Commit e0013e28 authored by Simonas's avatar Simonas

Certificates added

parent dbf09688
server {
listen 80;
listen [::]:80;
server_name dev.biuro.lt;
location / {
rewrite ^ https://$host$request_uri? permanent;
}
location ^~ /.well-known {
allow all;
root /data/letsencrypt/;
}
}
......@@ -11,26 +11,36 @@ server {
allow all;
root /data/letsencrypt/;
}
}
server {
listen 80;
listen [::]:80;
server_name dev.biuro.lv;
location / {
rewrite ^ https://$host$request_uri? permanent;
}
location ^~ /.well-known {
allow all;
root /data/letsencrypt/;
}
}
server {
listen 80;
listen [::]:80;
server_name dev.biuro.ee;
location / {
rewrite ^ https://$host$request_uri? permanent;
}
# root /var/www/html;
# index index.php;
#
# access_log /var/log/nginx/access.log;
# error_log /var/log/nginx/error.log;
#
# location / {
# try_files $uri $uri/ /index.php?$args;
# }
# location ~ \.php$ {
# try_files $uri =404;
# fastcgi_split_path_info ^(.+\.php)(/.+)$;
# fastcgi_pass wordpress:9000;
# fastcgi_index index.php;
# include fastcgi_params;
# fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
# fastcgi_param PATH_INFO $fastcgi_path_info;
# }
location ^~ /.well-known {
allow all;
root /data/letsencrypt/;
}
}
server {
......@@ -38,7 +48,6 @@ server {
listen [::]:443 ssl http2;
server_name dev.biuro.lt;
# add_header Strict-Transport-Security "max-age=31536000" always;
add_header Strict-Transport-Security "max-age=31536000; includeSubdomains";
ssl_session_cache shared:SSL:20m;
......@@ -53,13 +62,55 @@ server {
resolver 8.8.8.8 8.8.4.4;
ssl_certificate /etc/letsencrypt/live/dev.biuro.lt/certificate.pem;
# ssl_certificate /etc/letsencrypt/live/dev.biuro.lt/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/dev.biuro.lt/privkey.pem;
ssl_trusted_certificate /etc/letsencrypt/live/dev.biuro.lt/ca-bundle.pem;
# ssl_trusted_certificate /etc/letsencrypt/live/dev.biuro.lt/chain.pem;
# ssl_certificate /etc/letsencrypt/live/dev.biuro.lt/cert.crt;
# ssl_certificate_key /etc/letsencrypt/live/dev.biuro.lt/key.pem;
# ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
# ssl_prefer_server_ciphers on;
# ssl_ciphers 'TLS-CHACHA20-POLY1305-SHA256:TLS-AES-256-GCM-SHA384:TLS-AES-128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256';
root /var/www/html;
index index.php;
access_log /var/log/nginx/access.log;
error_log /var/log/nginx/error.log;
location / {
try_files $uri $uri/ /index.php?$args;
}
location ~ \.php$ {
try_files $uri =404;
fastcgi_split_path_info ^(.+\.php)(/.+)$;
fastcgi_pass wordpress:9000;
fastcgi_index index.php;
include fastcgi_params;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
fastcgi_param PATH_INFO $fastcgi_path_info;
}
}
server {
listen 443 ssl http2;
listen [::]:443 ssl http2;
server_name dev.biuro.lv;
add_header Strict-Transport-Security "max-age=31536000; includeSubdomains";
ssl_session_cache shared:SSL:20m;
ssl_session_timeout 10m;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_prefer_server_ciphers on;
ssl_ciphers "ECDH+AESGCM:ECDH+AES256:ECDH+AES128:!ADH:!AECDH:!MD5;";
ssl_stapling on;
ssl_stapling_verify on;
resolver 8.8.8.8 8.8.4.4;
ssl_certificate /etc/letsencrypt/live/dev.biuro.lv/certificate.pem;
ssl_certificate_key /etc/letsencrypt/live/dev.biuro.lv/privkey.pem;
ssl_trusted_certificate /etc/letsencrypt/live/dev.biuro.lv/ca-bundle.pem;
# ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
# ssl_prefer_server_ciphers on;
......@@ -87,40 +138,49 @@ server {
}
server {
listen 443 ssl http2;
listen [::]:443 ssl http2;
server_name dev.biuro.ee;
add_header Strict-Transport-Security "max-age=31536000; includeSubdomains";
ssl_session_cache shared:SSL:20m;
ssl_session_timeout 10m;
#
#
#server {
# listen 80;
# listen [::]:80;
# server_name dev.biuro.lt;
#
# root /var/www/html;
# index index.php;
#
# access_log /var/log/nginx/access.log;
# error_log /var/log/nginx/error.log;
#
# location / {
# try_files $uri $uri/ /index.php?$args;
# }
#
# location ~ \.php$ {
# try_files $uri =404;
# fastcgi_split_path_info ^(.+\.php)(/.+)$;
# fastcgi_pass wordpress:9000;
# fastcgi_index index.php;
# include fastcgi_params;
# fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
# fastcgi_param PATH_INFO $fastcgi_path_info;
# }
#
# location / {
# rewrite ^ https://$host$request_uri? permanent;
# }
#
# location ^~ /.well-known {
# allow all;
# root /data/letsencrypt/;
# }
#}
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_prefer_server_ciphers on;
ssl_ciphers "ECDH+AESGCM:ECDH+AES256:ECDH+AES128:!ADH:!AECDH:!MD5;";
ssl_stapling on;
ssl_stapling_verify on;
resolver 8.8.8.8 8.8.4.4;
ssl_certificate /etc/letsencrypt/live/dev.biuro.ee/certificate.pem;
ssl_certificate_key /etc/letsencrypt/live/dev.biuro.ee/privkey.pem;
ssl_trusted_certificate /etc/letsencrypt/live/dev.biuro.ee/ca-bundle.pem;
# ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
# ssl_prefer_server_ciphers on;
# ssl_ciphers 'TLS-CHACHA20-POLY1305-SHA256:TLS-AES-256-GCM-SHA384:TLS-AES-128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256';
root /var/www/html;
index index.php;
access_log /var/log/nginx/access.log;
error_log /var/log/nginx/error.log;
location / {
try_files $uri $uri/ /index.php?$args;
}
location ~ \.php$ {
try_files $uri =404;
fastcgi_split_path_info ^(.+\.php)(/.+)$;
fastcgi_pass wordpress:9000;
fastcgi_index index.php;
include fastcgi_params;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
fastcgi_param PATH_INFO $fastcgi_path_info;
}
}
4,3
4,2
4,1
3,6
3,5
3,4
3,3
3,2
3,1
2,2
1,2
0,243
1,1
1,3
2,1
2,3
0,9
0,310
0,305
3,0
1,0
2,0
4,0
0,308
0,304
0,303
0,302
0,307
0,12
0,10
0,8
0,0
0,300
0,299
0,298
0,297
0,296
0,295
0,294
0,293
0,292
0,291
0,290
0,289
0,288
0,287
0,286
0,285
0,284
0,283
0,282
0,281
0,280
0,279
0,278
0,277
0,276
0,275
0,274
0,273
0,272
0,271
0,270
0,269
0,268
0,267
0,266
0,265
0,264
0,263
0,262
0,261
0,260
0,259
0,258
0,257
0,256
0,255
0,254
0,253
0,252
0,251
0,250
0,249
0,248
0,247
0,246
0,245
0,244
0,242
0,241
0,240
0,239
0,238
0,237
0,236
0,235
0,234
0,233
0,232
0,231
0,230
0,229
0,228
0,227
0,226
0,225
0,224
0,223
0,222
0,221
0,220
0,219
0,218
0,217
0,216
0,215
0,214
0,213
0,212
0,211
0,210
0,209
0,208
0,207
0,206
0,205
0,204
0,203
0,202
0,201
0,200
0,199
0,198
0,197
0,196
0,195
0,194
0,193
0,192
0,63
0,62
0,61
0,60
0,59
0,58
0,57
0,56
0,55
0,54
0,53
0,316
0,52
0,315
0,51
0,314
0,50
0,313
0,49
0,312
0,48
0,311
0,47
0,309
0,46
0,306
0,45
0,301
0,6
0,5
0,1
0,11
0,4
0,2
0,3
0,7
No preview for this file type
No preview for this file type
No preview for this file type
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment