the-nine-worlds/loki
Archived
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Regenerate certificates without wiki

Browse Source
This commit is contained in:
Wojciech Kozlowski 2019-12-15 10:58:56 +00:00
parent ff2ce6dad9
commit 64ac70f1d6
6 changed files with 41 additions and 20 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
proxy/nginx-conf.d/cloud.wojciechkozlowski.eu.conf
View File

@ -16,6 +16,10 @@ server {
listen 443 ssl;
server_name cloud.wojciechkozlowski.eu;
ssl_certificate /etc/letsencrypt/live/cloud.wojciechkozlowski.eu/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/cloud.wojciechkozlowski.eu/privkey.pem;
ssl_trusted_certificate /etc/letsencrypt/live/cloud.wojciechkozlowski.eu/chain.pem;
client_max_body_size 10G; # 0=unlimited - set max upload size
location / {

4
proxy/nginx-conf.d/gitlab.wojciechkozlowski.eu.conf
View File

@ -16,6 +16,10 @@ server {
listen 443 ssl;
server_name gitlab.wojciechkozlowski.eu;
ssl_certificate /etc/letsencrypt/live/gitlab.wojciechkozlowski.eu/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/gitlab.wojciechkozlowski.eu/privkey.pem;
ssl_trusted_certificate /etc/letsencrypt/live/gitlab.wojciechkozlowski.eu/chain.pem;
client_max_body_size 10G; # 0=unlimited - set max upload size
location / {

4
proxy/nginx-conf.d/registry.wojciechkozlowski.eu.conf
View File

@ -16,6 +16,10 @@ server {
listen 443 ssl;
server_name registry.wojciechkozlowski.eu;
ssl_certificate /etc/letsencrypt/live/registry.wojciechkozlowski.eu/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/registry.wojciechkozlowski.eu/privkey.pem;
ssl_trusted_certificate /etc/letsencrypt/live/registry.wojciechkozlowski.eu/chain.pem;
client_max_body_size 10G; # 0=unlimited - set max upload size
location / {

9
proxy/nginx-conf.d/wiki.wojciechkozlowski.eu.conf
View File

@ -1,9 +0,0 @@
server {
listen 80;
server_name wiki.wojciechkozlowski.eu;
location ^~ /.well-known {
allow all;
root /var/www/html;
}
}

28
proxy/nginx-conf.d/wojciechkozlowski.eu.conf
View File

@ -14,7 +14,33 @@ server {
server {
listen 443 ssl;
server_name wojciechkozlowski.eu www.wojciechkozlowski.eu;
server_name wojciechkozlowski.eu;
ssl_certificate /etc/letsencrypt/live/wojciechkozlowski.eu/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/wojciechkozlowski.eu/privkey.pem;
ssl_trusted_certificate /etc/letsencrypt/live/wojciechkozlowski.eu/chain.pem;
location / {
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $remote_addr;
proxy_set_header Host $host;
proxy_pass http://html;
}
error_page 500 502 503 504 /50x.html;
location = /50x.html {
root /usr/share/nginx/html;
}
}
server {
listen 443 ssl;
server_name www.wojciechkozlowski.eu;
ssl_certificate /etc/letsencrypt/live/www.wojciechkozlowski.eu/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/www.wojciechkozlowski.eu/privkey.pem;
ssl_trusted_certificate /etc/letsencrypt/live/www.wojciechkozlowski.eu/chain.pem;
location / {
proxy_set_header X-Real-IP $remote_addr;

10
proxy/nginx.conf
View File

@ -25,23 +25,15 @@ http {
#gzip on;
ssl_certificate /etc/letsencrypt/live/wojciechkozlowski.eu/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/wojciechkozlowski.eu/privkey.pem;
ssl_session_cache shared:SSL:20m;
ssl_session_timeout 60m;
ssl_prefer_server_ciphers on;
ssl_ciphers ECDH+AESGCM:ECDH+AES256:ECDH+AES128:DHE+AES128:!ADH:!AECDH:!MD5;
ssl_dhparam /etc/nginx/cert/dhparam.pem;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_stapling on;
ssl_stapling_verify on;
ssl_trusted_certificate /etc/letsencrypt/live/wojciechkozlowski.eu/chain.pem;
resolver 208.67.222.222 208.67.220.220;
add_header Strict-Transport-Security "max-age=31536000" always;