remove obsolete hosts and forbit accessing .git@

1 files changed, 3 insertions, 49 deletions

diff --git a/frontends/etc/httpd.conf.tpl b/frontends/etc/httpd.conf.tpl
index 6902ed4..5b06eba 100644
--- a/frontends/etc/httpd.conf.tpl
+++ b/frontends/etc/httpd.conf.tpl
@@ -37,6 +37,9 @@ server "<%= $prefix.$host %>" {
     certificate "/etc/ssl/<%= $prefix.$host %>.fullchain.pem"
     key "/etc/ssl/private/<%= $prefix.$host %>.key"
   }
+  location "/.git*" {
+    block return 302 "https://<%= $prefix.$host %>"
+  }
   location * {
     root "/htdocs/gemtexter/<%= $host %>"
     directory auto index
@@ -126,55 +129,6 @@ server "<%= $prefix %>fotos.buetow.org" {
   directory auto index
 }
 
-# Legacy hosts
-server "snonux.de" {
-  alias "www.snonux.de"
-  listen on * port 80
-  block return 302 "https://snonux.land"
-}
-
-server "snonux.de" {
-  alias "www.snonux.de"
-  listen on * tls port 443
-  tls {
-    certificate "/etc/ssl/snonux.de.fullchain.pem"
-    key "/etc/ssl/private/snonux.de.key"
-  }
-  block return 302 "https://snonux.land$REQUEST_URI"
-}
-
-server "foo.surf" {
-  alias "www.foo.surf"
-  listen on * port 80
-  block return 302 "https://foo.zone$REQUEST_URI"
-}
-
-server "foo.surf" {
-  alias "www.foo.surf"
-  listen on * tls port 443
-  tls {
-    certificate "/etc/ssl/foo.surf.fullchain.pem"
-    key "/etc/ssl/private/foo.surf.key"
-  }
-  block return 302 "https://foo.zone$REQUEST_URI"
-}
-
-server "sidewalk.ninja" {
-  alias "www.sidewalk.ninja"
-  listen on * port 80
-  block return 302 "https://irregular.ninja$REQUEST_URI"
-}
-
-server "sidewalk.ninja" {
-  alias "www.sidewalk.ninja"
-  listen on * tls port 443
-  tls {
-    certificate "/etc/ssl/sidewalk.ninja.fullchain.pem"
-    key "/etc/ssl/private/sidewalk.ninja.key"
-  }
-  block return 302 "https://irregular.ninja$REQUEST_URI"
-}
-
 # Defaults
 server "default" {
   listen on * port 80