changes

2024-05-03 07:53:25 +02:00
parent d84905acf0
commit 5bfaaf9c0b
4 changed files with 97 additions and 0 deletions
@@ -0,0 +1,49 @@
+server {
+  listen *:80;
+
+
+  server_name           pve.realm.local;
+
+
+  index  index.html index.htm index.php;
+  access_log            /var/log/nginx/pve.realm.local.access.log combined;
+  error_log             /var/log/nginx/pve.realm.local.error.log;
+
+  location / {
+    return 301 https://$server_name$request_uri;
+  }
+}
+
+server {
+  listen       *:443 ssl;
+
+
+  server_name  pve.realm.local;
+
+  ssl_certificate           /etc/nginx/ssl/certs/pve.realm.local/cert.pem;
+  ssl_certificate_key       /etc/nginx/ssl/certs/pve.realm.local/key.pem;
+  ssl_protocols             TLSv1.2;
+  ssl_ciphers               ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK;
+
+  index  index.html index.htm index.php;
+  access_log            /var/log/nginx/ssl-pve.realm.local.access.log combined;
+  error_log             /var/log/nginx/ssl-pve.realm.local.error.log;
+
+  client_max_body_size 10M;
+
+  location / {
+    proxy_pass            http://192.168.0.7:8006;
+
+    # These configuration options are required for WebSockets to work.
+    proxy_http_version 1.1;
+    proxy_set_header Upgrade $http_upgrade;
+    proxy_set_header Connection "upgrade";
+
+    proxy_redirect off;
+    proxy_set_header Host $host;
+    proxy_set_header X-Real-IP $remote_addr;
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_set_header X-Forwarded-Host $server_name;
+    add_header Referrer-Policy "strict-origin-when-cross-origin";
+  }
+}
@@ -0,0 +1 @@
+/etc/nginx/sites-available/pve.realm.local.conf
@@ -0,0 +1,20 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----
				`@@ -0,0 +1 @@`
				`/etc/nginx/sites-available/pve.realm.local.conf`