joao.goncalves
/
NgixProxy_Pathfinder
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

[Auto-Sync] Atualização das configurações em srvproxy001.itguys.com.br - 2025-10-14 12:37:17

This commit is contained in:
srvproxy001.itguys.com.br 2025-10-14 12:37:17 -03:00
parent d965ddf0c2
commit d66bc4e69e
1 changed files with 13 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
nginx/sites-available/rhema.itguys.com.br.conf
View File

@ -24,6 +24,11 @@ upstream rhema_backend {
# - Redireciona todo o tráfego para HTTPS. # - Redireciona todo o tráfego para HTTPS.
# ====================================================================== # ======================================================================
server { server {
if ($host = rhema.itguys.com.br) {
return 301 https://$host$request_uri;
} # managed by Certbot
listen 80; listen 80;
listen [::]:80; listen [::]:80;
server_name rhema.itguys.com.br; server_name rhema.itguys.com.br;
@ -37,6 +42,8 @@ server {
location / { location / {
return 301 https://$host$request_uri; return 301 https://$host$request_uri;
} }
} }
# ====================================================================== # ======================================================================
@ -62,9 +69,9 @@ server {
# --- Parâmetros de SSL/TLS (Best Practices) --- # --- Parâmetros de SSL/TLS (Best Practices) ---
# O Certbot irá gerenciar os caminhos abaixo. # O Certbot irá gerenciar os caminhos abaixo.
ssl_certificate /etc/letsencrypt/live/rhema.itguys.com.br/fullchain.pem; #ssl_certificate /etc/letsencrypt/live/rhema.itguys.com.br/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/rhema.itguys.com.br/privkey.pem; #ssl_certificate_key /etc/letsencrypt/live/rhema.itguys.com.br/privkey.pem;
ssl_trusted_certificate /etc/letsencrypt/live/rhema.itguys.com.br/fullchain.pem; #ssl_trusted_certificate /etc/letsencrypt/live/rhema.itguys.com.br/fullchain.pem;
ssl_protocols TLSv1.3 TLSv1.2; ssl_protocols TLSv1.3 TLSv1.2;
ssl_ciphers 'TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305'; ssl_ciphers 'TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305';
@ -134,4 +141,7 @@ server {
proxy_set_header Connection "upgrade"; proxy_set_header Connection "upgrade";
proxy_read_timeout 86400s; proxy_read_timeout 86400s;
} }
ssl_certificate /etc/letsencrypt/live/rhema.itguys.com.br/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/rhema.itguys.com.br/privkey.pem; # managed by Certbot
} }