ssl config

This commit is contained in:
ray 2019-02-25 23:09:57 +02:00
parent 10ea018e68
commit 607870c7c1
2 changed files with 22 additions and 2 deletions

View File

@ -1,6 +1,4 @@
server { server {
listen 80;
listen [::]80;
server_name marcleopold.isnet.uk; server_name marcleopold.isnet.uk;
@ -15,6 +13,14 @@ server {
proxy_set_header X-Forwarded-Proto $scheme; proxy_set_header X-Forwarded-Proto $scheme;
} }
listen [::]:443 ssl; # managed by Certbot
listen 443 ssl; # managed by Certbot
ssl_certificate /etc/letsencrypt/live/marcleopold.isnet.uk/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/marcleopold.isnet.uk/privkey.pem; # managed by Certbot
include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
} }
server { server {
@ -52,3 +58,17 @@ server {
server_name cms.marcleopold.isnet.uk; server_name cms.marcleopold.isnet.uk;
return 404; # managed by Certbot return 404; # managed by Certbot
} }
server {
if ($host = marcleopold.isnet.uk) {
return 301 https://$host$request_uri;
} # managed by Certbot
listen 80;
listen [::]80;
server_name marcleopold.isnet.uk;
return 404; # managed by Certbot
}

Binary file not shown.