diff --git a/Extra_Domains/RevProxySimple_Domain.sh b/Extra_Domains/RevProxySimple_Domain.sh index bb64cc5..331c4b3 100644 --- a/Extra_Domains/RevProxySimple_Domain.sh +++ b/Extra_Domains/RevProxySimple_Domain.sh @@ -27,6 +27,8 @@ server { root /var/www/$domain/html; index index.php index.htm index.html; + #netdata here + location / { proxy_pass http://$server_ip:8080; proxy_set_header X-Real-IP \$remote_addr; @@ -41,12 +43,6 @@ server { location ~ /\.ht { deny all; } - - #listen 443 ssl; - #ssl_certificate /etc/letsencrypt/live/$domain/fullchain.pem; - #ssl_certificate_key /etc/letsencrypt/live/$domain/privkey.pem; - #include /etc/letsencrypt/options-ssl-nginx.conf; - #ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; } EOF ln -s /etc/nginx/sites-available/"$domain" /etc/nginx/sites-enabled/"$domain" @@ -75,14 +71,27 @@ a2ensite "$domain" # Redirect phpmyadmin -> database ln -s /usr/share/phpmyadmin /var/www/"$domain"/html/database +##-------------## +# Netdata # +##-------------## + +if [ $netdata = 1 ]; then + apt install -y netdata + sed -i 's/SEND_EMAIL="YES"/SEND_EMAIL="NO"/g' /etc/netdata/health_alarm_notify.conf + ufw allow 19999/tcp + sed -i 's+#netdata here+location = /netdata {\n return 301 /netdata/;\n }\n\n location ~ /netdata/(?.*) {\n proxy_redirect off;\n proxy_set_header Host \$host;\n proxy_set_header X-Forwarded-Host \$host;\n proxy_set_header X-Forwarded-Server \$host;\n proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;\n proxy_http_version 1.1;\n proxy_pass_request_headers on;\n proxy_set_header Connection "keep-alive";\n proxy_store off;\n proxy_pass http://netdata/\$ndpath\$is_args\$args;\n }+g' /etc/nginx/sites-available/"$domain" + # systemctl stop netdata + # systemctl disable netdata +fi + ##-------------## # Certbot # ##-------------## -#certbot --nginx -d $domain -d www.$domain -#sed -i 's/ssl ipv6only/ssl http2 ipv6only/g' /etc/nginx/sites-available/"$domain" -#sed -i 's/listen 443 ssl/listen 443 ssl http2/g' /etc/nginx/sites-available/"$domain" -#sed -i 's#include /etc/letsencrypt/options-ssl-nginx.conf;#ssl_ciphers EECDH+CHACHA20:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;#g' /etc/nginx/sites-available/"$domain" +certbot --nginx -n -d "$domain" -d "www.$domain" -m "$email" --hsts --redirect --no-eff-email --agree-tos +sed -i 's/ssl ipv6only/ssl http2 ipv6only/g' /etc/nginx/sites-available/"$domain" +sed -i 's/listen 443 ssl/listen 443 ssl http2/g' /etc/nginx/sites-available/"$domain" +sed -i 's#include /etc/letsencrypt/options-ssl-nginx.conf;#ssl_ciphers EECDH+CHACHA20:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;#g' /etc/nginx/sites-available/"$domain" ##---------------## # Wordpress #