diff --git a/nginx.conf b/nginx.conf index a12e904..416ce80 100644 --- a/nginx.conf +++ b/nginx.conf @@ -6,9 +6,6 @@ http { location / { proxy_pass http://certbot:80; } - # location / { - # return 301 https://$server_name:443$request_uri; - # } } # server { @@ -18,6 +15,24 @@ http { # return 301 https://adoptapet.ru/cats/; # } + server { + listen 443 ssl http2; + server_name general-gitea.duckdns.org; + + ssl_certificate /etc/letsencrypt/live/general-gitea.duckdns.org/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/general-gitea.duckdns.org/privkey.pem; + + ssl_protocols TLSv1.2 TLSv1.3; + ssl_ciphers HIGH:!aNULL:!MD5; + + location / { + proxy_pass http://gitea:3000/; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + } + } server { listen 443 ssl http2; server_name our-web.duckdns.org;