Shiloh/shiloh_automatisch
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

update nginx config #13

Merged
Ghost merged 1 commits from dev into main 2025-02-11 00:28:11 +00:00
Conversation 0 Commits 1 Files Changed 3 +13 -6
3 changed files with 13 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
https/nginx/automatisch_letsencrypt_nginx.conf
View File

@ -12,6 +12,7 @@ server {
# Forward to Automatisch site which is running on port 7757 # Forward to Automatisch site which is running on port 7757
proxy_pass http://main:7757; proxy_pass http://main:7757;
proxy_http_version 1.1;
} }
location ~ /.well-known/acme-challenge/ { location ~ /.well-known/acme-challenge/ {

1
https/nginx/automatisch_letsencrypt_nginx_template.conf
View File

@ -12,6 +12,7 @@ server {
# Forward to Automatisch site which is running on port 7757 # Forward to Automatisch site which is running on port 7757
proxy_pass http://main:7757; proxy_pass http://main:7757;
proxy_http_version 1.1;
} }
location ~ /.well-known/acme-challenge/ { location ~ /.well-known/acme-challenge/ {

17
https/nginx/secondary_automatisch_letsencrypt_nginx.conf
View File

@ -1,7 +1,6 @@
# nginx conf file to use after LetsEncrypt SSL certs have been created # initial nginx conf file needed when running certbot container the first time to generate ssl certs
# replace <HOSTNAME> with your DNS i.e.automatisch.lasthourhosting.org # replace <HOSTNAME> with your DNS i.e.automatisch.lasthourhosting.org
server { server {
# nginx http port # nginx http port
@ -19,12 +18,17 @@ server {
server { server {
# nginx https port # nginx https port
listen 443 ssl http2; listen 443 ssl;
listen [::]:443 ssl http2; listen [::]:443 ssl;
http2 on;
# use ssl letsencrypt certs # use ssl letsencrypt certs
ssl_certificate /etc/letsencrypt/live/<HOSTNAME>/fullchain.pem; ssl_certificate /etc/letsencrypt/live/<HOSTNAME>/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/<HOSTNAME>/privkey.pem; ssl_certificate_key /etc/letsencrypt/live/<HOSTNAME>/privkey.pem;
ssl_ciphers EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH;
ssl_prefer_server_ciphers on;
ssl_session_cache shared:SSL:10m;
ssl_session_timeout 1h;
server_name <HOSTNAME>; server_name <HOSTNAME>;
@ -32,6 +36,7 @@ server {
# Forward to Automatisch site which is running on port 7757 # Forward to Automatisch site which is running on port 7757
proxy_pass http://main:7757/; proxy_pass http://main:7757/;
proxy_http_version 1.1;
proxy_set_header Host $host; proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
@ -41,4 +46,4 @@ server {
location ~ /.well-known/acme-challenge/ { location ~ /.well-known/acme-challenge/ {
root /var/www/certbot; root /var/www/certbot;
} }
} }