From 7cd1fb351826009767f941e826a4c05be6b394e2 Mon Sep 17 00:00:00 2001 From: HypoxiE Date: Tue, 26 Aug 2025 18:44:19 +0700 Subject: [PATCH] =?UTF-8?q?=D0=9F=D0=B5=D1=80=D0=B5=D0=BD=D0=BE=D1=81=20?= =?UTF-8?q?=D0=BD=D0=B0=20https?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- nginx.conf | 94 ++++++++++++++++++++++++++++++++++-------------------- 1 file changed, 59 insertions(+), 35 deletions(-) diff --git a/nginx.conf b/nginx.conf index 2f0ea3c..1f8de70 100644 --- a/nginx.conf +++ b/nginx.conf @@ -2,41 +2,10 @@ events {} http { server { listen 80; - server_name hypoxie-v-web-pannel.duckdns.org; + server_name j-v-web-panel.duckdns.org andrey-v-web-panel.duckdns.org hypoxie-v-web-panel.duckdns.org; - location / { - proxy_pass http://hypoxie-3x-ui:2053/; - proxy_set_header Host $host; - proxy_set_header X-Real-IP $remote_addr; - proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; - proxy_set_header X-Forwarded-Proto $scheme; - } - } - - server { - listen 80; - server_name j-v-web-panel.duckdns.org; - - location / { - proxy_pass http://jorj-3x-ui:2053/; - proxy_set_header Host $host; - proxy_set_header X-Real-IP $remote_addr; - proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; - proxy_set_header X-Forwarded-Proto $scheme; - } - } - - server { - listen 80; - server_name andrey-v-web-panel.duckdns.org; - - location / { - proxy_pass http://jorj-3x-ui:2053/; - proxy_set_header Host $host; - proxy_set_header X-Real-IP $remote_addr; - proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; - proxy_set_header X-Forwarded-Proto $scheme; - } + # Автоматический редирект на HTTPS + return 301 https://$host$request_uri; } server { @@ -51,4 +20,59 @@ http { return 301 https://adoptapet.ru/cats/; } -} + + server { + listen 443 ssl http2; + server_name hypoxie-v-web-panel.duckdns.org; + + ssl_certificate /etc/letsencrypt/live/hypoxie-v-web-panel.duckdns.org/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/hypoxie-v-web-panel.duckdns.org/privkey.pem; + + ssl_protocols TLSv1.2 TLSv1.3; + ssl_ciphers HIGH:!aNULL:!MD5; + + location / { + proxy_pass http://hypoxie-3x-ui:2053/; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + } + } + server { + listen 443 ssl http2; + server_name j-v-web-panel.duckdns.org; + + ssl_certificate /etc/letsencrypt/live/j-v-web-panel.duckdns.org/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/j-v-web-panel.duckdns.org/privkey.pem; + + ssl_protocols TLSv1.2 TLSv1.3; + ssl_prefer_server_ciphers on; + + location / { + proxy_pass http://jorj-3x-ui:2053/; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + } + } + server { + listen 443 ssl http2; + server_name andrey-v-web-panel.duckdns.org; + + ssl_certificate /etc/letsencrypt/live/andrey-v-web-panel.duckdns.org/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/andrey-v-web-panel.duckdns.org/privkey.pem; + + ssl_protocols TLSv1.2 TLSv1.3; + ssl_prefer_server_ciphers on; + + location / { + proxy_pass http://jorj-3x-ui:2053/; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + } + } +} \ No newline at end of file