diff --git a/nginx.conf b/nginx.conf index 2f0ea3c..1f8de70 100644 --- a/nginx.conf +++ b/nginx.conf @@ -2,41 +2,10 @@ events {} http { server { listen 80; - server_name hypoxie-v-web-pannel.duckdns.org; + server_name j-v-web-panel.duckdns.org andrey-v-web-panel.duckdns.org hypoxie-v-web-panel.duckdns.org; - location / { - proxy_pass http://hypoxie-3x-ui:2053/; - proxy_set_header Host $host; - proxy_set_header X-Real-IP $remote_addr; - proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; - proxy_set_header X-Forwarded-Proto $scheme; - } - } - - server { - listen 80; - server_name j-v-web-panel.duckdns.org; - - location / { - proxy_pass http://jorj-3x-ui:2053/; - proxy_set_header Host $host; - proxy_set_header X-Real-IP $remote_addr; - proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; - proxy_set_header X-Forwarded-Proto $scheme; - } - } - - server { - listen 80; - server_name andrey-v-web-panel.duckdns.org; - - location / { - proxy_pass http://jorj-3x-ui:2053/; - proxy_set_header Host $host; - proxy_set_header X-Real-IP $remote_addr; - proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; - proxy_set_header X-Forwarded-Proto $scheme; - } + # Автоматический редирект на HTTPS + return 301 https://$host$request_uri; } server { @@ -51,4 +20,59 @@ http { return 301 https://adoptapet.ru/cats/; } -} + + server { + listen 443 ssl http2; + server_name hypoxie-v-web-panel.duckdns.org; + + ssl_certificate /etc/letsencrypt/live/hypoxie-v-web-panel.duckdns.org/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/hypoxie-v-web-panel.duckdns.org/privkey.pem; + + ssl_protocols TLSv1.2 TLSv1.3; + ssl_ciphers HIGH:!aNULL:!MD5; + + location / { + proxy_pass http://hypoxie-3x-ui:2053/; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + } + } + server { + listen 443 ssl http2; + server_name j-v-web-panel.duckdns.org; + + ssl_certificate /etc/letsencrypt/live/j-v-web-panel.duckdns.org/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/j-v-web-panel.duckdns.org/privkey.pem; + + ssl_protocols TLSv1.2 TLSv1.3; + ssl_prefer_server_ciphers on; + + location / { + proxy_pass http://jorj-3x-ui:2053/; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + } + } + server { + listen 443 ssl http2; + server_name andrey-v-web-panel.duckdns.org; + + ssl_certificate /etc/letsencrypt/live/andrey-v-web-panel.duckdns.org/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/andrey-v-web-panel.duckdns.org/privkey.pem; + + ssl_protocols TLSv1.2 TLSv1.3; + ssl_prefer_server_ciphers on; + + location / { + proxy_pass http://jorj-3x-ui:2053/; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + } + } +} \ No newline at end of file