginx/html/robots.txt;
  30 	}
  31 
  32 	location /favicon.ico {
  33 		alias /var/www/listorg/images/favicon.ico;
  34 	}
  35 
  36 }
  37 
  38 server {
  39 	listen 443 default_server;
  40 	# listen [::]:443 default_server ipv6only=on;
  41 
  42 	root /usr/share/nginx/html;
  43 	index index.html index.htm;
  44 
  45 	server_name lists.mailman3.org;
  46 
  47 	ssl on;
  48 	ssl_certificate /etc/letsencrypt/live/mirror.mailman3.org/fullchain.pem;
  49 	ssl_certificate_key /etc/letsencrypt/live/mirror.mailman3.org/privkey.pem;
  50 
  51 	ssl_session_timeout 5m;
  52 
  53 	ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2;
  54 	ssl_ciphers "HIGH:!aNULL:!MD5 or HIGH:!aNULL:!MD5:!3DES";
  55 	ssl_prefer_server_ciphers on;
  56 
  57 	location / {
  58 		proxy_pass http://127.0.0.1:8000/;
  59 		proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  60 		proxy_set_header X-Forwarded-Host $host;
  61 		proxy_set_header X-Forwarded-Server $host;
  62 		proxy_set_header X-Forwarded-Proto $scheme;
  63 		proxy_redirect off;
  64 	}
  65 
  66 	location /static/ {
  67 		alias /opt/mailman/mm/static/;
  68 	}
  69 
  70 	location /robots.txt {
  71 		alias /usr/share/nginx/html/robots.txt;
  72 	}
  73 
  74 	location /favicon.ico {
  75 		alias /var/www/listorg/images/favicon.ico;
  76 	}
  77 
  78 }