arti24
/
proxy-nginx
3
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

removing http from https-arti24.eu.conf

This commit is contained in:
Artur Kuś 2025-08-18 17:02:16 +02:00
parent a31399f32f
commit cb7737b16e
1 changed files with 42 additions and 44 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

80
nginx-config/https/https-arti24-eu.conf
View File

@ -1,49 +1,47 @@
http { proxy_cache_path /var/cache/nginx levels=1:2 keys_zone=img_cache:100m inactive=24h use_temp_path=off;
proxy_cache_path /var/cache/nginx levels=1:2 keys_zone=img_cache:100m inactive=24h use_temp_path=off;
server { server {
listen 443 ssl http2; listen 443 ssl http2;
server_name arti24.eu; server_name arti24.eu;
server_tokens off; server_tokens off;
ssl_certificate /letsencrypt/live/arti24.eu/fullchain.pem; ssl_certificate /letsencrypt/live/arti24.eu/fullchain.pem;
ssl_certificate_key /letsencrypt/live/arti24.eu/privkey.pem; ssl_certificate_key /letsencrypt/live/arti24.eu/privkey.pem;
ssl_protocols TLSv1.2 TLSv1.3; ssl_protocols TLSv1.2 TLSv1.3;
ssl_ciphers 'ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384'; ssl_ciphers 'ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384';
ssl_prefer_server_ciphers on; ssl_prefer_server_ciphers on;
ssl_session_cache shared:SSL:50m; ssl_session_cache shared:SSL:50m;
ssl_session_timeout 1d; ssl_session_timeout 1d;
ssl_session_tickets off; ssl_session_tickets off;
# Nagłówki bezpieczeństwa # Nagłówki bezpieczeństwa
add_header X-Frame-Options "SAMEORIGIN" always; add_header X-Frame-Options "SAMEORIGIN" always;
add_header X-Content-Type-Options "nosniff" always; add_header X-Content-Type-Options "nosniff" always;
add_header Referrer-Policy "strict-origin-when-cross-origin" always; add_header Referrer-Policy "strict-origin-when-cross-origin" always;
location / { location / {
limit_req zone=ip_limit burst=20 nodelay; limit_req zone=ip_limit burst=20 nodelay;
proxy_pass http://arti24-container:3002; proxy_pass http://arti24-container:3002;
proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme; proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header Host $host; proxy_set_header Host $host;
proxy_set_header X-Forwarded-Host $host; proxy_set_header X-Forwarded-Host $host;
proxy_set_header X-Forwarded-Port $server_port; proxy_set_header X-Forwarded-Port $server_port;
} }
location ~ ^/(pictures|obrazki)/ { location ~ ^/(pictures|obrazki)/ {
proxy_pass http://arti24-container:3002; proxy_pass http://arti24-container:3002;
proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme; proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header Host $host; proxy_set_header Host $host;
proxy_cache img_cache; proxy_cache img_cache;
proxy_cache_key "$scheme://$host$request_uri"; proxy_cache_key "$scheme://$host$request_uri";
proxy_cache_valid 200 301 302 24h; proxy_cache_valid 200 301 302 24h;
proxy_cache_valid 404 1m; proxy_cache_valid 404 1m;
proxy_cache_use_stale error timeout updating; proxy_cache_use_stale error timeout updating;
add_header X-Cache-Status $upstream_cache_status; add_header X-Cache-Status $upstream_cache_status;
}
} }
} }