mirror of
https://github.com/schollz/cowyo.git
synced 2023-08-10 21:13:00 +03:00
Create README.md
Former-commit-id: 6ea0d59fccb3fa341ffd0cd90c75672f7cf80ef9 [formerly d4ed70bde4f0ca9c490b0ffa7e5caa09f673f468] [formerly 8867ae8d724359b3f3beab2e6d3039de38de223f [formerly 3296bdb20ebe37fb0747d9b349bdaa95accd2258 [formerly17c99343fc
]]] Former-commit-id: 14bdf63360f7b0f5a958af1dd36fcba9171de4c8 [formerly 661dc438bb508e5367c5c7afd5aa21e42b314997] Former-commit-id: cb37176a827262c5e213d7795b4b9db6c74dc889 Former-commit-id:c137f60022
This commit is contained in:
parent
79e1eba8ad
commit
b97c8bb945
62
letsencrypt/README.md
Normal file
62
letsencrypt/README.md
Normal file
@ -0,0 +1,62 @@
|
|||||||
|
To use letsencrypt follow these steps:
|
||||||
|
|
||||||
|
```
|
||||||
|
git clone https://github.com/letsencrypt/letsencrypt
|
||||||
|
cd letsencrypt
|
||||||
|
sudo ./letsencrypt-auto certonly --standalone --email youremail@somewhere.com -d yourserver.com
|
||||||
|
```
|
||||||
|
|
||||||
|
And then replace the NGINX file in `../install` with the following:
|
||||||
|
|
||||||
|
```
|
||||||
|
server {
|
||||||
|
listen 80;
|
||||||
|
server_name ADDRESS;
|
||||||
|
rewrite ^ https://$server_name$request_uri? permanent;
|
||||||
|
}
|
||||||
|
|
||||||
|
server {
|
||||||
|
# SERVER BLOCK FOR ADDRESS
|
||||||
|
listen 443 ssl;
|
||||||
|
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
|
||||||
|
ssl_certificate /etc/letsencrypt/live/ADDRESS/cert.pem;
|
||||||
|
ssl_certificate_key /etc/letsencrypt/live/ADDRESS/privkey.pem;
|
||||||
|
|
||||||
|
access_log /etc/nginx/logs/access-ADDRESS.log;
|
||||||
|
error_log /etc/nginx/logs/error-ADDRESS.log info;
|
||||||
|
root CUR_DIR;
|
||||||
|
server_name ADDRESS;
|
||||||
|
|
||||||
|
# Media: images, icons, video, audio, HTC
|
||||||
|
location ~* \.(?:jpg|jpeg|gif|png|ico|cur|gz|svg|svgz|mp4|ogg|ogv|webm|htc)$ {
|
||||||
|
expires 1M;
|
||||||
|
access_log off;
|
||||||
|
add_header Cache-Control "public";
|
||||||
|
}
|
||||||
|
|
||||||
|
# CSS and Javascript
|
||||||
|
location ~* \.(?:css|js)$ {
|
||||||
|
expires 1y;
|
||||||
|
access_log off;
|
||||||
|
add_header Cache-Control "public";
|
||||||
|
}
|
||||||
|
|
||||||
|
location ^~ /static {
|
||||||
|
try_files $uri $uri/ =404;
|
||||||
|
}
|
||||||
|
|
||||||
|
location ~ ^/ {
|
||||||
|
proxy_set_header X-Real-IP $remote_addr;
|
||||||
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||||
|
proxy_set_header Host $http_host;
|
||||||
|
proxy_set_header X-NginX-Proxy true;
|
||||||
|
|
||||||
|
proxy_pass https://127.0.0.1:PORT;
|
||||||
|
proxy_redirect off;
|
||||||
|
|
||||||
|
proxy_http_version 1.1;
|
||||||
|
proxy_set_header Upgrade $http_upgrade;
|
||||||
|
proxy_set_header Connection "upgrade";
|
||||||
|
}
|
||||||
|
}
|
||||||
|
```
|
Loading…
Reference in New Issue
Block a user