From 5071883c8774c7a25afcff5baa4cf95890dda98e Mon Sep 17 00:00:00 2001 From: sanojkl <62906783+sanojkl@users.noreply.github.com> Date: Mon, 24 Apr 2023 13:43:15 +0200 Subject: [PATCH 1/2] Create nginx.conf Add example conf for nginx reverse proxy that handles https --- nginx.conf | 39 +++++++++++++++++++++++++++++++++++++++ 1 file changed, 39 insertions(+) create mode 100644 nginx.conf diff --git a/nginx.conf b/nginx.conf new file mode 100644 index 0000000..9e6ea3a --- /dev/null +++ b/nginx.conf @@ -0,0 +1,39 @@ +# example nginx conf file that handels reverse proxy +# and enables https + +# place file in sites-available + + +server { + listen 80; + listen [::]:80; + server_name mydomain.tld; + return 301 https://mydomain.tld$request_uri; +} + + +server { + listen 443 ssl; + listen [::]:443 ssl; + # uses certificates from certbot + ssl_certificate /etc/letsencrypt/live/mydomain.tld/fullchain.pem; # managed by Certb$ + ssl_certificate_key /etc/letsencrypt/live/mydomain.tld/privkey.pem; # managed by Cer$ + + + # Add index.php to the list if you are using PHP + index index.html index.htm index.nginx-debian.html; + + server_name mydomain.tld; + + location / { + # only if you need a basic auth + # auth_basic "Administrator’s Area"; + # auth_basic_user_file /etc/nginx/.splitterpass; + proxy_pass http://mydomain.tld:9000; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header Upgrade $http_upgrade; + proxy_set_header Connection 'upgrade'; + proxy_set_header Host $host; + proxy_http_version 1.1; + } +} From 7880a776797fda68bd5d37728e4b206fdec1b951 Mon Sep 17 00:00:00 2001 From: sanojkl <62906783+sanojkl@users.noreply.github.com> Date: Mon, 24 Apr 2023 13:44:09 +0200 Subject: [PATCH 2/2] Update nginx.conf typos --- nginx.conf | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/nginx.conf b/nginx.conf index 9e6ea3a..57fa512 100644 --- a/nginx.conf +++ b/nginx.conf @@ -16,8 +16,8 @@ server { listen 443 ssl; listen [::]:443 ssl; # uses certificates from certbot - ssl_certificate /etc/letsencrypt/live/mydomain.tld/fullchain.pem; # managed by Certb$ - ssl_certificate_key /etc/letsencrypt/live/mydomain.tld/privkey.pem; # managed by Cer$ + ssl_certificate /etc/letsencrypt/live/mydomain.tld/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/mydomain.tld/privkey.pem; # Add index.php to the list if you are using PHP