2025-03-10, 01:47 PM
Code:
include /etc/nginx/conf.d/*.conf;
Are there any conf files in this directory? If so, what is in them? Also, can you share the output of this command? It shouldn't include your domain name, but censor it if it does show up in the output. Obviously replace "jellyfin.domain.tld" with your actual domain.
Code:
curl --head -i https://jellyfin.domain.tld
This will print the headers used by the current nginx config for Jellyfin.
Code:
HTTP/2 302
server: nginx/1.26.3
date: Mon, 10 Mar 2025 13:47:20 GMT
location: web/
strict-transport-security: max-age=63072000
x-xss-protection: 0
x-content-type-options: nosniff
last-modified: Monday, 10-Mar-2025 13:47:20 GMT
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0
permissions-policy: accelerometer=(), ambient-light-sensor=(), battery=(), bluetooth=(), camera=(), clipboard-read=(), display-capture=(), document-domain=(), encrypted-media=(), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), payment=(), publickey-credentials-get=(), serial=(), sync-xhr=(), usb=(), xr-spatial-tracking=()
origin-agent-cluster: ?1
content-security-policy: default-src https: data: blob: ; img-src 'self' https://* ; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' https://www.gstatic.com https://www.youtube.com blob:; worker-src 'self' blob:; connect-src 'self'; object-src 'none'; frame-ancestors 'self' ; font-src 'self'