diff --git a/nginx_hivemind_reality.conf b/nginx_hivemind_reality.conf deleted file mode 100644 index 1cd1431..0000000 --- a/nginx_hivemind_reality.conf +++ /dev/null @@ -1,66 +0,0 @@ -# nginx config for ReVoltVPN — Reality era -# Path: /etc/nginx/sites-available/hivemind -# -# After Reality migration: -# - /tunnel and /tunnel-throttled locations are REMOVED -# - Xray Reality handles the VPN tunnel directly on port 8443 -# - nginx only serves the API (proxied to Flask) and any static website - -server { - listen 443 ssl http2; - server_name getrevolt.app; # ◄── CHANGE ME to your domain - - # ── SSL (Let's Encrypt) ────────────────────────────────────────────── - ssl_certificate /etc/letsencrypt/live/getrevolt.app/fullchain.pem; - ssl_certificate_key /etc/letsencrypt/live/getrevolt.app/privkey.pem; - - # ── Swarm monitor endpoints (lock behind basic auth) ──────────────── - # Generate password file on server: - # apt install apache2-utils - # htpasswd -c /etc/nginx/.htpasswd admin - location /api/swarm { - auth_basic "Hivemind Monitor"; - auth_basic_user_file /etc/nginx/.htpasswd; - proxy_pass http://127.0.0.1:5000; - proxy_http_version 1.1; - proxy_set_header Host $host; - proxy_set_header X-Real-IP $remote_addr; - proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; - proxy_read_timeout 30s; - } - location /api/log { - auth_basic "Hivemind Monitor"; - auth_basic_user_file /etc/nginx/.htpasswd; - proxy_pass http://127.0.0.1:5000; - proxy_http_version 1.1; - proxy_set_header Host $host; - proxy_set_header X-Real-IP $remote_addr; - proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; - proxy_read_timeout 30s; - } - - # ── API proxy to Hivemind (Flask) ──────────────────────────────────── - location /api/ { - proxy_pass http://127.0.0.1:5000; - proxy_http_version 1.1; - proxy_set_header Host $host; - proxy_set_header X-Real-IP $remote_addr; - proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; - proxy_set_header X-Forwarded-Proto $scheme; - proxy_read_timeout 30s; - } - - # ── Static website (optional landing page) ─────────────────────────── - location / { - root /var/www/revolt; - index index.html; - try_files $uri $uri/ =404; - } -} - -# Redirect HTTP → HTTPS -server { - listen 80; - server_name getrevolt.app; - return 301 https://$host$request_uri; -}