diff --git a/deploy/nginx.conf b/deploy/nginx.conf index 3ea0b8801b5d6f7f2d4c872ed46c70c146e97059..3a11e7ca17e537de2a201ba4f521b5995ba66531 100644 --- a/deploy/nginx.conf +++ b/deploy/nginx.conf @@ -1,6 +1,6 @@ upstream {{ site_name }}_django_wsgi { keepalive 2; # Cache 2 connections. - server unix:/run/{{ site_name }}/django_uwsgi.sock; + server unix:/run/symposion/{{ site_name }}_uwsgi.sock; } # server { @@ -14,8 +14,8 @@ server { server_name {{ env.domain }}; client_max_body_size 50M; - ssl_certificate /etc/letsencrypt/live/{{ env.domain }}/fullchain.pem; - ssl_certificate_key /etc/letsencrypt/live/{{ env.domain }}/privkey.pem; + # ssl_certificate /etc/letsencrypt/live/{{ env.domain }}/fullchain.pem; + # ssl_certificate_key /etc/letsencrypt/live/{{ env.domain }}/privkey.pem; # Ask for HTTPS for 180 days. add_header Strict-Transport-Security "max-age=15552000; includeSubDomains"; @@ -24,7 +24,7 @@ server { add_header X-Content-Type-Options nosniff; # Advise browser to only load external content from these sites. - add_header Content-Security-Policy "script-src 'self' 'unsafe-inline' 'unsafe-eval'"; + add_header Content-Security-Policy "script-src 'self' 'unsafe-inline' 'unsafe-eval' https://code.jquery.com/jquery-3.5.1.min.js https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js https://js.stripe.com/v3/ https://r.stripe.com/0"; location / { # Django web application including static files (via WhiteNoise).