33 lines
727 B
Plaintext
33 lines
727 B
Plaintext
server {
|
|
set $forward_scheme <<PROXY_SCHEME>>;
|
|
set $server "<<PROXY_IP>>";
|
|
set $port <<PROXY_PORT>>;
|
|
|
|
listen 80;
|
|
listen 443 ssl;
|
|
http2 on;
|
|
|
|
server_name <<SERVER_NAME>>;
|
|
|
|
<<SECURE>>
|
|
|
|
include conf.d/include/letsencrypt-acme-challenge.conf;
|
|
include conf.d/include/ssl-ciphers.conf;
|
|
#ssl_certificate <<NM_CERTPATH>>/live/<<MAIN_SITE>>/fullchain.pem;
|
|
#ssl_certificate_key <<NM_CERTPATH>>/live/<<MAIN_SITE>>/privkey.pem;
|
|
|
|
access_log /var/log/nginx/<<MAIN_SITE>>.proxy.log proxy;
|
|
error_log /var/log/nginx/<<MAIN_SITE>>.error.log warn;
|
|
|
|
<<EXPLOITS>>
|
|
<<WEBSOCKET>>
|
|
<<HSTS>>
|
|
|
|
location / {
|
|
<<WEBSOCKET>>
|
|
<<HSTS>>
|
|
include conf.d/include/force-ssl.conf;
|
|
include conf.d/include/proxy.conf;
|
|
}
|
|
}
|