Administrace komentářů

server {
        listen   80;
        server_name  domena1.com;
        # přesměrování na https
        return 301 https://$host$request_uri;

        access_log  /var/log/nginx/domena1.com.proxy.log upstreamlog;
        access_log  /var/log/nginx/domena1.com.access.log;
        error_log /var/log/nginx/domena1.com.error.log;

        location / {
                proxy_pass         http://192.168.1.1;
                proxy_redirect     off;
                include /etc/nginx/custom/proxy_base.conf;
        }
}

server {
    listen 443 ssl http2;
    server_name  domena1.com;

        access_log  /var/log/nginx/domena1.com.proxy.log upstreamlog;
        access_log  /var/log/nginx/domena1.com.access.log;
        error_log /var/log/nginx/domena1.com.error.log;

        location / {
                proxy_pass         https://192.168.1.1;
                proxy_redirect     off;
                #proxy_ssl_session_reuse on;
                #proxy_ssl_verify off;
                include /etc/nginx/custom/proxy_base.conf;

        }

     # nastavení SSL v separé souboru
     include /etc/nginx/ssl/ssl.conf;

     # nastavení certifikátu :
     ssl_certificate  /etc/nginx/ssl/domena1.com-cert-intermediate.pem;
     ssl_certificate_key  /etc/nginx/ssl/domena1.com-private.key;

}

proxy_set_header   Host             $host;
proxy_set_header   X-Real-IP        $remote_addr;
proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
proxy_max_temp_file_size 0;

# for websocket working :
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_http_version 1.1;


# This is necessary to pass the correct IP to be hashed
real_ip_header X-Real-IP;

client_max_body_size       100m;
client_body_buffer_size    128k;

proxy_connect_timeout      30;
proxy_send_timeout         20m;
proxy_read_timeout         20m;

proxy_buffer_size          4k;
proxy_buffers              4 32k;
proxy_busy_buffers_size    64k;
proxy_temp_file_write_size 64k;

# nastavení SSL :
ssl  on;
ssl_session_timeout  5m;
ssl_protocols TLSv1.2;
ssl_prefer_server_ciphers   on;
ssl_session_cache shared:SSL:10m;
ssl_dhparam /etc/nginx/ssl/dhparam.pem;

ssl_ciphers "ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256";