Unterschiede

Hier werden die Unterschiede zwischen zwei Versionen angezeigt.

--- ubuntu:navidrome [2026/04/24 11:44] – [Installation der Pakete] Sebastian Hetzel
+++ ubuntu:navidrome [2026/04/30 20:56] (aktuell) – [Anwendung installieren] Sebastian Hetzel
@@ Zeile 52: / Zeile 52: @@
 </code>
+==== Logrotate ====
+<file bash /etc/logrotate.d/navidrome>
+/var/log/navidrome.log
+{
+        rotate 14
+        daily
+        missingok
+        notifempty
+        delaycompress
+        compress
+        create 640 navidrome navidrome
+        postrotate
+                if service navidrome status > /dev/null 2>&1; then \
+                    touch /var/log/navidrome.log; \
+                    chown navidrome:navidrome /var/log/navidrome.log; \
+                    service navidrome restart > /dev/null 2>&1; \
+                fi;
+        endscript
+        sharedscripts
+}
+</file>
 ==== Daten wiederherstellen (bei Migration) ====
@@ Zeile 518: / Zeile 540: @@
 <IfModule mod_ssl.c>
 <VirtualHost *:443>
-    ServerName music.example.com
+        ServerName music.example.de
-    DocumentRoot /var/www/navidrome/html
+        ServerAlias music.example.net
+        DocumentRoot /var/www/navidrome/html
-    # Logs
-    ErrorLog /var/www/navidrome/logs/error.log
-    CustomLog /var/www/navidrome/logs/access.log combined
-    # Proxy Settings
-    ProxyPreserveHost On
-    Protocols http/1.1   # HTTP/1.1 erzwingen für stabile Streaming-Verbindungen
-    # WebSocket Support (Rewrites nur für Upgrade)
+        ErrorLog /var/www/navidrome/logs/error.log
-    RewriteEngine On
+        CustomLog /var/www/navidrome/logs/access.log combined
-    RewriteCond %{HTTP:Upgrade} =websocket [NC]
-    RewriteRule /(.*) ws://127.0.0.1:4533/$1 [P,L]
-    # Normaler Proxy für alle anderen Requests
+        ProxyPreserveHost On
-    ProxyPass / http://127.0.0.1:4533/ nocanon
+        Protocols http/1.1
-    ProxyPassReverse / http://127.0.0.1:4533/
+        #ProxyPass "/.well-known/" "!"
-    # Forwarded Headers
+        # WebSocket-Unterstützung
-    RequestHeader set X-Forwarded-Proto "https"
+        RewriteEngine On
-    RequestHeader set X-Forwarded-Port "443"
+        RewriteCond %{HTTP:Upgrade} =websocket [NC]
-    RequestHeader set X-Forwarded-For "%{REMOTE_ADDR}s"
+        RewriteRule /(.*)           ws://127.0.0.1:4533/$1 [P,L]
-    # Connection / Timeout Optimierungen
+        # Alles andere Proxy
-    KeepAlive On
+        ProxyPass / http://127.0.0.1:4533/ nocanon
-    MaxKeepAliveRequests 100
+        ProxyPassReverse / http://127.0.0.1:4533/
-    KeepAliveTimeout 5
-    ProxyTimeout 300
-    # Security Headers
+        RequestHeader set X-Forwarded-Proto "https"
-    # X-XSS-Protection ist veraltet, kann optional drinbleiben oder entfernt werden
+        RequestHeader set X-Forwarded-Port "443"
-    # Header always set X-XSS-Protection "1; mode=block"
+        RequestHeader set X-Forwarded-For "%{REMOTE_ADDR}s"
-    Header always set X-Content-Type-Options "nosniff"
+        Header always set X-XSS-Protection "1; mode=block"
-    Header always set Strict-Transport-Security "max-age=31536000"
-    # SSL Certs
+        KeepAlive On
-    Include /etc/letsencrypt/options-ssl-apache.conf
+        MaxKeepAliveRequests 100
-    SSLCertificateFile /etc/letsencrypt/live/music.example.com/fullchain.pem
+        KeepAliveTimeout 5
-    SSLCertificateKeyFile /etc/letsencrypt/live/music.example.com/privkey.pem
+        ProxyTimeout 300
+        Include /etc/letsencrypt/options-ssl-apache.conf
+        Include /etc/modsecurity/navidrome-exclusions.conf
+        SSLCertificateFile  /etc/letsencrypt/live/music.example.de/fullchain.pem
+        SSLCertificateKeyFile  /etc/letsencrypt/live/music.example.de/privkey.pem
+        Header always set Strict-Transport-Security "max-age=31536000"
 </VirtualHost>
 </IfModule>