← back to Kamatera Nginx
remove backup nginx config files and tighten .gitignore
6fbe74f6fe3f84478e560b05b576e3be3e3f54a9 · 2026-05-30 23:58:25 -0700 · SteveStudio2
Deleted 7 stale backup/temp/old/dpkg-dist configs from sites-available
that were leaking internal infrastructure details (Shopify sandbox domain,
internal port assignments) in git history. Updated .gitignore to prevent
future *.backup *.old *.save *.temp *.dpkg-dist etc. from being tracked.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Files touched
M .gitignoreD sites-available/bubbe.ai.backupD sites-available/bubbe.ai.oldD sites-available/builds.agentabrams.com.newD sites-available/default.dpkg-distD sites-available/default.saveD sites-available/grassclothwallpaper.com.backupD sites-available/greendomainbrokers.com.temp
Diff
commit 6fbe74f6fe3f84478e560b05b576e3be3e3f54a9
Author: SteveStudio2 <stevestudio2@SteveStacStudio.lan>
Date: Sat May 30 23:58:25 2026 -0700
remove backup nginx config files and tighten .gitignore
Deleted 7 stale backup/temp/old/dpkg-dist configs from sites-available
that were leaking internal infrastructure details (Shopify sandbox domain,
internal port assignments) in git history. Updated .gitignore to prevent
future *.backup *.old *.save *.temp *.dpkg-dist etc. from being tracked.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
.gitignore | 11 +++
sites-available/bubbe.ai.backup | 68 -----------------
sites-available/bubbe.ai.old | 96 ------------------------
sites-available/builds.agentabrams.com.new | 24 ------
sites-available/default.dpkg-dist | 91 ----------------------
sites-available/default.save | 96 ------------------------
sites-available/grassclothwallpaper.com.backup | 100 -------------------------
sites-available/greendomainbrokers.com.temp | 13 ----
8 files changed, 11 insertions(+), 488 deletions(-)
diff --git a/.gitignore b/.gitignore
index 2ef1911..0efd7d7 100644
--- a/.gitignore
+++ b/.gitignore
@@ -2,3 +2,14 @@
.DS_Store
*.swp
*.swo
+*.bak
+*.bak-*
+*.backup
+*.old
+*.save
+*.orig
+*.temp
+*.dpkg-dist
+*.new
+*~
+copy-of-*
diff --git a/sites-available/bubbe.ai.backup b/sites-available/bubbe.ai.backup
deleted file mode 100644
index f5424a9..0000000
--- a/sites-available/bubbe.ai.backup
+++ /dev/null
@@ -1,68 +0,0 @@
-# HTTP - Redirect to HTTPS
-server {
- listen 80;
- listen [::]:80;
- server_name bubbe.ai www.bubbe.ai;
-
- # Let's Encrypt verification
- location ^~ /.well-known/acme-challenge/ {
- root /var/www/html;
- default_type "text/plain";
- try_files $uri =404;
- }
-
- # Redirect all HTTP to HTTPS
- location / {
- return 301 https://$server_name$request_uri;
- }
-}
-
-# HTTPS - Redirect non-www to www
-server {
- listen 443 ssl http2;
- listen [::]:443 ssl http2;
- server_name bubbe.ai;
-
- # SSL Configuration
- ssl_certificate /etc/letsencrypt/live/bubbe.ai/fullchain.pem;
- ssl_certificate_key /etc/letsencrypt/live/bubbe.ai/privkey.pem;
- ssl_protocols TLSv1.2 TLSv1.3;
- ssl_ciphers HIGH:!aNULL:!MD5;
- ssl_prefer_server_ciphers on;
-
- # Redirect to www
- return 301 https://www.bubbe.ai$request_uri;
-}
-
-# HTTPS - Main site (www)
-server {
- listen 443 ssl http2;
- listen [::]:443 ssl http2;
- server_name www.bubbe.ai;
-
- # SSL Configuration
- ssl_certificate /etc/letsencrypt/live/bubbe.ai/fullchain.pem;
- ssl_certificate_key /etc/letsencrypt/live/bubbe.ai/privkey.pem;
- ssl_protocols TLSv1.2 TLSv1.3;
- ssl_ciphers HIGH:!aNULL:!MD5;
- ssl_prefer_server_ciphers on;
-
- # Security Headers
- add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
- add_header X-Frame-Options "SAMEORIGIN" always;
- add_header X-Content-Type-Options "nosniff" always;
- add_header X-XSS-Protection "1; mode=block" always;
-
- # Proxy to Bubbe chat app
- location / {
- proxy_pass http://localhost:3011;
- proxy_http_version 1.1;
- proxy_set_header Upgrade $http_upgrade;
- proxy_set_header Connection 'upgrade';
- proxy_set_header Host $host;
- proxy_set_header X-Real-IP $remote_addr;
- proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
- proxy_set_header X-Forwarded-Proto $scheme;
- proxy_cache_bypass $http_upgrade;
- }
-}
diff --git a/sites-available/bubbe.ai.old b/sites-available/bubbe.ai.old
deleted file mode 100644
index cb65f19..0000000
--- a/sites-available/bubbe.ai.old
+++ /dev/null
@@ -1,96 +0,0 @@
-# HTTP - Redirect to HTTPS
-server {
- listen 80;
- listen [::]:80;
- server_name bubbe.ai www.bubbe.ai;
-
- # Let's Encrypt verification
- location ^~ /.well-known/acme-challenge/ {
- root /var/www/html;
- default_type "text/plain";
- try_files $uri =404;
- }
-
- # Redirect all HTTP to HTTPS
- location / {
- return 301 https://$server_name$request_uri;
- }
-}
-
-# HTTPS - Redirect non-www to www
-server {
- listen 443 ssl http2;
- listen [::]:443 ssl http2;
- server_name bubbe.ai;
-
- # SSL Configuration
- ssl_certificate /etc/letsencrypt/live/bubbe.ai/fullchain.pem;
- ssl_certificate_key /etc/letsencrypt/live/bubbe.ai/privkey.pem;
- ssl_protocols TLSv1.2 TLSv1.3;
- ssl_ciphers HIGH:!aNULL:!MD5;
- ssl_prefer_server_ciphers on;
-
- # Redirect to www
- return 301 https://www.bubbe.ai$request_uri;
-}
-
-# HTTPS - Main site (www)
-server {
- listen 443 ssl http2;
- listen [::]:443 ssl http2;
- server_name www.bubbe.ai;
-
- # SSL Configuration
- ssl_certificate /etc/letsencrypt/live/bubbe.ai/fullchain.pem;
- ssl_certificate_key /etc/letsencrypt/live/bubbe.ai/privkey.pem;
- ssl_protocols TLSv1.2 TLSv1.3;
- ssl_ciphers HIGH:!aNULL:!MD5;
- ssl_prefer_server_ciphers on;
-
- # Cloudflare Real IP Restoration
- set_real_ip_from 173.245.48.0/20;
- set_real_ip_from 103.21.244.0/22;
- set_real_ip_from 103.22.200.0/22;
- set_real_ip_from 103.31.4.0/22;
- set_real_ip_from 141.101.64.0/18;
- set_real_ip_from 108.162.192.0/18;
- set_real_ip_from 190.93.240.0/20;
- set_real_ip_from 188.114.96.0/20;
- set_real_ip_from 197.234.240.0/22;
- set_real_ip_from 198.41.128.0/17;
- set_real_ip_from 162.158.0.0/15;
- set_real_ip_from 104.16.0.0/13;
- set_real_ip_from 104.24.0.0/14;
- set_real_ip_from 172.64.0.0/13;
- set_real_ip_from 131.0.72.0/22;
- real_ip_header CF-Connecting-IP;
-
- # Security Headers
- add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
- add_header X-Frame-Options "SAMEORIGIN" always;
- add_header X-Content-Type-Options "nosniff" always;
- add_header X-XSS-Protection "1; mode=block" always;
-
- # Proxy API requests to backend
- location /api/ {
- proxy_pass http://localhost:3011/api/;
- proxy_http_version 1.1;
- proxy_set_header Host $host;
- proxy_set_header X-Real-IP $remote_addr;
- proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
- proxy_set_header X-Forwarded-Proto $scheme;
- }
-
- # Proxy to Bubbe chat app
- location / {
- proxy_pass http://localhost:3011;
- proxy_http_version 1.1;
- proxy_set_header Upgrade $http_upgrade;
- proxy_set_header Connection 'upgrade';
- proxy_set_header Host $host;
- proxy_set_header X-Real-IP $remote_addr;
- proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
- proxy_set_header X-Forwarded-Proto $scheme;
- proxy_cache_bypass $http_upgrade;
- }
-}
diff --git a/sites-available/builds.agentabrams.com.new b/sites-available/builds.agentabrams.com.new
deleted file mode 100644
index 328445c..0000000
--- a/sites-available/builds.agentabrams.com.new
+++ /dev/null
@@ -1,24 +0,0 @@
-server {
- listen 80; listen [::]:80;
- server_name builds.agentabrams.com;
- return 301 https://\$host\$request_uri;
-}
-server {
- listen 443 ssl http2; listen [::]:443 ssl http2;
- server_name builds.agentabrams.com;
- ssl_certificate /etc/letsencrypt/live/builds.agentabrams.com/fullchain.pem;
- ssl_certificate_key /etc/letsencrypt/live/builds.agentabrams.com/privkey.pem;
- include /etc/letsencrypt/options-ssl-nginx.conf;
- ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
- auth_basic 'agentabrams · admin'; auth_basic_user_file /etc/nginx/.htpasswd-agentabrams;
- add_header Accept-Ranges bytes;
- location /sister-sites/ {
- auth_basic 'agentabrams · admin'; auth_basic_user_file /etc/nginx/.htpasswd-agentabrams;
- proxy_pass http://localhost:9764/;
- proxy_http_version 1.1;
- proxy_set_header Host \$host;
- proxy_set_header X-Real-IP \$remote_addr;
- }
- root /var/www/builds.agentabrams.com;
- index index.html;
-}
diff --git a/sites-available/default.dpkg-dist b/sites-available/default.dpkg-dist
deleted file mode 100644
index c5af914..0000000
--- a/sites-available/default.dpkg-dist
+++ /dev/null
@@ -1,91 +0,0 @@
-##
-# You should look at the following URL's in order to grasp a solid understanding
-# of Nginx configuration files in order to fully unleash the power of Nginx.
-# https://www.nginx.com/resources/wiki/start/
-# https://www.nginx.com/resources/wiki/start/topics/tutorials/config_pitfalls/
-# https://wiki.debian.org/Nginx/DirectoryStructure
-#
-# In most cases, administrators will remove this file from sites-enabled/ and
-# leave it as reference inside of sites-available where it will continue to be
-# updated by the nginx packaging team.
-#
-# This file will automatically load configuration files provided by other
-# applications, such as Drupal or Wordpress. These applications will be made
-# available underneath a path with that package name, such as /drupal8.
-#
-# Please see /usr/share/doc/nginx-doc/examples/ for more detailed examples.
-##
-
-# Default server configuration
-#
-server {
- listen 80 default_server;
- listen [::]:80 default_server;
-
- # SSL configuration
- #
- # listen 443 ssl default_server;
- # listen [::]:443 ssl default_server;
- #
- # Note: You should disable gzip for SSL traffic.
- # See: https://bugs.debian.org/773332
- #
- # Read up on ssl_ciphers to ensure a secure configuration.
- # See: https://bugs.debian.org/765782
- #
- # Self signed certs generated by the ssl-cert package
- # Don't use them in a production server!
- #
- # include snippets/snakeoil.conf;
-
- root /var/www/html;
-
- # Add index.php to the list if you are using PHP
- index index.html index.htm index.nginx-debian.html;
-
- server_name _;
-
- location / {
- # First attempt to serve request as file, then
- # as directory, then fall back to displaying a 404.
- try_files $uri $uri/ =404;
- }
-
- # pass PHP scripts to FastCGI server
- #
- #location ~ \.php$ {
- # include snippets/fastcgi-php.conf;
- #
- # # With php-fpm (or other unix sockets):
- # fastcgi_pass unix:/run/php/php7.4-fpm.sock;
- # # With php-cgi (or other tcp sockets):
- # fastcgi_pass 127.0.0.1:9000;
- #}
-
- # deny access to .htaccess files, if Apache's document root
- # concurs with nginx's one
- #
- #location ~ /\.ht {
- # deny all;
- #}
-}
-
-
-# Virtual Host configuration for example.com
-#
-# You can move that to a different file under sites-available/ and symlink that
-# to sites-enabled/ to enable it.
-#
-#server {
-# listen 80;
-# listen [::]:80;
-#
-# server_name example.com;
-#
-# root /var/www/example.com;
-# index index.html;
-#
-# location / {
-# try_files $uri $uri/ =404;
-# }
-#}
diff --git a/sites-available/default.save b/sites-available/default.save
deleted file mode 100644
index fd48d7e..0000000
--- a/sites-available/default.save
+++ /dev/null
@@ -1,96 +0,0 @@
-##
-# You should look at the following URL's in order to grasp a solid understanding
-# of Nginx configuration files in order to fully unleash the power of Nginx.
-# https://www.nginx.com/resources/wiki/start/
-# https://www.nginx.com/resources/wiki/start/topics/tutorials/config_pitfalls/
-# https://wiki.debian.org/Nginx/DirectoryStructure
-#
-# In most cases, administrators will remove this file from sites-enabled/ and
-# leave it as reference inside of sites-available where it will continue to be
-# updated by the nginx packaging team.
-#
-# This file will automatically load configuration files provided by other
-# applications, such as Drupal or Wordpress. These applications will be made
-# available underneath a path with that package name, such as /drupal8.
-#
-# Please see /usr/share/doc/nginx-doc/examples/ for more detailed examples.
-##
-
-# Default server configuration
-#
-server {
- listen 80;
- server_name losgardeners.com www.losgardeners.com;
-
- # SSL configuration
- #
- # listen 443 ssl default_server;
- # listen [::]:443 ssl default_server;
- #
- # Note: You should disable gzip for SSL traffic. # See: https://bugs.debian.org/773332
- #
- # Read up on ssl_ciphers to ensure a secure configuration.
- # See: https://bugs.debian.org/765782
- #
- # Self signed certs generated by the ssl-cert package
- # Don't use them in a production server!
- #
- # include snippets/snakeoil.conf;
-
- root /var/www/html;
-
- # Add index.php to the list if you are using PHP
- index index.html index.htm index.nginx-debian.html;
-
- server_name _;
-
- location / {
- proxy_pass http://localhost:3000;
- proxy_set_header Host $host;
- proxy_set_header X-Real-IP $remote_addr;
- proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
- proxy_set_header X-Forwarded-Proto $scheme;
-
- # First attempt to serve request as file, then
- # as directory, then fall back to displaying a 404.
- try_files $uri $uri/ =404
- }
-
- # pass PHP scripts to FastCGI server
- #
- #location ~ \.php$ {
- # include snippets/fastcgi-php.conf;
- #
- # # With php-fpm (or other unix sockets):
- # fastcgi_pass unix:/var/run/php/php7.4-fpm.sock;
- # # With php-cgi (or other tcp sockets):
- # fastcgi_pass 127.0.0.1:9000;
- #}
-
- # deny access to .htaccess files, if Apache's document root
- # concurs with nginx's one
- #
- #location ~ /\.ht {
- # deny all;
- #}
-}
-
-}
-# Virtual Host configuration for example.com
-#
-# You can move that to a different file under sites-available/ and symlink that
-# to sites-enabled/ to enable it.
-#
-#server {
-# listen 80;
-# listen [::]:80;
-#
-# server_name example.com;
-#
-# root /var/www/example.com;
-# index index.html;
-#
-# location / {
-# try_files $uri $uri/ =404;
-# }
-#}
diff --git a/sites-available/grassclothwallpaper.com.backup b/sites-available/grassclothwallpaper.com.backup
deleted file mode 100644
index 49d3923..0000000
--- a/sites-available/grassclothwallpaper.com.backup
+++ /dev/null
@@ -1,100 +0,0 @@
-server {
- listen 80;
- listen [::]:80;
- server_name grassclothwallcoverings.com www.grassclothwallcoverings.com;
-
- # CloudFlare real IP
- set_real_ip_from 173.245.48.0/20;
- set_real_ip_from 103.21.244.0/22;
- set_real_ip_from 103.22.200.0/22;
- set_real_ip_from 103.31.4.0/22;
- set_real_ip_from 141.101.64.0/18;
- set_real_ip_from 108.162.192.0/18;
- set_real_ip_from 190.93.240.0/20;
- set_real_ip_from 188.114.96.0/20;
- set_real_ip_from 197.234.240.0/22;
- set_real_ip_from 198.41.128.0/17;
- set_real_ip_from 162.158.0.0/15;
- set_real_ip_from 104.16.0.0/12;
- set_real_ip_from 172.64.0.0/13;
- set_real_ip_from 131.0.72.0/22;
- real_ip_header CF-Connecting-IP;
-
- # Cache static assets
- location ~* \.(jpg|jpeg|png|gif|ico|css|js)$ {
- proxy_pass http://localhost:9080;
- proxy_cache_valid 200 30d;
- expires 30d;
- add_header Cache-Control "public, immutable";
- add_header Access-Control-Allow-Origin "*";
- add_header Access-Control-Allow-Methods "GET, OPTIONS";
- add_header Access-Control-Allow-Headers "Content-Type";
- }
-
- location / {
- proxy_pass https://designer-laboratory-sandbox.myshopify.com;
- proxy_http_version 1.1;
- proxy_ssl_server_name on;
- proxy_set_header Upgrade $http_upgrade;
- proxy_set_header Connection 'upgrade';
- proxy_set_header Host designer-laboratory-sandbox.myshopify.com;
- proxy_cache_bypass $http_upgrade;
- proxy_set_header X-Real-IP $remote_addr;
- proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
- proxy_set_header X-Forwarded-Proto $scheme;
- proxy_set_header CF-Connecting-IP $http_cf_connecting_ip;
- proxy_set_header X-Forwarded-Host $host;
- }
-}
-
-server {
- listen 443 ssl http2;
- listen [::]:443 ssl http2;
- server_name grassclothwallcoverings.com www.grassclothwallcoverings.com;
-
- ssl_certificate /etc/letsencrypt/live/grassclothwallcoverings.com/fullchain.pem;
- ssl_certificate_key /etc/letsencrypt/live/grassclothwallcoverings.com/privkey.pem;
-
- # CloudFlare real IP
- set_real_ip_from 173.245.48.0/20;
- set_real_ip_from 103.21.244.0/22;
- set_real_ip_from 103.22.200.0/22;
- set_real_ip_from 103.31.4.0/22;
- set_real_ip_from 141.101.64.0/18;
- set_real_ip_from 108.162.192.0/18;
- set_real_ip_from 190.93.240.0/20;
- set_real_ip_from 188.114.96.0/20;
- set_real_ip_from 197.234.240.0/22;
- set_real_ip_from 198.41.128.0/17;
- set_real_ip_from 162.158.0.0/15;
- set_real_ip_from 104.16.0.0/12;
- set_real_ip_from 172.64.0.0/13;
- set_real_ip_from 131.0.72.0/22;
- real_ip_header CF-Connecting-IP;
-
- # Cache static assets
- location ~* \.(jpg|jpeg|png|gif|ico|css|js)$ {
- proxy_pass http://localhost:9080;
- proxy_cache_valid 200 30d;
- expires 30d;
- add_header Cache-Control "public, immutable";
- add_header Access-Control-Allow-Origin "*";
- add_header Access-Control-Allow-Methods "GET, OPTIONS";
- add_header Access-Control-Allow-Headers "Content-Type";
- }
-
- location / {
- proxy_pass https://designer-laboratory-sandbox.myshopify.com;
- proxy_http_version 1.1;
- proxy_ssl_server_name on;
- proxy_set_header Upgrade $http_upgrade;
- proxy_set_header Connection 'upgrade';
- proxy_set_header Host designer-laboratory-sandbox.myshopify.com;
- proxy_cache_bypass $http_upgrade;
- proxy_set_header X-Real-IP $remote_addr;
- proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
- proxy_set_header X-Forwarded-Proto $scheme;
- proxy_set_header CF-Connecting-IP $http_cf_connecting_ip;
- proxy_set_header X-Forwarded-Host $host;
- }
-}
\ No newline at end of file
diff --git a/sites-available/greendomainbrokers.com.temp b/sites-available/greendomainbrokers.com.temp
deleted file mode 100644
index 8b41e71..0000000
--- a/sites-available/greendomainbrokers.com.temp
+++ /dev/null
@@ -1,13 +0,0 @@
-server {
- listen 80;
- server_name greendomainbrokers.com www.greendomainbrokers.com;
-
- # Temporary config for certbot validation
- location /.well-known/acme-challenge/ {
- root /var/www/html;
- }
-
- location / {
- return 301 https://$server_name$request_uri;
- }
-}
← 11a371d initial snapshot: post-cleanup kamatera /etc/nginx/
·
back to Kamatera Nginx
·
drop bleachfriendly.com vhost (domain not renewing) — local ac722db →