IT4Change/gradido
3
0
Fork 0
mirror of https://github.com/IT4Change/gradido.git synced 2025-12-13 07:45:54 +00:00
Code Issues Packages Projects Releases Wiki Activity

updated nginx config for ssl

Browse Source
This commit is contained in:
Ulf Gebhardt 2022-01-06 07:15:46 +01:00
parent 40cb92d076
commit 6b4f0b9478
Signed by: ulfgebhardt
GPG Key ID: DA6B843E748679C9
1 changed files with 27 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

30
deployment/bare_metal/nginx/sites-available/gradido.conf
View File

@ -1,9 +1,33 @@
# HTTP server
server {
if ($host = stage1.gradido.net) {
return 301 https://$host$request_uri;
} # managed by Certbot
server_name stage1.gradido.net;
listen 80;
listen [::]:80;
return 404; # managed by Certbot
}
# HTTPS Server
server {
# TODO correct server name stage1.gradido.net
server_name stage1.gradido.net;
#server_name 0.0.0.0;
listen 80;
listen [::]:80;
#listen 80;
#listen [::]:80;
# TODO
listen [::]:443 ssl ipv6only=on; # managed by Certbot
listen 443 ssl; # managed by Certbot
ssl_certificate /etc/letsencrypt/live/stage1.gradido.net/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/stage1.gradido.net/privkey.pem; # managed by Certbot
include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
#include /etc/nginx/common/protect.conf;
#include /etc/nginx/common/protect_add_header.conf;
@ -42,7 +66,7 @@ server {
}
# Admin Frontend
location /admin/ {
location /admin {
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection 'upgrade';