diff --git a/ghost.subdomain.conf.sample b/ghost.subdomain.conf.sample index 20d718b1..07695317 100644 --- a/ghost.subdomain.conf.sample +++ b/ghost.subdomain.conf.sample @@ -1,6 +1,7 @@ -## Version 2025/07/18 +## Version 2025/09/17 # make sure that your ghost container is named ghost # make sure that your dns has a cname set for ghost +# Note: The Ghost(Pro) hosted ActivityPub Service (https://ap.ghost.org) has usage limits. See https://docs.ghost.org/install/docker#hosted-activitypub-usage-limits server { listen 443 ssl; @@ -51,4 +52,24 @@ server { proxy_pass $upstream_proto://$upstream_app:$upstream_port; } + + location ~ /.ghost/activitypub/* { + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header Host $http_host; + add_header X-Content-Type-Options "nosniff"; + proxy_ssl_server_name on; + proxy_pass https://ap.ghost.org; + } + + location ~ /.well-known/(webfinger|nodeinfo) { + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header Host $http_host; + add_header X-Content-Type-Options "nosniff"; + proxy_ssl_server_name on; + proxy_pass https://ap.ghost.org; + } } diff --git a/ghost.subfolder.conf.sample b/ghost.subfolder.conf.sample index 5673ccc8..4e088399 100644 --- a/ghost.subfolder.conf.sample +++ b/ghost.subfolder.conf.sample @@ -1,8 +1,9 @@ -## Version 2023/02/05 +## Version 2025/09/17 # make sure that your ghost container is named ghost # make sure that ghost is set to work with the base url /ghost/ # Make sure you are using a subfolder in your ghost config file. https://ghost.org/docs/concepts/config/#url # Note: /ghost/ is by default used for the admin page. See https://ghost.org/docs/concepts/config/#admin-url +# Note: Subfolder configuration does not support ActivityPub. See https://docs.ghost.org/update-major-version#get-activitypub-ready location /blog { # enable the next two lines for http auth