diff --git a/deploy-this/lets-encrypt/lets-encrypt-create-cert.jenkinsfile b/deploy-this/lets-encrypt/lets-encrypt-create-cert.jenkinsfile index 788b6d3..e7e0f7f 100755 --- a/deploy-this/lets-encrypt/lets-encrypt-create-cert.jenkinsfile +++ b/deploy-this/lets-encrypt/lets-encrypt-create-cert.jenkinsfile @@ -13,7 +13,8 @@ def domainsToCert = [ [ false, "artiks.tk", "www", "mail", "api", "angular", "bodypainter", "themself","arti24" ], [ false, "arti24.eu", "www", "api", "angular", "ai", "job-finder", "zaklik", "plecianki"], [ false, "katb.pl", "www"], - [ false, "kursy.kopama.pl"] + [ false, "kursy.kopama.pl"], + [ false, "statistic.kopama.pl"] ] diff --git a/nginx-config/https/statistic.kopama.pl.conf b/nginx-config/https/statistic.kopama.pl.conf new file mode 100644 index 0000000..d5808e8 --- /dev/null +++ b/nginx-config/https/statistic.kopama.pl.conf @@ -0,0 +1,28 @@ +server { + + listen 443 ssl; + server_name statistic.kopama.pl; + + server_tokens off; + + ssl_certificate /letsencrypt/live/statistic.kopama.pl/fullchain.pem; + ssl_certificate_key /letsencrypt/live/statistic.kopama.pl/privkey.pem; + + ssl_protocols TLSv1.2 TLSv1.3; + ssl_ciphers HIGH:!aNULL:!MD5; + + location / { + # Ograniczenie liczby żądań + limit_req zone=ip_limit burst=20 nodelay; + + proxy_pass http://arti24-container:3232; + + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + proxy_set_header Host $host; + proxy_set_header X-Forwarded-Host $host; + proxy_set_header X-Forwarded-Port $server_port; + } + +} \ No newline at end of file