update nginx config
Some checks failed
Automatisch Backend Tests / test (pull_request) Has been cancelled
Automatisch CI / linter (pull_request) Has been cancelled
Automatisch CI / start-backend-server (pull_request) Has been cancelled
Automatisch CI / start-backend-worker (pull_request) Has been cancelled
Automatisch CI / build-web (pull_request) Has been cancelled
Some checks failed
Automatisch Backend Tests / test (pull_request) Has been cancelled
Automatisch CI / linter (pull_request) Has been cancelled
Automatisch CI / start-backend-server (pull_request) Has been cancelled
Automatisch CI / start-backend-worker (pull_request) Has been cancelled
Automatisch CI / build-web (pull_request) Has been cancelled
This commit is contained in:
parent
15a9132efd
commit
3ba64c083d
@ -12,6 +12,7 @@ server {
|
||||
|
||||
# Forward to Automatisch site which is running on port 7757
|
||||
proxy_pass http://main:7757;
|
||||
proxy_http_version 1.1;
|
||||
}
|
||||
|
||||
location ~ /.well-known/acme-challenge/ {
|
||||
|
@ -12,6 +12,7 @@ server {
|
||||
|
||||
# Forward to Automatisch site which is running on port 7757
|
||||
proxy_pass http://main:7757;
|
||||
proxy_http_version 1.1;
|
||||
}
|
||||
|
||||
location ~ /.well-known/acme-challenge/ {
|
||||
|
@ -1,7 +1,6 @@
|
||||
# nginx conf file to use after LetsEncrypt SSL certs have been created
|
||||
# initial nginx conf file needed when running certbot container the first time to generate ssl certs
|
||||
# replace <HOSTNAME> with your DNS i.e.automatisch.lasthourhosting.org
|
||||
|
||||
|
||||
server {
|
||||
|
||||
# nginx http port
|
||||
@ -19,12 +18,17 @@ server {
|
||||
server {
|
||||
|
||||
# nginx https port
|
||||
listen 443 ssl http2;
|
||||
listen [::]:443 ssl http2;
|
||||
|
||||
listen 443 ssl;
|
||||
listen [::]:443 ssl;
|
||||
http2 on;
|
||||
# use ssl letsencrypt certs
|
||||
ssl_certificate /etc/letsencrypt/live/<HOSTNAME>/fullchain.pem;
|
||||
ssl_certificate_key /etc/letsencrypt/live/<HOSTNAME>/privkey.pem;
|
||||
ssl_ciphers EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH;
|
||||
ssl_prefer_server_ciphers on;
|
||||
ssl_session_cache shared:SSL:10m;
|
||||
ssl_session_timeout 1h;
|
||||
|
||||
server_name <HOSTNAME>;
|
||||
|
||||
|
||||
@ -32,6 +36,7 @@ server {
|
||||
|
||||
# Forward to Automatisch site which is running on port 7757
|
||||
proxy_pass http://main:7757/;
|
||||
proxy_http_version 1.1;
|
||||
proxy_set_header Host $host;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
@ -41,4 +46,4 @@ server {
|
||||
location ~ /.well-known/acme-challenge/ {
|
||||
root /var/www/certbot;
|
||||
}
|
||||
}
|
||||
}
|
||||
|
Loading…
x
Reference in New Issue
Block a user