tradewind/nginx-conf
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

#update template

Browse Source
This commit is contained in:
tradewind
2024-06-25 11:44:07 +08:00
parent 2dfb95af7e
commit 1b6f0402aa
22 changed files with 503 additions and 428 deletions
Download Patch File Download Diff File Expand all files Collapse all files

48
sites-available/tr
View File

@ -1,8 +1,23 @@
# generated 2024-06-16, Mozilla Guideline v5.7, nginx 1.18.0, OpenSSL 3.0.2, modern configuration
# https://ssl-config.mozilla.org/#server=nginx&version=1.18.0&config=modern&openssl=3.0.2&guideline=5.7
server {
listen 80 default_server;
listen [::]:80 default_server;
server_name tr.tradewind.vip;
location / {
return 301 https://$host$request_uri;
}
}
server {
listen 443 ssl http2;
listen [::]:443 ssl http2;
server_name tr.tradewind.vip;
location / {
resolver 223.5.5.5;
set $router "router.tradewind.vip";
proxy_set_header Host $host;
proxy_redirect off;
@ -11,23 +26,20 @@ server {
proxy_pass http://$router:49091;
}
listen 443 ssl; # managed by Certbot
ssl_certificate /etc/letsencrypt/live/tradewind.vip/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/tradewind.vip/privkey.pem; # managed by Certbot
include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
ssl_certificate /etc/letsencrypt/live/tradewind.vip/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/tradewind.vip/privkey.pem;
ssl_session_timeout 1d;
ssl_session_cache shared:MozSSL:10m; # about 40000 sessions
ssl_session_tickets off;
# modern configuration
ssl_protocols TLSv1.3;
ssl_prefer_server_ciphers off;
# HSTS (ngx_http_headers_module is required) (63072000 seconds)
add_header Strict-Transport-Security "max-age=63072000" always;
# replace with the IP address of your resolver
resolver 223.5.5.5;
}
server {
if ($host = tr.tradewind.vip) {
return 301 https://$host$request_uri;
} # managed by Certbot
listen 80;
server_name tr.tradewind.vip;
return 404; # managed by Certbot
}