+kursy.kopama.pl

deploy-this/lets-encrypt/lets-encrypt-create-cert.jenkinsfile

@@ -12,7 +12,9 @@ def domainsToCert = [
     [ false, 'themself.eu', "www", "mail", "stat", "massage", "driving", "kopama" ],
     [ false, "artiks.tk", "www", "mail", "api", "angular",  "bodypainter", "themself","arti24" ],
     [ false, "arti24.eu", "www",  "api", "angular",  "ai",  "job-finder", "zaklik", "plecianki"],
-    [ false, "katb.pl", "www"]
+    [ false, "katb.pl", "www"],
+    [ false, "kursy.kopama.pl"]
+
 ]
 
 def createCert(domains) {

nginx-config/https/kursy.kopama.pl.conf

@@ -0,0 +1,49 @@
+server {
+
+  listen 443 ssl;
+  server_name kursy.kopama.pl www.kursy.kopama.pl;
+  
+  server_tokens off; 
+
+  ssl_certificate      /letsencrypt/live/kursy.kopama.pl/fullchain.pem;
+  ssl_certificate_key  /letsencrypt/live/kursy.kopama.pl/privkey.pem;
+   
+  ssl_protocols TLSv1.2 TLSv1.3;
+  ssl_ciphers         HIGH:!aNULL:!MD5;
+ 
+ 
+  location / {
+  
+         # Ograniczenie liczby żądań
+        limit_req zone=ip_limit burst=20 nodelay;
+        
+        proxy_pass http://arti24-container:3335;
+        
+        proxy_set_header    X-Real-IP           $remote_addr;
+        proxy_set_header    X-Forwarded-For     $proxy_add_x_forwarded_for;
+        proxy_set_header    X-Forwarded-Proto   $scheme;
+        proxy_set_header    Host                $host;
+        proxy_set_header    X-Forwarded-Host    $host;
+        proxy_set_header    X-Forwarded-Port    $server_port;
+        
+        
+        # timeouty
+        proxy_connect_timeout 3s;   # max czas na połączenie z backendem
+        proxy_read_timeout    3s;   # max czas oczekiwania na odpowiedź
+        proxy_send_timeout    3s;
+
+        # jeżeli backend nie odpowie albo zwróci 502/503/504 -> fallback
+        proxy_intercept_errors on;
+        proxy_next_upstream error timeout http_502 http_503 http_504;
+
+        error_page 502 503 504 504 = @fallback;
+    
+ 
+   }
+   
+   location @fallback {
+        return 302 https://kopama.pl$request_uri;
+   }
+        
+     
+}