s434730/RandomSec
3
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

add ssl

Browse Source
This commit is contained in:
prance 2022-01-29 19:23:36 +01:00
parent 277513d814
commit 1a1588ee79
2 changed files with 18 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
MUOR/MUOR/configs/muor_after_location_block.conf
View File

@ -4,12 +4,15 @@
}
}
# ssl_certificate_key /ssl/private.pem;
# ssl_certificate /ssl/certs.pem;
ssl_certificate /etc/letsencrypt/live/randomsec.projektstudencki.pl/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/randomsec.projektstudencki.pl/privkey.pem; # managed by Certbot
include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
# ssl_protocols TLSv1.2;
# ssl_ciphers 'ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256';
# ssl_prefer_server_ciphers on;
ssl_protocols TLSv1.2;
ssl_ciphers 'ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256';
ssl_prefer_server_ciphers on;
# add_header Strict-Transport-Security max-age=31536000;
}

17
MUOR/MUOR/configs/muor_before_location_block.conf
View File

@ -9,17 +9,20 @@ upstream django {
server localhost:8080;
}
# server {
# listen 80 reuseport;
# server_name randomsec.projektstudencki.pl;
# return 301 https://randomsec.projektstudencki.pl;
# }
server {
if ($host = randomsec.projektstudencki.pl) {
return 301 https://$host$request_uri;
}
listen 80 reuseport;
server_name randomsec.projektstudencki.pl
charset utf-8;
return 404;
}
# configuration of the server
server {
# the port your site will be served on
# listen 443 ssl http2 reuseport; #TODO change to 443
listen 80 reuseport;
listen 443 ssl http2 reuseport;
# the domain name it will serve for
server_name randomsec.projektstudencki.pl
charset utf-8;