diff --git a/nginx/nginx.conf b/nginx/nginx.conf index e8f28a8..99be1af 100644 --- a/nginx/nginx.conf +++ b/nginx/nginx.conf @@ -33,8 +33,6 @@ events { } http { -server_names_hash_bucket_size 128; -include /etc/letsencrypt/le_http_01_cert_challenge.conf; # --- Configurações Globais Mínimas --- sendfile on; tcp_nopush on; diff --git a/nginx/sites-available/mimir.itguys.com.br.conf b/nginx/sites-available/mimir.itguys.com.br.conf index 3915c25..0a14e8b 100644 --- a/nginx/sites-available/mimir.itguys.com.br.conf +++ b/nginx/sites-available/mimir.itguys.com.br.conf @@ -18,9 +18,7 @@ upstream zabbix_backend { # ============================================================================== # BLOCO 1: Redirecionamento de HTTP (porta 80) para HTTPS # ============================================================================== -server {rewrite ^(/.well-known/acme-challenge/.*) $1 break; # managed by Certbot - - +server { listen 80; listen [::]:80; server_name mimir.itguys.com.br; @@ -32,16 +30,12 @@ server {rewrite ^(/.well-known/acme-challenge/.*) $1 break; # managed by Certbot location / { return 301 https://$host$request_uri; } -location = /.well-known/acme-challenge/_0RFD1JjsZNjicyChvo74hJGwnVlxZU_G-pvLMhpcNI{default_type text/plain;return 200 _0RFD1JjsZNjicyChvo74hJGwnVlxZU_G-pvLMhpcNI.6NQOP-_cyjMVLz8P4PfH0klS5ZH2qgREfeMrgpUfnEk;} # managed by Certbot - } # ============================================================================== # BLOCO 2: Servidor Principal - Proxy Reverso para Zabbix (HTTPS) # ============================================================================== -server {rewrite ^(/.well-known/acme-challenge/.*) $1 break; # managed by Certbot - - +server { listen 443 ssl http2; listen [::]:443 ssl http2; server_name mimir.itguys.com.br; @@ -128,6 +122,4 @@ server {rewrite ^(/.well-known/acme-challenge/.*) $1 break; # managed by Certbot location / { proxy_pass http://zabbix_backend; } -location = /.well-known/acme-challenge/_0RFD1JjsZNjicyChvo74hJGwnVlxZU_G-pvLMhpcNI{default_type text/plain;return 200 _0RFD1JjsZNjicyChvo74hJGwnVlxZU_G-pvLMhpcNI.6NQOP-_cyjMVLz8P4PfH0klS5ZH2qgREfeMrgpUfnEk;} # managed by Certbot - }