From 682426b38729e7c4ecb9ea7d548123b8dc08bf80 Mon Sep 17 00:00:00 2001
From: HypoxiE <kosmaer42@gmail.com>
Date: Wed, 27 Aug 2025 23:54:12 +0700
Subject: [PATCH] =?UTF-8?q?=D0=9F=D0=BE=D0=B4=D0=BD=D0=B8=D0=BC=D0=B0?=
 =?UTF-8?q?=D0=B5=D0=BC=20gitea?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 nginx.conf | 21 ++++++++++++++++++---
 1 file changed, 18 insertions(+), 3 deletions(-)

diff --git a/nginx.conf b/nginx.conf
index a12e904..416ce80 100644
--- a/nginx.conf
+++ b/nginx.conf
@@ -6,9 +6,6 @@ http {
 		location / {
 			proxy_pass http://certbot:80;
 		}
-		# location / {
-		# 	return 301 https://$server_name:443$request_uri;
-		# }
 	}
 
 	# server {
@@ -18,6 +15,24 @@ http {
 	# 	return 301 https://adoptapet.ru/cats/;
 	# }
 
+	server {
+		listen 443 ssl http2;
+		server_name general-gitea.duckdns.org;
+
+		ssl_certificate /etc/letsencrypt/live/general-gitea.duckdns.org/fullchain.pem;
+		ssl_certificate_key /etc/letsencrypt/live/general-gitea.duckdns.org/privkey.pem;
+
+		ssl_protocols TLSv1.2 TLSv1.3;
+		ssl_ciphers HIGH:!aNULL:!MD5;
+
+		location / {
+			proxy_pass http://gitea:3000/;
+			proxy_set_header Host $host;
+			proxy_set_header X-Real-IP $remote_addr;
+			proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+			proxy_set_header X-Forwarded-Proto $scheme;
+		}
+	}
 	server {
 		listen 443 ssl http2;
 		server_name our-web.duckdns.org;