openvibers/openvibe.sites Commits

Vhosts include snippets/security-txt.conf, so /.well-known/security.txt ([email protected]) is served on every Sites domain and survives each deploy's regeneration

OP OpenVibers committed 24 Sept 2026 · 63683d2221 · 18 files, +18 −0





Changes
ddiff --git a/build.js b/build.js
iindex b97a153..c5fdfff 100644
---- a/build.js
++++ b/build.js
@@@ -359,6 +359,7 @@ server {
      listen [::]:443 ssl;
      http2 on;
      server_name ${d};
++    include snippets/security-txt.conf;   # /.well-known/security.txt (host file; SECURITY.md in every repo)
  
      ssl_certificate     /etc/letsencrypt/live/${cert}/fullchain.pem;
      ssl_certificate_key /etc/letsencrypt/live/${cert}/privkey.pem;
ddiff --git a/deploy/nginx/admin.openvibe.network.conf b/deploy/nginx/admin.openvibe.network.conf
iindex eaf35a7..b1e78ad 100644
---- a/deploy/nginx/admin.openvibe.network.conf
++++ b/deploy/nginx/admin.openvibe.network.conf
@@@ -11,6 +11,7 @@ server {
      listen [::]:443 ssl;
      http2 on;
      server_name admin.openvibe.network;
++    include snippets/security-txt.conf;   # /.well-known/security.txt (host file; SECURITY.md in every repo)
  
      ssl_certificate     /etc/letsencrypt/live/openvibe.network/fullchain.pem;
      ssl_certificate_key /etc/letsencrypt/live/openvibe.network/privkey.pem;
ddiff --git a/deploy/nginx/ai.openvibe.network.conf b/deploy/nginx/ai.openvibe.network.conf
iindex 1237fc7..83c2c78 100644
---- a/deploy/nginx/ai.openvibe.network.conf
++++ b/deploy/nginx/ai.openvibe.network.conf
@@@ -11,6 +11,7 @@ server {
      listen [::]:443 ssl;
      http2 on;
      server_name ai.openvibe.network;
++    include snippets/security-txt.conf;   # /.well-known/security.txt (host file; SECURITY.md in every repo)
  
      ssl_certificate     /etc/letsencrypt/live/openvibe.network/fullchain.pem;
      ssl_certificate_key /etc/letsencrypt/live/openvibe.network/privkey.pem;
ddiff --git a/deploy/nginx/api.openvibe.network.conf b/deploy/nginx/api.openvibe.network.conf
iindex c71cf3a..849b719 100644
---- a/deploy/nginx/api.openvibe.network.conf
++++ b/deploy/nginx/api.openvibe.network.conf
@@@ -11,6 +11,7 @@ server {
      listen [::]:443 ssl;
      http2 on;
      server_name api.openvibe.network;
++    include snippets/security-txt.conf;   # /.well-known/security.txt (host file; SECURITY.md in every repo)
  
      ssl_certificate     /etc/letsencrypt/live/openvibe.network/fullchain.pem;
      ssl_certificate_key /etc/letsencrypt/live/openvibe.network/privkey.pem;
ddiff --git a/deploy/nginx/auth.openvibe.network.conf b/deploy/nginx/auth.openvibe.network.conf
iindex 5e73d2e..8b2b38e 100644
---- a/deploy/nginx/auth.openvibe.network.conf
++++ b/deploy/nginx/auth.openvibe.network.conf
@@@ -11,6 +11,7 @@ server {
      listen [::]:443 ssl;
      http2 on;
      server_name auth.openvibe.network;
++    include snippets/security-txt.conf;   # /.well-known/security.txt (host file; SECURITY.md in every repo)
  
      ssl_certificate     /etc/letsencrypt/live/openvibe.network/fullchain.pem;
      ssl_certificate_key /etc/letsencrypt/live/openvibe.network/privkey.pem;
ddiff --git a/deploy/nginx/openre.stream.conf b/deploy/nginx/openre.stream.conf
iindex bf8e0f6..3b83906 100644
---- a/deploy/nginx/openre.stream.conf
++++ b/deploy/nginx/openre.stream.conf
@@@ -21,6 +21,7 @@ server {
      listen [::]:443 ssl;
      http2 on;
      server_name openre.stream;
++    include snippets/security-txt.conf;   # /.well-known/security.txt (host file; SECURITY.md in every repo)
  
      ssl_certificate     /etc/letsencrypt/live/openre.stream/fullchain.pem;
      ssl_certificate_key /etc/letsencrypt/live/openre.stream/privkey.pem;
ddiff --git a/deploy/nginx/openvibe.chat.conf b/deploy/nginx/openvibe.chat.conf
iindex 898ff10..545ac7f 100644
---- a/deploy/nginx/openvibe.chat.conf
++++ b/deploy/nginx/openvibe.chat.conf
@@@ -21,6 +21,7 @@ server {
      listen [::]:443 ssl;
      http2 on;
      server_name openvibe.chat;
++    include snippets/security-txt.conf;   # /.well-known/security.txt (host file; SECURITY.md in every repo)
  
      ssl_certificate     /etc/letsencrypt/live/openvibe.chat/fullchain.pem;
      ssl_certificate_key /etc/letsencrypt/live/openvibe.chat/privkey.pem;
ddiff --git a/deploy/nginx/openvibe.coupons.conf b/deploy/nginx/openvibe.coupons.conf
iindex 9153120..f2744da 100644
---- a/deploy/nginx/openvibe.coupons.conf
++++ b/deploy/nginx/openvibe.coupons.conf
@@@ -21,6 +21,7 @@ server {
      listen [::]:443 ssl;
      http2 on;
      server_name openvibe.coupons;
++    include snippets/security-txt.conf;   # /.well-known/security.txt (host file; SECURITY.md in every repo)
  
      ssl_certificate     /etc/letsencrypt/live/openvibe.coupons/fullchain.pem;
      ssl_certificate_key /etc/letsencrypt/live/openvibe.coupons/privkey.pem;
ddiff --git a/deploy/nginx/openvibe.deals.conf b/deploy/nginx/openvibe.deals.conf
iindex 672f7ce..88ef98b 100644
---- a/deploy/nginx/openvibe.deals.conf
++++ b/deploy/nginx/openvibe.deals.conf
@@@ -21,6 +21,7 @@ server {
      listen [::]:443 ssl;
      http2 on;
      server_name openvibe.deals;
++    include snippets/security-txt.conf;   # /.well-known/security.txt (host file; SECURITY.md in every repo)
  
      ssl_certificate     /etc/letsencrypt/live/openvibe.deals/fullchain.pem;
      ssl_certificate_key /etc/letsencrypt/live/openvibe.deals/privkey.pem;
ddiff --git a/deploy/nginx/openvibe.host.conf b/deploy/nginx/openvibe.host.conf
iindex e194d51..cebb754 100644
---- a/deploy/nginx/openvibe.host.conf
++++ b/deploy/nginx/openvibe.host.conf
@@@ -21,6 +21,7 @@ server {
      listen [::]:443 ssl;
      http2 on;
      server_name openvibe.host;
++    include snippets/security-txt.conf;   # /.well-known/security.txt (host file; SECURITY.md in every repo)
  
      ssl_certificate     /etc/letsencrypt/live/openvibe.host/fullchain.pem;
      ssl_certificate_key /etc/letsencrypt/live/openvibe.host/privkey.pem;
ddiff --git a/deploy/nginx/openvibe.news.conf b/deploy/nginx/openvibe.news.conf
iindex d2357e1..cf2ac74 100644
---- a/deploy/nginx/openvibe.news.conf
++++ b/deploy/nginx/openvibe.news.conf
@@@ -21,6 +21,7 @@ server {
      listen [::]:443 ssl;
      http2 on;
      server_name openvibe.news;
++    include snippets/security-txt.conf;   # /.well-known/security.txt (host file; SECURITY.md in every repo)
  
      ssl_certificate     /etc/letsencrypt/live/openvibe.news/fullchain.pem;
      ssl_certificate_key /etc/letsencrypt/live/openvibe.news/privkey.pem;
ddiff --git a/deploy/nginx/openvibe.reviews.conf b/deploy/nginx/openvibe.reviews.conf
iindex 5b792b7..12f2178 100644
---- a/deploy/nginx/openvibe.reviews.conf
++++ b/deploy/nginx/openvibe.reviews.conf
@@@ -21,6 +21,7 @@ server {
      listen [::]:443 ssl;
      http2 on;
      server_name openvibe.reviews;
++    include snippets/security-txt.conf;   # /.well-known/security.txt (host file; SECURITY.md in every repo)
  
      ssl_certificate     /etc/letsencrypt/live/openvibe.reviews/fullchain.pem;
      ssl_certificate_key /etc/letsencrypt/live/openvibe.reviews/privkey.pem;
ddiff --git a/deploy/nginx/openvibe.tips.conf b/deploy/nginx/openvibe.tips.conf
iindex 63c741d..7ef7951 100644
---- a/deploy/nginx/openvibe.tips.conf
++++ b/deploy/nginx/openvibe.tips.conf
@@@ -21,6 +21,7 @@ server {
      listen [::]:443 ssl;
      http2 on;
      server_name openvibe.tips;
++    include snippets/security-txt.conf;   # /.well-known/security.txt (host file; SECURITY.md in every repo)
  
      ssl_certificate     /etc/letsencrypt/live/openvibe.tips/fullchain.pem;
      ssl_certificate_key /etc/letsencrypt/live/openvibe.tips/privkey.pem;
ddiff --git a/deploy/nginx/openvibe.trade.conf b/deploy/nginx/openvibe.trade.conf
iindex b0094b7..dc5159d 100644
---- a/deploy/nginx/openvibe.trade.conf
++++ b/deploy/nginx/openvibe.trade.conf
@@@ -21,6 +21,7 @@ server {
      listen [::]:443 ssl;
      http2 on;
      server_name openvibe.trade;
++    include snippets/security-txt.conf;   # /.well-known/security.txt (host file; SECURITY.md in every repo)
  
      ssl_certificate     /etc/letsencrypt/live/openvibe.trade/fullchain.pem;
      ssl_certificate_key /etc/letsencrypt/live/openvibe.trade/privkey.pem;
ddiff --git a/deploy/nginx/openvibe.vip.conf b/deploy/nginx/openvibe.vip.conf
iindex 4873f9f..55525b5 100644
---- a/deploy/nginx/openvibe.vip.conf
++++ b/deploy/nginx/openvibe.vip.conf
@@@ -21,6 +21,7 @@ server {
      listen [::]:443 ssl;
      http2 on;
      server_name openvibe.vip;
++    include snippets/security-txt.conf;   # /.well-known/security.txt (host file; SECURITY.md in every repo)
  
      ssl_certificate     /etc/letsencrypt/live/openvibe.vip/fullchain.pem;
      ssl_certificate_key /etc/letsencrypt/live/openvibe.vip/privkey.pem;
ddiff --git a/deploy/nginx/realtime.openvibe.network.conf b/deploy/nginx/realtime.openvibe.network.conf
iindex 5cecdba..c4e265f 100644
---- a/deploy/nginx/realtime.openvibe.network.conf
++++ b/deploy/nginx/realtime.openvibe.network.conf
@@@ -11,6 +11,7 @@ server {
      listen [::]:443 ssl;
      http2 on;
      server_name realtime.openvibe.network;
++    include snippets/security-txt.conf;   # /.well-known/security.txt (host file; SECURITY.md in every repo)
  
      ssl_certificate     /etc/letsencrypt/live/openvibe.network/fullchain.pem;
      ssl_certificate_key /etc/letsencrypt/live/openvibe.network/privkey.pem;
ddiff --git a/deploy/nginx/status.openvibe.network.conf b/deploy/nginx/status.openvibe.network.conf
iindex b480935..c55539e 100644
---- a/deploy/nginx/status.openvibe.network.conf
++++ b/deploy/nginx/status.openvibe.network.conf
@@@ -11,6 +11,7 @@ server {
      listen [::]:443 ssl;
      http2 on;
      server_name status.openvibe.network;
++    include snippets/security-txt.conf;   # /.well-known/security.txt (host file; SECURITY.md in every repo)
  
      ssl_certificate     /etc/letsencrypt/live/openvibe.network/fullchain.pem;
      ssl_certificate_key /etc/letsencrypt/live/openvibe.network/privkey.pem;
ddiff --git a/deploy/nginx/themes.openvibe.network.conf b/deploy/nginx/themes.openvibe.network.conf
iindex 231f7d3..1a44d64 100644
---- a/deploy/nginx/themes.openvibe.network.conf
++++ b/deploy/nginx/themes.openvibe.network.conf
@@@ -11,6 +11,7 @@ server {
      listen [::]:443 ssl;
      http2 on;
      server_name themes.openvibe.network;
++    include snippets/security-txt.conf;   # /.well-known/security.txt (host file; SECURITY.md in every repo)
  
      ssl_certificate     /etc/letsencrypt/live/openvibe.network/fullchain.pem;
      ssl_certificate_key /etc/letsencrypt/live/openvibe.network/privkey.pem;