diff options
| author | crupest <crupest@outlook.com> | 2022-11-20 15:27:20 +0800 |
|---|---|---|
| committer | crupest <crupest@outlook.com> | 2022-11-20 15:27:20 +0800 |
| commit | 6345504cfe8393a540ae9ce6ec9441eda7d5c43d (patch) | |
| tree | af8b18db5bdb540c589f36f090876d2b5eaaa43a /template | |
| parent | 598556d62e3653342c83a148b90c18cc16bedd40 (diff) | |
| download | crupest-6345504cfe8393a540ae9ce6ec9441eda7d5c43d.tar.gz crupest-6345504cfe8393a540ae9ce6ec9441eda7d5c43d.tar.bz2 crupest-6345504cfe8393a540ae9ce6ec9441eda7d5c43d.zip | |
Continue to fix nginx.
Diffstat (limited to 'template')
| -rw-r--r-- | template/nginx/forbid_unknown_domain.conf | 2 | ||||
| -rw-r--r-- | template/nginx/reverse-proxy.conf.template | 3 | ||||
| -rw-r--r-- | template/nginx/root.conf.template | 3 | ||||
| -rw-r--r-- | template/nginx/ssl.conf.template (renamed from template/nginx/ssl.conf) | 3 | ||||
| -rw-r--r-- | template/nginx/static-file.conf.template | 3 |
5 files changed, 3 insertions, 11 deletions
diff --git a/template/nginx/forbid_unknown_domain.conf b/template/nginx/forbid_unknown_domain.conf index ae96393..661a2b6 100644 --- a/template/nginx/forbid_unknown_domain.conf +++ b/template/nginx/forbid_unknown_domain.conf @@ -1,8 +1,6 @@ server { listen 80 default_server; listen [::]:80 default_server; - listen 443 ssl http2 default_server; - listen [::]:443 ssl http2 default_server; return 444; } diff --git a/template/nginx/reverse-proxy.conf.template b/template/nginx/reverse-proxy.conf.template index d7eebdf..3526471 100644 --- a/template/nginx/reverse-proxy.conf.template +++ b/template/nginx/reverse-proxy.conf.template @@ -7,9 +7,6 @@ server { listen [::]:443 ssl http2; server_name ${CRUPEST_NGINX_SUBDOMAIN}.${CRUPEST_DOMAIN}; - ssl_certificate /etc/letsencrypt/live/${CRUPEST_DOMAIN}/fullchain.pem; - ssl_certificate_key /etc/letsencrypt/live/${CRUPEST_DOMAIN}/privkey.pem; - location / { proxy_pass http://${CRUPEST_NGINX_UPSTREAM_NAME}; proxy_http_version 1.1; diff --git a/template/nginx/root.conf.template b/template/nginx/root.conf.template index a6992c7..8214bf7 100644 --- a/template/nginx/root.conf.template +++ b/template/nginx/root.conf.template @@ -3,9 +3,6 @@ server { listen [::]:443 ssl http2; server_name ${CRUPEST_DOMAIN}; - ssl_certificate /etc/letsencrypt/live/${CRUPEST_DOMAIN}/fullchain.pem; - ssl_certificate_key /etc/letsencrypt/live/${CRUPEST_DOMAIN}/privkey.pem; - root /srv/www; } diff --git a/template/nginx/ssl.conf b/template/nginx/ssl.conf.template index f2aadba..54205f1 100644 --- a/template/nginx/ssl.conf +++ b/template/nginx/ssl.conf.template @@ -4,6 +4,9 @@ # the up-to-date file that you will need to refer to when manually updating # this file. Contents are based on https://ssl-config.mozilla.org +ssl_certificate /etc/letsencrypt/live/${CRUPEST_DOMAIN}/fullchain.pem; +ssl_certificate_key /etc/letsencrypt/live/${CRUPEST_DOMAIN}/privkey.pem; + ssl_session_cache shared:le_nginx_SSL:10m; ssl_session_timeout 1440m; ssl_session_tickets off; diff --git a/template/nginx/static-file.conf.template b/template/nginx/static-file.conf.template index 1597d10..0ada7cd 100644 --- a/template/nginx/static-file.conf.template +++ b/template/nginx/static-file.conf.template @@ -3,9 +3,6 @@ server { listen [::]:443 ssl http2; server_name ${CRUPEST_NGINX_SUBDOMAIN}.${CRUPEST_DOMAIN}; - ssl_certificate /etc/letsencrypt/live/${CRUPEST_DOMAIN}/fullchain.pem; - ssl_certificate_key /etc/letsencrypt/live/${CRUPEST_DOMAIN}/privkey.pem; - root ${CRUPEST_NGINX_ROOT}; client_max_body_size 5G; |