diff --git a/443.conf b/443.conf new file mode 100644 index 0000000..8361895 --- /dev/null +++ b/443.conf @@ -0,0 +1,183 @@ +# server { +# listen 80; +# listen [::]:80; + +# server_name ~^(?.+)\.inno-js\.ru$; + +# if ($subdomain = "") { +# return 301 https://inno-js.ru$request_uri; +# } + +# return 301 https://$subdomain.inno-js.ru$request_uri; +# } + +server { + # listen 80; + listen 443 ssl http2; + listen [::]:443 ssl http2; + + server_name ^inno-js\.ru$; + index index.php index.html index.htm index.nginx-debian.html; + + ssl_certificate /etc/letsencrypt/live/inno-js.ru/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/inno-js.ru/privkey.pem; + ssl_trusted_certificate /etc/letsencrypt/live/inno-js.ru/chain.pem; + include /etc/nginx/snippets/ssl-params.conf; + + include "parts/api-multystub.conf"; + + root "/var/www/html"; + + # location / { + # add_header 'Access-Control-Allow-Origin' '*'; + # add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS'; + # add_header 'Access-Control-Allow-Headers' 'DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range'; + # add_header 'Access-Control-Expose-Headers' 'Content-Length,Content-Range'; + # proxy_pass http://212.193.59.173:8079/; + # } +} + +server { + # listen 80; + listen 443 ssl http2; + listen [::]:443 ssl http2; + + server_name b1.inno-js.ru; + + ssl_certificate /etc/letsencrypt/live/inno-js.ru/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/inno-js.ru/privkey.pem; + ssl_trusted_certificate /etc/letsencrypt/live/inno-js.ru/chain.pem; + + include "parts/api-multystub.conf"; + + include /etc/nginx/snippets/ssl-params.conf; + + location / { + add_header 'Access-Control-Allow-Origin' '*'; + add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS'; + add_header 'Access-Control-Allow-Headers' 'DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range'; + add_header 'Access-Control-Expose-Headers' 'Content-Length,Content-Range'; + proxy_pass http://212.193.59.173:8078/; + } +} + +server { + # listen 80; + listen 443 ssl http2; + listen [::]:443 ssl http2; + + server_name b2.inno-js.ru; + + ssl_certificate /etc/letsencrypt/live/inno-js.ru/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/inno-js.ru/privkey.pem; + ssl_trusted_certificate /etc/letsencrypt/live/inno-js.ru/chain.pem; + + ssl_prefer_server_ciphers on; + ssl_verify_client off; + + include "parts/api-multystub.conf"; + + include /etc/nginx/snippets/ssl-params.conf; + + location / { + add_header 'Access-Control-Allow-Origin' '*'; + add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS'; + add_header 'Access-Control-Allow-Headers' 'DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range'; + add_header 'Access-Control-Expose-Headers' 'Content-Length,Content-Range'; + proxy_pass http://212.193.59.173:8075/; + } +} + +server { + # listen 80; + listen 443 ssl http2; + listen [::]:443 ssl http2; + + server_name static.inno-js.ru; + + ssl_certificate /etc/letsencrypt/live/inno-js.ru/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/inno-js.ru/privkey.pem; + ssl_trusted_certificate /etc/letsencrypt/live/inno-js.ru/chain.pem; + + include /etc/nginx/snippets/ssl-params.conf; + + location / { + add_header 'Access-Control-Allow-Origin' '*.inno-js.ru'; + add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS'; + add_header 'Access-Control-Allow-Headers' 'DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range'; + add_header 'Access-Control-Expose-Headers' 'Content-Length,Content-Range'; + alias "/home/ijl/ijl/apps/"; + } +} + +server { + # listen 80; + listen 443 ssl http2; + listen [::]:443 ssl http2; + + server_name old.admin.inno-js.ru; + + ssl_certificate /etc/letsencrypt/live/inno-js.ru/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/inno-js.ru/privkey.pem; + ssl_trusted_certificate /etc/letsencrypt/live/inno-js.ru/chain.pem; + + include /etc/nginx/snippets/ssl-params.conf; + + location / { + proxy_pass http://admin/; + } +} + +# server { +# listen 80; +# server_name admin.inno-js.ru; + +# location / { +# proxy_pass http://212.193.59.173:3072; +# } +# } + +server { + # listen 80; + listen 443 ssl http2; + listen [::]:443 ssl http2; + server_name admin.inno-js.ru; + + ssl_certificate /etc/letsencrypt/live/inno-js.ru/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/inno-js.ru/privkey.pem; + ssl_trusted_certificate /etc/letsencrypt/live/inno-js.ru/chain.pem; + + include /etc/nginx/snippets/ssl-params.conf; + + location / { + proxy_pass http://212.193.59.173:3072; + } +} + +server { + # listen 80; + listen 443 ssl http2; + listen [::]:443 ssl http2; + index index.php index.html index.htm index.nginx-debian.html; + + server_name victorina.inno-js.ru; + + ssl_certificate /etc/letsencrypt/live/inno-js.ru/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/inno-js.ru/privkey.pem; + ssl_trusted_certificate /etc/letsencrypt/live/inno-js.ru/chain.pem; + + root /home/ijl/ijl/apps/petrus/dist; + + include /etc/nginx/snippets/ssl-params.conf; + + location / { + try_files $uri $uri/ /index.html; + } +} + +# server { +# listen 80; +# index index.html; +# server_name alinakhaff.inno-js.ru; +# root /home/ijl/ijl/apps/alinakhaff; +# } diff --git a/nginx.conf b/nginx.conf index 2d4aeaf..d6c0e86 100644 --- a/nginx.conf +++ b/nginx.conf @@ -70,6 +70,7 @@ http { # include ./83-php.conf; # include 3002-apps-static.conf; include 80.conf; + include 443.conf; }