brammp/HomeServerCTs
1
0
Fork 0
Code Issues Pull Requests Releases Activity

Added nginx CT

Browse Source
This commit is contained in:
Bram Prieshof
2021-09-21 00:37:58 +00:00
parent 361661babf
commit f46df35d6d
12 changed files with 278 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
CT-Files/nginx/Configs/acmesh.conf Normal file
View File

@@ -0,0 +1,9 @@
#LOG_FILE="/etc/acmesh/data/acme.sh.log"
#LOG_LEVEL=1
AUTO_UPGRADE="1"
NOTIFY_LEVEL='1'
#NO_TIMESTAMP=1
CERT_HOME="/etc/acmesh/certs"
LE_WORKING_DIR="/opt/acmesh"
LE_CONFIG_HOME="/etc/acmesh/data"
USER_PATH='/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games:/snap/bin'

63
CT-Files/nginx/Configs/nginx.conf Normal file
View File

@@ -0,0 +1,63 @@
user nginx;
worker_processes auto;
error_log /var/log/nginx/error.log notice;
pid /var/run/nginx.pid;
include /etc/nginx/modules-enabled/*.conf;
events {
worker_connections 1024;
}
http {
sendfile on;
tcp_nopush on;
tcp_nodelay on;
keepalive_timeout 65;
types_hash_max_size 2048;
server_tokens off;
client_body_buffer_size 10K;
client_header_buffer_size 1k;
client_max_body_size 8m;
large_client_header_buffers 4 4k;
server_names_hash_bucket_size 64;
root /usr/share/nginx/html;
include /etc/nginx/mime.types;
default_type application/octet-stream;
access_log off;
error_log /var/log/nginx/error.log;
#Gzip
gzip on;
gzip_proxied any;
gzip_types text/plain text/css text/xml text/javascript application/x-javascript application/xml;
gzip_comp_level 2;
gzip_disable "msie6";
gzip_buffers 16 8k;
#SSL
resolver 8.8.8.8;
ssl_ecdh_curve secp384r1;
ssl_session_cache shared:le_nginx_SSL:1m;
ssl_session_timeout 1440m;
ssl_stapling on;
ssl_stapling_verify on;
ssl_prefer_server_ciphers on;
ssl_protocols TLSv1.2 TLSv1.3;
ssl_ciphers "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384";
add_header X-Frame-Options sameorigin;
add_header X-Content-Type-Options nosniff;
add_header X-Xss-Protection "1; mode=block";
add_header Strict-Transport-Security "max-age=31536000" always;
ssl_dhparam /etc/acmesh/certs/ssl-dhparams.pem;
#Load Other configs
include /etc/nginx/conf.d/*.conf;
include /etc/nginx/sites-enabled/*;
#Server config for unconfigured domains
server {
listen 80 default_server;
listen [::]:80 default_server;
server_name _;
add_header Content-Type text/html;
return 200 '<html><head></head><body>Nginx is functioning normally</body></html>';
}
}

11
CT-Files/nginx/Configs/nginx_template_nossl Normal file
View File

@@ -0,0 +1,11 @@
server {
listen 80;
listen [::]:80;
server_name DOMAINname;
#beginConf
add_header Content-Type text/html;
return 200 '<html><head></head><body>Nginx is config for DOMAINname is created</body></html>';
#endConf
}

22
CT-Files/nginx/Configs/nginx_template_ssl Normal file
View File

@@ -0,0 +1,22 @@
server {
listen 80;
listen [::]:80;
server_name DOMAINname;
location / {
return 301 https://$host$request_uri;
}
}
server {
listen 443 ssl http2;
listen [::]:443 ssl http2;
server_name DOMAINname;
ssl_certificate /etc/acmesh/inst/DOMAINname/fullchain.pem;
ssl_certificate_key /etc/acmesh/inst/DOMAINname/key.pem;
ssl_trusted_certificate /etc/acmesh/inst/DOMAINname/fullchain.pem;
#ConfHere
}

3
CT-Files/nginx/Configs/profile Normal file
View File

@@ -0,0 +1,3 @@
export LE_WORKING_DIR="/opt/acmesh"
export LE_CONFIG_HOME="/etc/acmesh/data"
alias acmesh="/opt/acmesh/acme.sh --config-home '/etc/acmesh/data'"