Administrace komentářů

nano /etc/nginx/sites-available/data01.devaine.cz.conf
server {
        listen   80;
        server_name  data01.devaine.cz;
        return 301 https://$host$request_uri;

        access_log  /var/log/nginx/data01.devaine.cz.proxy.log upstreamlog;
        access_log  /var/log/nginx/data01.devaine.cz.access.log;
        error_log /var/log/nginx/data01.devaine.cz.error.log;

        location / {
                proxy_pass         http://192.168.1.1;
                proxy_redirect     off;
                include /etc/nginx/custom/proxy_base.conf;
        }
}

server {
    listen 443 ssl http2;
    server_name  data01.devaine.cz;

        access_log  /var/log/nginx/data01.devaine.cz.proxy.log upstreamlog;
        access_log  /var/log/nginx/data01.devaine.cz.access.log;
        error_log /var/log/nginx/data01.devaine.cz.error.log;

        location / {
                proxy_pass         http://192.168.1.1;
                proxy_redirect     off;
                include /etc/nginx/custom/proxy_base.conf;

        }


        include /etc/nginx/ssl/ssl-global.conf;

}


nano /etc/nginx/ssl/ssl-global.conf
ssl_certificate  /etc/nginx/ssl/wildcard.devaine.cz.cer;
ssl_certificate_key  /etc/nginx/ssl/wildcard.devaine.cz.pem;

nano /etc/nginx/custom/proxy_base.conf
proxy_set_header   Host             $host;
proxy_set_header   X-Real-IP        $remote_addr;
proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
proxy_max_temp_file_size 0;

# for websocket working :
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_http_version 1.1;


# This is necessary to pass the correct IP to be hashed
real_ip_header X-Real-IP;

client_max_body_size       100m;
client_body_buffer_size    128k;

proxy_connect_timeout      30;
proxy_send_timeout         20m;
proxy_read_timeout         20m;

proxy_buffer_size          4k;
proxy_buffers              4 32k;
proxy_busy_buffers_size    64k;
proxy_temp_file_write_size 64k;

# vytvoříme symlink, aby nginx viděl nové nastavení
ln -s /etc/nginx/sites-available/data01.devaine.cz.conf /etc/nginx/sites-enabled/data01.devaine.cz.conf

# otestujeme si konfiguraci :
nginx -t

# reloadneme
systemctl reload nginx