Hay1tsme/artemis
30
52
Fork 48
Code Issues 5 Pull Requests 1 Packages Projects Releases Wiki Activity

update nginx example config

Browse Source
This commit is contained in:
Hay1tsme
2023-11-05 21:25:55 -05:00
parent 59e92268af
commit 701952ed9a
1 changed files with 4 additions and 27 deletions
Download Patch File Download Diff File Expand all files Collapse all files

31
example_config/nginx_example.conf
View File

@ -24,8 +24,7 @@ server {
# SSL titles, comment out if you don't plan on accepting SSL titles # SSL titles, comment out if you don't plan on accepting SSL titles
server { server {
listen 443 ssl default_server; listen 443 ssl;
listen [::]:443 ssl default_server;
server_name your.hostname.here; server_name your.hostname.here;
ssl_certificate /path/to/cert/title.crt; ssl_certificate /path/to/cert/title.crt;
@ -55,7 +54,7 @@ server {
ssl_session_tickets off; ssl_session_tickets off;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3; ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
ssl_ciphers "ALL:@SECLEVEL=1"; ssl_ciphers "ALL:@SECLEVEL=0";
ssl_prefer_server_ciphers off; ssl_prefer_server_ciphers off;
location / { location / {
@ -75,7 +74,7 @@ server {
ssl_session_tickets off; ssl_session_tickets off;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3; ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
ssl_ciphers "ALL:@SECLEVEL=1"; ssl_ciphers "ALL:@SECLEVEL=0";
ssl_prefer_server_ciphers off; ssl_prefer_server_ciphers off;
location / { location / {
@ -85,28 +84,6 @@ server {
} }
} }
# CXB, comment this out if you don't plan on serving crossbeats.
server {
listen 443 ssl;
server_name cxb.hostname.here;
ssl_certificate /path/to/cert/cxb.pem;
ssl_certificate_key /path/to/cert/cxb.key;
ssl_session_timeout 1d;
ssl_session_cache shared:MozSSL:10m;
ssl_session_tickets off;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
ssl_ciphers "ALL:@SECLEVEL=1";
ssl_prefer_server_ciphers off;
location / {
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_pass_request_headers on;
proxy_pass http://localhost:8080/SDBT/104/;
}
}
# Frontend, set to redirect to HTTPS. Comment out if you don't intend to use the frontend # Frontend, set to redirect to HTTPS. Comment out if you don't intend to use the frontend
server { server {
listen 80; listen 80;
@ -143,4 +120,4 @@ server {
proxy_pass_request_headers on; proxy_pass_request_headers on;
proxy_pass http://localhost:8090/; proxy_pass http://localhost:8090/;
} }
} }