diff --git a/nginx/sites-available/business.itguys.com.br.conf b/nginx/sites-available/business.itguys.com.br.conf index e53a570..6783cfd 100644 --- a/nginx/sites-available/business.itguys.com.br.conf +++ b/nginx/sites-available/business.itguys.com.br.conf @@ -14,6 +14,16 @@ # BLOCO 1: Redirecionamento de HTTP para HTTPS # ============================================================================== server { + if ($host = autolab.itguys.com.br) { + return 301 https://$host$request_uri; + } # managed by Certbot + + + if ($host = business.itguys.com.br) { + return 301 https://$host$request_uri; + } # managed by Certbot + + listen 80; listen [::]:80; server_name business.itguys.com.br autolab.itguys.com.br; @@ -25,6 +35,10 @@ server { location / { return 301 https://$host$request_uri; } + + + + } # ============================================================================== @@ -48,8 +62,8 @@ server { limit_req zone=bad_bot_limit; # --- Configurações de SSL/TLS (Padronizado) --- - ssl_certificate /etc/letsencrypt/live/business.itguys.com.br/fullchain.pem; - ssl_certificate_key /etc/letsencrypt/live/business.itguys.com.br/privkey.pem; + ssl_certificate /etc/letsencrypt/live/business.itguys.com.br/fullchain.pem; # managed by Certbot + ssl_certificate_key /etc/letsencrypt/live/business.itguys.com.br/privkey.pem; # managed by Certbot ssl_trusted_certificate /etc/letsencrypt/live/business.itguys.com.br/fullchain.pem; ssl_protocols TLSv1.2 TLSv1.3; ssl_prefer_server_ciphers off; @@ -131,4 +145,6 @@ server { root /usr/share/nginx/html; internal; } + + } diff --git a/ufw/user.rules b/ufw/user.rules index 53995a5..269a55d 100644 --- a/ufw/user.rules +++ b/ufw/user.rules @@ -17,6 +17,9 @@ :ufw-user-limit-accept - [0:0] ### RULES ### +### tuple ### reject any any 0.0.0.0/0 any 147.182.149.75 in comment=6279204661696c3242616e206166746572203120617474656d70747320616761696e737420627573696e6573732e6974677579732e636f6d2e62722d626164626f7473 +-A ufw-user-input -s 147.182.149.75 -j REJECT + ### tuple ### reject any any 0.0.0.0/0 any 159.89.165.4 in comment=6279204661696c3242616e206166746572203120617474656d70747320616761696e737420616e617472616d2e636f6d2e62722d626164626f7473 -A ufw-user-input -s 159.89.165.4 -j REJECT