joao.goncalves
/
NgixProxy_Pathfinder
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

[Auto-Sync] Atualização das configurações em srvproxy001.itguys.com.br - 2025-09-29 12:53:31

This commit is contained in:
srvproxy001.itguys.com.br 2025-09-29 12:53:31 -03:00
parent a9d47fdf14
commit 8d99617656
2 changed files with 21 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
nginx/sites-available/business.itguys.com.br.conf
View File

@ -14,6 +14,16 @@
# BLOCO 1: Redirecionamento de HTTP para HTTPS # BLOCO 1: Redirecionamento de HTTP para HTTPS
# ============================================================================== # ==============================================================================
server { server {
if ($host = autolab.itguys.com.br) {
return 301 https://$host$request_uri;
} # managed by Certbot
if ($host = business.itguys.com.br) {
return 301 https://$host$request_uri;
} # managed by Certbot
listen 80; listen 80;
listen [::]:80; listen [::]:80;
server_name business.itguys.com.br autolab.itguys.com.br; server_name business.itguys.com.br autolab.itguys.com.br;
@ -25,6 +35,10 @@ server {
location / { location / {
return 301 https://$host$request_uri; return 301 https://$host$request_uri;
} }
} }
# ============================================================================== # ==============================================================================
@ -48,8 +62,8 @@ server {
limit_req zone=bad_bot_limit; limit_req zone=bad_bot_limit;
# --- Configurações de SSL/TLS (Padronizado) --- # --- Configurações de SSL/TLS (Padronizado) ---
ssl_certificate /etc/letsencrypt/live/business.itguys.com.br/fullchain.pem; ssl_certificate /etc/letsencrypt/live/business.itguys.com.br/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/business.itguys.com.br/privkey.pem; ssl_certificate_key /etc/letsencrypt/live/business.itguys.com.br/privkey.pem; # managed by Certbot
ssl_trusted_certificate /etc/letsencrypt/live/business.itguys.com.br/fullchain.pem; ssl_trusted_certificate /etc/letsencrypt/live/business.itguys.com.br/fullchain.pem;
ssl_protocols TLSv1.2 TLSv1.3; ssl_protocols TLSv1.2 TLSv1.3;
ssl_prefer_server_ciphers off; ssl_prefer_server_ciphers off;
@ -131,4 +145,6 @@ server {
root /usr/share/nginx/html; root /usr/share/nginx/html;
internal; internal;
} }
} }

3
ufw/user.rules
View File

@ -17,6 +17,9 @@
:ufw-user-limit-accept - [0:0] :ufw-user-limit-accept - [0:0]
### RULES ### ### RULES ###
### tuple ### reject any any 0.0.0.0/0 any 147.182.149.75 in comment=6279204661696c3242616e206166746572203120617474656d70747320616761696e737420627573696e6573732e6974677579732e636f6d2e62722d626164626f7473
-A ufw-user-input -s 147.182.149.75 -j REJECT
### tuple ### reject any any 0.0.0.0/0 any 159.89.165.4 in comment=6279204661696c3242616e206166746572203120617474656d70747320616761696e737420616e617472616d2e636f6d2e62722d626164626f7473 ### tuple ### reject any any 0.0.0.0/0 any 159.89.165.4 in comment=6279204661696c3242616e206166746572203120617474656d70747320616761696e737420616e617472616d2e636f6d2e62722d626164626f7473
-A ufw-user-input -s 159.89.165.4 -j REJECT -A ufw-user-input -s 159.89.165.4 -j REJECT