diff --git a/nginx/sites-available/pve.realm.local.conf b/nginx/sites-available/pve.realm.local.conf new file mode 100644 index 00000000..96a959e7 --- /dev/null +++ b/nginx/sites-available/pve.realm.local.conf @@ -0,0 +1,49 @@ +server { + listen *:80; + + + server_name pve.realm.local; + + + index index.html index.htm index.php; + access_log /var/log/nginx/pve.realm.local.access.log combined; + error_log /var/log/nginx/pve.realm.local.error.log; + + location / { + return 301 https://$server_name$request_uri; + } +} + +server { + listen *:443 ssl; + + + server_name pve.realm.local; + + ssl_certificate /etc/nginx/ssl/certs/pve.realm.local/cert.pem; + ssl_certificate_key /etc/nginx/ssl/certs/pve.realm.local/key.pem; + ssl_protocols TLSv1.2; + ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK; + + index index.html index.htm index.php; + access_log /var/log/nginx/ssl-pve.realm.local.access.log combined; + error_log /var/log/nginx/ssl-pve.realm.local.error.log; + + client_max_body_size 10M; + + location / { + proxy_pass http://192.168.0.7:8006; + + # These configuration options are required for WebSockets to work. + proxy_http_version 1.1; + proxy_set_header Upgrade $http_upgrade; + proxy_set_header Connection "upgrade"; + + proxy_redirect off; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Host $server_name; + add_header Referrer-Policy "strict-origin-when-cross-origin"; + } +} diff --git a/nginx/sites-enabled/pve.realm.local.conf b/nginx/sites-enabled/pve.realm.local.conf new file mode 120000 index 00000000..b70e8231 --- /dev/null +++ b/nginx/sites-enabled/pve.realm.local.conf @@ -0,0 +1 @@ +/etc/nginx/sites-available/pve.realm.local.conf \ No newline at end of file diff --git a/nginx/ssl/certs/pve.realm.local/cert.pem b/nginx/ssl/certs/pve.realm.local/cert.pem new file mode 100644 index 00000000..9ea1f5c6 --- /dev/null +++ b/nginx/ssl/certs/pve.realm.local/cert.pem @@ -0,0 +1,20 @@ +-----BEGIN CERTIFICATE----- +MIIDODCCAiCgAwIBAgIITQG9rnhbSIgwDQYJKoZIhvcNAQELBQAwIDEeMBwGA1UE +AxMVbWluaWNhIHJvb3QgY2EgN2ViYWMyMB4XDTI0MDUwMzA1NTIxN1oXDTI2MDYw +MjA1NTIxN1owGjEYMBYGA1UEAxMPcHZlLnJlYWxtLmxvY2FsMIIBIjANBgkqhkiG +9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywGjLRTDqn1iG/BlH7zOtaxV+/OImMe9fZb8 +6tyOcP5Y2gKatsJlu4IGGj53xYqTLK6VrHn2rs4ZoQfonw3HzddWPq31C87TBvz4 +aiZngjgsNYg+d58NNjDY0xGasDjSOwwhtDe6vPpVUQKQIV0/d+wzntnzn3U4wzNa +qhAyTafsDs29ECcL1/aFyxiz5ALL+kf2yxr5yBM5J+8Silbey6pIOZmHHvHv8UMx +Mx0knkexYxHelZ0sXlGnp3DCZUOtVGY+Xckh3cK0BL9HPe8p+EIqntmHMqzXQcU5 +BypllJuAn98EVrymEg2oRjOVRge4DTeY0MNT38K2ZNWdTOF/9QIDAQABo3wwejAO +BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwG +A1UdEwEB/wQCMAAwHwYDVR0jBBgwFoAUC8krRWTlJvmi63tdQiwVmsFh+QIwGgYD +VR0RBBMwEYIPcHZlLnJlYWxtLmxvY2FsMA0GCSqGSIb3DQEBCwUAA4IBAQA+DJG1 +SEczMlCD8B7mCxPjJbPo3qS8lxj7SDvXibVLFkFNGnTJhhS4pRe4ZkQF4dgiYAtZ +DY0TXrQDcWUN/VOIjglU0NVg7MZ94cIe8dcvyQ8KhFSM1ho2fX7i/EFwxqzXiGyo +WvioIqu/k1k5VUTOA/4nCzOpcLWW6IkV3AcGsUvgf62T9fqM2wkY9p5UPw5U68DJ +dTkGY3x2IaCY/Bgo5r+SbLQMz+VvLYwnBqisjco/sGCATiePus0bvj/2Hi0Sa7Qk +ty9cKh+6xp3PRGj+0XCh8PdHlO5opBVOe2y6MIVlmTX8XfvlTyUi5iX/9+/EJSMe +5hDb3ypPw0Kyb0uw +-----END CERTIFICATE----- diff --git a/nginx/ssl/certs/pve.realm.local/key.pem b/nginx/ssl/certs/pve.realm.local/key.pem new file mode 100644 index 00000000..8e27464c --- /dev/null +++ b/nginx/ssl/certs/pve.realm.local/key.pem @@ -0,0 +1,27 @@ +-----BEGIN RSA PRIVATE KEY----- +MIIEpAIBAAKCAQEAywGjLRTDqn1iG/BlH7zOtaxV+/OImMe9fZb86tyOcP5Y2gKa +tsJlu4IGGj53xYqTLK6VrHn2rs4ZoQfonw3HzddWPq31C87TBvz4aiZngjgsNYg+ +d58NNjDY0xGasDjSOwwhtDe6vPpVUQKQIV0/d+wzntnzn3U4wzNaqhAyTafsDs29 +ECcL1/aFyxiz5ALL+kf2yxr5yBM5J+8Silbey6pIOZmHHvHv8UMxMx0knkexYxHe +lZ0sXlGnp3DCZUOtVGY+Xckh3cK0BL9HPe8p+EIqntmHMqzXQcU5BypllJuAn98E +VrymEg2oRjOVRge4DTeY0MNT38K2ZNWdTOF/9QIDAQABAoIBAQCAOw+MqWITLlIr +ncTysDvOLAbAOIvfHcRHMXmfDSR4oWEUjLKXoOHL+IzMRQs435ipj7oBkaTNtGgh +/LHmzjiYgF39B7sS81j/QAnWW13ktoDOa7oxq2kYAvDjGmqgx7OcEsSzZsRxHJuJ +qVnLiXBO2wecXsXxwoTRYH3zkHmF7NxneC10zQGiChi6M2dj4/UW4oPeHSw7HYsq +j68AT0fiwubddK7eXUO99dqL35zuNJ7uN0wSO032TVWXWLbh/8nRHuwV4qidXyoQ +2uil+HCKQk2F98eCJyiN7NYX9TrNrnaRagUAkldTFEdp0bCMFS2dhwkWPOiNe46s +I61p4x7dAoGBAPY3BxYwKeIm3oFVvV1zhyqTyrSkvbNFo602drUosorP45p2F4es +wbeX9VQz3ojxFr/WHYmnWObY0dydfRE4xbwyazbnDY2L79g4c0t636mybVLVHAG9 +knsPcJ96GvFCC3lPTDUNTaXoPHYWKf3r/6WhOGbGBLWeK7yu7kwsGE7LAoGBANMT +AlcrUeAHBCygxI+znVI3BFmTxZdxuMHvb8JilhjwLRnSNC6pKEXiYCJI1vJQ2RLt +Qb3YeMwmbJem0F+rjp8SQZgBEJHKSJsZxTlq23ctjc1dxYbUqRoAlwdJq8tNJM1g +nHdyAT212C5ScES6dfBuG5a1wfJNBGNtpbUKMtQ/AoGAb0dnmIukImZW4jWSJI52 +ZLPvRb2/TysGUt7uv+no5/wVblY5RES8OPIhGzFmPpZYJdPr/a746zzLfN5hDEuQ +cwKGmoXLBlJc0GiTE2YxeE0ARBO1WMQJVD0iNbHGQ4wKC4Xfd4rPsVBJI0XZLL5h +CMbY6vpMXpliQyD86shzJAkCgYEAzhawYVYtwhR3se9jHIAeamjHeYL8GWtzHwBe +2agSr9TJ5H1GcAzAAsQOY0tFfCEOYhl/6BJVl9cojkXVDKRgQ9a6buUTPZYJoE7g +L7izAkFbRBp7w7MeTQIodHgtIfp3pYPgIgwRRCSqKEhbz+9TOmb3zwY2kRM75qzn +b8W+bVcCgYA/hEck9iUAk5+crUInBJBQvYJ/ylUmw0WCXfOZz0k9A07N2DBjWQa1 +MCYKeLYKSyZ6jb6pfOy76SuokbGof4tu4/qpuK2//OJ6zs0ZPWeSVpsTfRkGyvgq +13vLsZEfJysc5eiG8vX+U4MqKnj+/jugvXtxM8YxfV/FAacfqz5uJA== +-----END RSA PRIVATE KEY-----