diff --git a/nginx/.certbot.lock b/nginx/.certbot.lock deleted file mode 100644 index e69de29..0000000 diff --git a/nginx/nginx.conf b/nginx/nginx.conf index 1ab574b..d27e2d5 100644 --- a/nginx/nginx.conf +++ b/nginx/nginx.conf @@ -11,8 +11,6 @@ events { } http { -server_names_hash_bucket_size 128; -include /etc/letsencrypt/le_http_01_cert_challenge.conf; #Configuraçoes de Cache proxy_cache_path /var/cache/nginx/zabbix_cache levels=1:2 keys_zone=zabbix_cache:10m max_size=1g inactive=60m use_temp_path=off; proxy_cache_path /var/cache/nginx/api_cache levels=1:2 keys_zone=api_cache:10m max_size=100m inactive=5m use_temp_path=off; diff --git a/nginx/sites-available/zammad.itguys.com.br.conf b/nginx/sites-available/zammad.itguys.com.br.conf index 80e957f..5218d4a 100644 --- a/nginx/sites-available/zammad.itguys.com.br.conf +++ b/nginx/sites-available/zammad.itguys.com.br.conf @@ -6,7 +6,10 @@ # ============================================================================== # BLOCO HTTP: Redirecionar para HTTPS # ============================================================================== -server {rewrite ^(/.well-known/acme-challenge/.*) $1 break; # managed by Certbot +server { + if ($host = zammad.itguys.com.br) { + return 301 https://$host$request_uri; + } # managed by Certbot listen 80; @@ -14,16 +17,14 @@ server {rewrite ^(/.well-known/acme-challenge/.*) $1 break; # managed by Certbot server_name zammad.itguys.com.br; location /.well-known/acme-challenge/ { root /var/www/html; } location / { return 301 https://$host$request_uri; } -location = /.well-known/acme-challenge/7f15JU16mzsLW0KO4HOiKafrgolDwRvUhq3eUUHx2Ic{default_type text/plain;return 200 7f15JU16mzsLW0KO4HOiKafrgolDwRvUhq3eUUHx2Ic.k0xoa7ZfB3Jb5woCPbxO02UTpvLWmKxfos4fkjuNkWU;} # managed by Certbot + } # ============================================================================== # BLOCO HTTPS: O Coração da nossa Configuração # ============================================================================== -server {rewrite ^(/.well-known/acme-challenge/.*) $1 break; # managed by Certbot - - +server { listen 443 ssl http2; listen [::]:443 ssl http2; server_name zammad.itguys.com.br; @@ -88,6 +89,7 @@ server {rewrite ^(/.well-known/acme-challenge/.*) $1 break; # managed by Certbot # O cache permanece desativado aqui por herdar da regra geral. proxy_pass http://172.16.254.59; } -location = /.well-known/acme-challenge/7f15JU16mzsLW0KO4HOiKafrgolDwRvUhq3eUUHx2Ic{default_type text/plain;return 200 7f15JU16mzsLW0KO4HOiKafrgolDwRvUhq3eUUHx2Ic.k0xoa7ZfB3Jb5woCPbxO02UTpvLWmKxfos4fkjuNkWU;} # managed by Certbot + ssl_certificate /etc/letsencrypt/live/zammad.itguys.com.br/fullchain.pem; # managed by Certbot + ssl_certificate_key /etc/letsencrypt/live/zammad.itguys.com.br/privkey.pem; # managed by Certbot }