Revize f83d4608
Přidáno uživatelem Tomáš Ballák před více než 4 roky(ů)
docker/nginx/sites/default.conf | ||
---|---|---|
14 | 14 |
listen 443 ssl; |
15 | 15 |
listen [::]:443 ssl; |
16 | 16 |
server_name www.heatmap.zcu.cz; |
17 |
ssl_certificate /certificate/cert.pem;
|
|
18 |
ssl_certificate_key /certificate/key.pem;
|
|
17 |
ssl_certificate /root/.acme.sh/heatmap.zcu.cz/fullchain.cer;
|
|
18 |
ssl_certificate_key /root/.acme.sh/heatmap.zcu.cz/heatmap.zcu.cz.key;
|
|
19 | 19 |
ssl_protocols TLSv1 TLSv1.1 TLSv1.2; |
20 | 20 |
ssl_prefer_server_ciphers on; |
21 | 21 |
ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH'; |
... | ... | |
27 | 27 |
listen [::]:443 ssl; |
28 | 28 |
|
29 | 29 |
server_name heatmap.zcu.cz; |
30 |
ssl_certificate /certificate/cert.pem;
|
|
31 |
ssl_certificate_key /certificate/key.pem;
|
|
30 |
ssl_certificate /root/.acme.sh/heatmap.zcu.cz/fullchain.cer;
|
|
31 |
ssl_certificate_key /root/.acme.sh/heatmap.zcu.cz/heatmap.zcu.cz.key;
|
|
32 | 32 |
|
33 | 33 |
ssl_protocols TLSv1 TLSv1.1 TLSv1.2; |
34 | 34 |
ssl_prefer_server_ciphers on; |
scripts/renew_certificate.sh | ||
---|---|---|
8 | 8 |
cd /root/.acme.sh; \ |
9 | 9 |
bash acme.sh --issue --nginx /etc/nginx/sites-available/default.conf -d heatmap.zcu.cz -d www.heatmap.zcu.cz --debug 2; \ |
10 | 10 |
bash acme.sh --installcert -d heatmap.zcu.cz -d www.heatmap.zcu.cz\ |
11 |
--key-file /certificate/key.pem \
|
|
12 |
--fullchain-file /certificate/cert.pem \
|
|
11 |
--key-file /root/.acme.sh/heatmap.zcu.cz/heatmap.zcu.cz.key \
|
|
12 |
--fullchain-file /root/.acme.sh/heatmap.zcu.cz/fullchain.cer \
|
|
13 | 13 |
--reloadcmd 'bash /etc/init.d/nginx reload'; |
14 | 14 |
"; |
15 | 15 |
else |
Také k dispozici: Unified diff
..