# nginx server block for diff.sr.ht (sr.ht-nginx style).
#
# Drop into the sr.ht-nginx config alongside the other *.sr.ht.conf files and
# adjust server_name to the instance domain (e.g. diff.srht.bigb.es).
# diff.sr.ht serves its own static assets from the embedded FS with
# immutable cache headers, so everything is proxied to the app; there is no
# GraphQL /query endpoint of its own.

server {
	include sourcehut.conf;
	include port80.conf;
	server_name diff.sr.ht;
}

server {
	include sourcehut.conf;
	include port443.conf;
	include diff-ssl.conf;
	server_name diff.sr.ht;

	location / {
		proxy_pass http://127.0.0.1:5090;
		include headers.conf;
		add_header Content-Security-Policy "default-src 'none'; style-src 'self' 'unsafe-inline'; img-src * data:; script-src 'self'; frame-ancestors 'none'" always;
		include web.conf;
	}
}