1 |
33786d3b
|
Tomáš Ballák
|
server {
|
2 |
|
|
listen 80;
|
3 |
|
|
listen [::]:80;
|
4 |
20513e9f
|
Martin Sebela
|
|
5 |
|
|
#
|
6 |
|
|
# TODO: set website domain
|
7 |
|
|
#
|
8 |
33786d3b
|
Tomáš Ballák
|
server_name heatmap.zcu.cz www.heatmap.zcu.cz;
|
9 |
|
|
|
10 |
ea0123cd
|
Tomáš Ballák
|
location ~ /.well-known {
|
11 |
|
|
allow all;
|
12 |
|
|
root /var/www/symfony/public;
|
13 |
|
|
}
|
14 |
33786d3b
|
Tomáš Ballák
|
# Redirect all HTTP requests to HTTPS with a 301 Moved Permanently response.
|
15 |
|
|
return 301 https://$server_name$request_uri;
|
16 |
|
|
}
|
17 |
3543e2c8
|
Tomáš Ballák
|
server {
|
18 |
|
|
listen 443 ssl;
|
19 |
|
|
listen [::]:443 ssl;
|
20 |
20513e9f
|
Martin Sebela
|
|
21 |
|
|
#
|
22 |
|
|
# TODO: set website domain
|
23 |
|
|
#
|
24 |
d9f642a7
|
Tomáš Ballák
|
server_name www.heatmap.zcu.cz;
|
25 |
20513e9f
|
Martin Sebela
|
|
26 |
|
|
#
|
27 |
|
|
# TODO: set certificate files
|
28 |
|
|
#
|
29 |
f83d4608
|
Tomáš Ballák
|
ssl_certificate /root/.acme.sh/heatmap.zcu.cz/fullchain.cer;
|
30 |
|
|
ssl_certificate_key /root/.acme.sh/heatmap.zcu.cz/heatmap.zcu.cz.key;
|
31 |
20513e9f
|
Martin Sebela
|
|
32 |
d9f642a7
|
Tomáš Ballák
|
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
|
33 |
|
|
ssl_prefer_server_ciphers on;
|
34 |
|
|
ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH';
|
35 |
3543e2c8
|
Tomáš Ballák
|
|
36 |
20513e9f
|
Martin Sebela
|
#
|
37 |
|
|
# TODO: set website domain
|
38 |
|
|
#
|
39 |
d9f642a7
|
Tomáš Ballák
|
return 301 https://heatmap.zcu.cz$request_uri;
|
40 |
|
|
}
|
41 |
|
|
server {
|
42 |
|
|
listen 443 ssl;
|
43 |
|
|
listen [::]:443 ssl;
|
44 |
|
|
|
45 |
20513e9f
|
Martin Sebela
|
#
|
46 |
|
|
# TODO: set website domain
|
47 |
|
|
#
|
48 |
d9f642a7
|
Tomáš Ballák
|
server_name heatmap.zcu.cz;
|
49 |
20513e9f
|
Martin Sebela
|
|
50 |
|
|
#
|
51 |
|
|
# TODO: set certificate files
|
52 |
|
|
#
|
53 |
f83d4608
|
Tomáš Ballák
|
ssl_certificate /root/.acme.sh/heatmap.zcu.cz/fullchain.cer;
|
54 |
|
|
ssl_certificate_key /root/.acme.sh/heatmap.zcu.cz/heatmap.zcu.cz.key;
|
55 |
a60193de
|
ballakt
|
|
56 |
|
|
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
|
57 |
|
|
ssl_prefer_server_ciphers on;
|
58 |
|
|
ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH';
|
59 |
|
|
|
60 |
666cada9
|
Tomáš Ballák
|
root /var/www/symfony/public;
|
61 |
a60193de
|
ballakt
|
|
62 |
579f9cdd
|
Tomáš Ballák
|
index index.php index.html index.htm;
|
63 |
|
|
|
64 |
|
|
location / {
|
65 |
a60193de
|
ballakt
|
try_files $uri $uri/ /index.php$is_args$args;
|
66 |
579f9cdd
|
Tomáš Ballák
|
}
|
67 |
|
|
|
68 |
|
|
location ~ \.php$ {
|
69 |
|
|
try_files $uri /index.php =404;
|
70 |
|
|
fastcgi_pass php-upstream;
|
71 |
|
|
fastcgi_index index.php;
|
72 |
|
|
fastcgi_buffers 16 16k;
|
73 |
|
|
fastcgi_buffer_size 32k;
|
74 |
|
|
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
|
75 |
|
|
fastcgi_read_timeout 600;
|
76 |
|
|
include fastcgi_params;
|
77 |
|
|
}
|
78 |
|
|
|
79 |
|
|
location ~ /\.ht {
|
80 |
|
|
deny all;
|
81 |
|
|
}
|
82 |
0b05be35
|
Tomáš Ballák
|
location ~ /.well-known {
|
83 |
|
|
allow all;
|
84 |
|
|
root /var/www/symfony/public;
|
85 |
|
|
}
|
86 |
666cada9
|
Tomáš Ballák
|
}
|