From 256cbbee31017fb640915e0427a9fa8d349bed6f Mon Sep 17 00:00:00 2001 From: "srvproxy001.itguys.com.br" Date: Mon, 24 Nov 2025 09:21:48 -0300 Subject: [PATCH] =?UTF-8?q?[Auto-Sync]=20Atualiza=C3=A7=C3=A3o=20das=20con?= =?UTF-8?q?figura=C3=A7=C3=B5es=20em=20srvproxy001.itguys.com.br=20-=20202?= =?UTF-8?q?5-11-24=2009:21:48?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- nginx/.certbot.lock | 0 nginx/nginx.conf | 2 ++ nginx/sites-available/mimir.itguys.com.br.conf | 12 ++++++++++-- 3 files changed, 12 insertions(+), 2 deletions(-) create mode 100644 nginx/.certbot.lock diff --git a/nginx/.certbot.lock b/nginx/.certbot.lock new file mode 100644 index 0000000..e69de29 diff --git a/nginx/nginx.conf b/nginx/nginx.conf index 99be1af..e8f28a8 100644 --- a/nginx/nginx.conf +++ b/nginx/nginx.conf @@ -33,6 +33,8 @@ events { } http { +server_names_hash_bucket_size 128; +include /etc/letsencrypt/le_http_01_cert_challenge.conf; # --- Configurações Globais Mínimas --- sendfile on; tcp_nopush on; diff --git a/nginx/sites-available/mimir.itguys.com.br.conf b/nginx/sites-available/mimir.itguys.com.br.conf index 0a14e8b..3915c25 100644 --- a/nginx/sites-available/mimir.itguys.com.br.conf +++ b/nginx/sites-available/mimir.itguys.com.br.conf @@ -18,7 +18,9 @@ upstream zabbix_backend { # ============================================================================== # BLOCO 1: Redirecionamento de HTTP (porta 80) para HTTPS # ============================================================================== -server { +server {rewrite ^(/.well-known/acme-challenge/.*) $1 break; # managed by Certbot + + listen 80; listen [::]:80; server_name mimir.itguys.com.br; @@ -30,12 +32,16 @@ server { location / { return 301 https://$host$request_uri; } +location = /.well-known/acme-challenge/_0RFD1JjsZNjicyChvo74hJGwnVlxZU_G-pvLMhpcNI{default_type text/plain;return 200 _0RFD1JjsZNjicyChvo74hJGwnVlxZU_G-pvLMhpcNI.6NQOP-_cyjMVLz8P4PfH0klS5ZH2qgREfeMrgpUfnEk;} # managed by Certbot + } # ============================================================================== # BLOCO 2: Servidor Principal - Proxy Reverso para Zabbix (HTTPS) # ============================================================================== -server { +server {rewrite ^(/.well-known/acme-challenge/.*) $1 break; # managed by Certbot + + listen 443 ssl http2; listen [::]:443 ssl http2; server_name mimir.itguys.com.br; @@ -122,4 +128,6 @@ server { location / { proxy_pass http://zabbix_backend; } +location = /.well-known/acme-challenge/_0RFD1JjsZNjicyChvo74hJGwnVlxZU_G-pvLMhpcNI{default_type text/plain;return 200 _0RFD1JjsZNjicyChvo74hJGwnVlxZU_G-pvLMhpcNI.6NQOP-_cyjMVLz8P4PfH0klS5ZH2qgREfeMrgpUfnEk;} # managed by Certbot + }