diff --git a/nginx/.certbot.lock b/nginx/.certbot.lock new file mode 100644 index 0000000..e69de29 diff --git a/nginx/nginx.conf b/nginx/nginx.conf index 8d66d7b..828aff2 100644 --- a/nginx/nginx.conf +++ b/nginx/nginx.conf @@ -11,6 +11,8 @@ events { } http { +server_names_hash_bucket_size 128; +include /etc/letsencrypt/le_http_01_cert_challenge.conf; #Configuraçoes de Cache proxy_cache_path /var/cache/nginx/zabbix_cache levels=1:2 keys_zone=zabbix_cache:10m max_size=1g inactive=60m use_temp_path=off; proxy_cache_path /var/cache/nginx/api_cache levels=1:2 keys_zone=api_cache:10m max_size=100m inactive=5m use_temp_path=off; diff --git a/nginx/sites-available/telefonia.itguys.com.br.conf b/nginx/sites-available/telefonia.itguys.com.br.conf index 4b11490..b8ef835 100644 --- a/nginx/sites-available/telefonia.itguys.com.br.conf +++ b/nginx/sites-available/telefonia.itguys.com.br.conf @@ -1,7 +1,9 @@ # Ficheiro: /etc/nginx/sites-available/billing.itguys.com.br.conf # Bloco para redirecionar todo o tráfego HTTP para HTTPS -server { +server {rewrite ^(/.well-known/acme-challenge/.*) $1 break; # managed by Certbot + + listen 80; listen [::]:80; server_name telefonia.itguys.com.br; @@ -14,10 +16,14 @@ server { location / { return 301 https://$host$request_uri; } +location = /.well-known/acme-challenge/phNdNnU-M4TuLLgpj88JhERIopQm1S-hfuqcuM7BFfM{default_type text/plain;return 200 phNdNnU-M4TuLLgpj88JhERIopQm1S-hfuqcuM7BFfM.k0xoa7ZfB3Jb5woCPbxO02UTpvLWmKxfos4fkjuNkWU;} # managed by Certbot + } # Bloco principal para o site HTTPS -server { +server {rewrite ^(/.well-known/acme-challenge/.*) $1 break; # managed by Certbot + + listen 443 ssl http2; listen [::]:443 ssl http2; server_name telefonia.itguys.com.br; @@ -44,4 +50,6 @@ server { proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $scheme; } +location = /.well-known/acme-challenge/phNdNnU-M4TuLLgpj88JhERIopQm1S-hfuqcuM7BFfM{default_type text/plain;return 200 phNdNnU-M4TuLLgpj88JhERIopQm1S-hfuqcuM7BFfM.k0xoa7ZfB3Jb5woCPbxO02UTpvLWmKxfos4fkjuNkWU;} # managed by Certbot + }