From 1419567a4472c3167c7943bf4b93e0e8af013ff2 Mon Sep 17 00:00:00 2001 From: Evgeniy <38162408+y0zhyck@users.noreply.github.com> Date: Mon, 3 Feb 2025 11:31:55 +0300 Subject: [PATCH] update folder --- .../meta.json | 0 .../private_key.json | 0 .../regr.json | 0 .../archive}/docker.grenu4.ru/cert1.pem | 0 .../archive}/docker.grenu4.ru/cert2.pem | 0 .../archive}/docker.grenu4.ru/chain1.pem | 0 .../archive}/docker.grenu4.ru/chain2.pem | 0 .../archive}/docker.grenu4.ru/fullchain1.pem | 0 .../archive}/docker.grenu4.ru/fullchain2.pem | 0 .../archive}/docker.grenu4.ru/privkey1.pem | 0 .../archive}/docker.grenu4.ru/privkey2.pem | 0 .../archive}/mail.grenu4.ru/cert1.pem | 0 .../archive}/mail.grenu4.ru/cert2.pem | 0 .../archive}/mail.grenu4.ru/chain1.pem | 0 .../archive}/mail.grenu4.ru/chain2.pem | 0 .../archive}/mail.grenu4.ru/fullchain1.pem | 0 .../archive}/mail.grenu4.ru/fullchain2.pem | 0 .../archive}/mail.grenu4.ru/privkey1.pem | 0 .../archive}/mail.grenu4.ru/privkey2.pem | 0 .../archive}/newtg.grenu4.ru/cert1.pem | 0 .../archive}/newtg.grenu4.ru/chain1.pem | 0 .../archive}/newtg.grenu4.ru/fullchain1.pem | 0 .../archive}/newtg.grenu4.ru/privkey1.pem | 0 .../archive}/ns.grenu4.ru/cert1.pem | 0 .../archive}/ns.grenu4.ru/cert2.pem | 0 .../archive}/ns.grenu4.ru/chain1.pem | 0 .../archive}/ns.grenu4.ru/chain2.pem | 0 .../archive}/ns.grenu4.ru/fullchain1.pem | 0 .../archive}/ns.grenu4.ru/fullchain2.pem | 0 .../archive}/ns.grenu4.ru/privkey1.pem | 0 .../archive}/ns.grenu4.ru/privkey2.pem | 0 .../archive}/office.grenu4.ru/cert1.pem | 0 .../archive}/office.grenu4.ru/cert2.pem | 0 .../archive}/office.grenu4.ru/chain1.pem | 0 .../archive}/office.grenu4.ru/chain2.pem | 0 .../archive}/office.grenu4.ru/fullchain1.pem | 0 .../archive}/office.grenu4.ru/fullchain2.pem | 0 .../archive}/office.grenu4.ru/privkey1.pem | 0 .../archive}/office.grenu4.ru/privkey2.pem | 0 cli.ini => LetsNcrypt/cli.ini | 0 {live => LetsNcrypt/live}/README | 0 .../live}/docker.grenu4.ru/README | 0 .../live}/mail.grenu4.ru/README | 0 .../live}/newtg.grenu4.ru/README | 0 {live => LetsNcrypt/live}/ns.grenu4.ru/README | 0 .../live}/office.grenu4.ru/README | 0 .../renewal}/docker.grenu4.ru.conf | 0 .../renewal}/mail.grenu4.ru.conf | 0 .../renewal}/newtg.grenu4.ru.conf | 0 .../renewal}/ns.grenu4.ru.conf | 0 .../renewal}/office.grenu4.ru.conf | 0 nginx/conf.d/default_and_acme.conf | 24 +++++ nginx/conf.d/docker_web.conf | 31 ++++++ .../conf.d/docker_web.conf.save | 0 nginx/conf.d/mail_web.conf | 31 ++++++ nginx/conf.d/nextcloud.conf | 85 ++++++++++++++++ nginx/conf.d/onlyoffice.conf | 55 +++++++++++ nginx/fastcgi_params | 25 +++++ nginx/mime.types | 99 +++++++++++++++++++ nginx/nginx.conf | 32 ++++++ nginx/scgi_params | 17 ++++ nginx/ssl/selfsigned.key | 52 ++++++++++ nginx/ssl/selfsigned.pem | 34 +++++++ nginx/uwsgi_params | 17 ++++ 64 files changed, 502 insertions(+) rename {accounts => LetsNcrypt/accounts}/acme-v02.api.letsencrypt.org/directory/5c3d0bee8c91381d486e2c8bf7d6ec09/meta.json (100%) rename {accounts => LetsNcrypt/accounts}/acme-v02.api.letsencrypt.org/directory/5c3d0bee8c91381d486e2c8bf7d6ec09/private_key.json (100%) rename {accounts => LetsNcrypt/accounts}/acme-v02.api.letsencrypt.org/directory/5c3d0bee8c91381d486e2c8bf7d6ec09/regr.json (100%) rename {archive => LetsNcrypt/archive}/docker.grenu4.ru/cert1.pem (100%) rename {archive => LetsNcrypt/archive}/docker.grenu4.ru/cert2.pem (100%) rename {archive => LetsNcrypt/archive}/docker.grenu4.ru/chain1.pem (100%) rename {archive => LetsNcrypt/archive}/docker.grenu4.ru/chain2.pem (100%) rename {archive => LetsNcrypt/archive}/docker.grenu4.ru/fullchain1.pem (100%) rename {archive => LetsNcrypt/archive}/docker.grenu4.ru/fullchain2.pem (100%) rename {archive => LetsNcrypt/archive}/docker.grenu4.ru/privkey1.pem (100%) rename {archive => LetsNcrypt/archive}/docker.grenu4.ru/privkey2.pem (100%) rename {archive => LetsNcrypt/archive}/mail.grenu4.ru/cert1.pem (100%) rename {archive => LetsNcrypt/archive}/mail.grenu4.ru/cert2.pem (100%) rename {archive => LetsNcrypt/archive}/mail.grenu4.ru/chain1.pem (100%) rename {archive => LetsNcrypt/archive}/mail.grenu4.ru/chain2.pem (100%) rename {archive => LetsNcrypt/archive}/mail.grenu4.ru/fullchain1.pem (100%) rename {archive => LetsNcrypt/archive}/mail.grenu4.ru/fullchain2.pem (100%) rename {archive => LetsNcrypt/archive}/mail.grenu4.ru/privkey1.pem (100%) rename {archive => LetsNcrypt/archive}/mail.grenu4.ru/privkey2.pem (100%) rename {archive => LetsNcrypt/archive}/newtg.grenu4.ru/cert1.pem (100%) rename {archive => LetsNcrypt/archive}/newtg.grenu4.ru/chain1.pem (100%) rename {archive => LetsNcrypt/archive}/newtg.grenu4.ru/fullchain1.pem (100%) rename {archive => LetsNcrypt/archive}/newtg.grenu4.ru/privkey1.pem (100%) rename {archive => LetsNcrypt/archive}/ns.grenu4.ru/cert1.pem (100%) rename {archive => LetsNcrypt/archive}/ns.grenu4.ru/cert2.pem (100%) rename {archive => LetsNcrypt/archive}/ns.grenu4.ru/chain1.pem (100%) rename {archive => LetsNcrypt/archive}/ns.grenu4.ru/chain2.pem (100%) rename {archive => LetsNcrypt/archive}/ns.grenu4.ru/fullchain1.pem (100%) rename {archive => LetsNcrypt/archive}/ns.grenu4.ru/fullchain2.pem (100%) rename {archive => LetsNcrypt/archive}/ns.grenu4.ru/privkey1.pem (100%) rename {archive => LetsNcrypt/archive}/ns.grenu4.ru/privkey2.pem (100%) rename {archive => LetsNcrypt/archive}/office.grenu4.ru/cert1.pem (100%) rename {archive => LetsNcrypt/archive}/office.grenu4.ru/cert2.pem (100%) rename {archive => LetsNcrypt/archive}/office.grenu4.ru/chain1.pem (100%) rename {archive => LetsNcrypt/archive}/office.grenu4.ru/chain2.pem (100%) rename {archive => LetsNcrypt/archive}/office.grenu4.ru/fullchain1.pem (100%) rename {archive => LetsNcrypt/archive}/office.grenu4.ru/fullchain2.pem (100%) rename {archive => LetsNcrypt/archive}/office.grenu4.ru/privkey1.pem (100%) rename {archive => LetsNcrypt/archive}/office.grenu4.ru/privkey2.pem (100%) rename cli.ini => LetsNcrypt/cli.ini (100%) rename {live => LetsNcrypt/live}/README (100%) rename {live => LetsNcrypt/live}/docker.grenu4.ru/README (100%) rename {live => LetsNcrypt/live}/mail.grenu4.ru/README (100%) rename {live => LetsNcrypt/live}/newtg.grenu4.ru/README (100%) rename {live => LetsNcrypt/live}/ns.grenu4.ru/README (100%) rename {live => LetsNcrypt/live}/office.grenu4.ru/README (100%) rename {renewal => LetsNcrypt/renewal}/docker.grenu4.ru.conf (100%) rename {renewal => LetsNcrypt/renewal}/mail.grenu4.ru.conf (100%) rename {renewal => LetsNcrypt/renewal}/newtg.grenu4.ru.conf (100%) rename {renewal => LetsNcrypt/renewal}/ns.grenu4.ru.conf (100%) rename {renewal => LetsNcrypt/renewal}/office.grenu4.ru.conf (100%) create mode 100644 nginx/conf.d/default_and_acme.conf create mode 100644 nginx/conf.d/docker_web.conf rename LETSnCrypt => nginx/conf.d/docker_web.conf.save (100%) create mode 100644 nginx/conf.d/mail_web.conf create mode 100644 nginx/conf.d/nextcloud.conf create mode 100644 nginx/conf.d/onlyoffice.conf create mode 100644 nginx/fastcgi_params create mode 100644 nginx/mime.types create mode 100644 nginx/nginx.conf create mode 100644 nginx/scgi_params create mode 100644 nginx/ssl/selfsigned.key create mode 100644 nginx/ssl/selfsigned.pem create mode 100644 nginx/uwsgi_params diff --git a/accounts/acme-v02.api.letsencrypt.org/directory/5c3d0bee8c91381d486e2c8bf7d6ec09/meta.json b/LetsNcrypt/accounts/acme-v02.api.letsencrypt.org/directory/5c3d0bee8c91381d486e2c8bf7d6ec09/meta.json similarity index 100% rename from accounts/acme-v02.api.letsencrypt.org/directory/5c3d0bee8c91381d486e2c8bf7d6ec09/meta.json rename to LetsNcrypt/accounts/acme-v02.api.letsencrypt.org/directory/5c3d0bee8c91381d486e2c8bf7d6ec09/meta.json diff --git a/accounts/acme-v02.api.letsencrypt.org/directory/5c3d0bee8c91381d486e2c8bf7d6ec09/private_key.json b/LetsNcrypt/accounts/acme-v02.api.letsencrypt.org/directory/5c3d0bee8c91381d486e2c8bf7d6ec09/private_key.json similarity index 100% rename from accounts/acme-v02.api.letsencrypt.org/directory/5c3d0bee8c91381d486e2c8bf7d6ec09/private_key.json rename to LetsNcrypt/accounts/acme-v02.api.letsencrypt.org/directory/5c3d0bee8c91381d486e2c8bf7d6ec09/private_key.json diff --git a/accounts/acme-v02.api.letsencrypt.org/directory/5c3d0bee8c91381d486e2c8bf7d6ec09/regr.json b/LetsNcrypt/accounts/acme-v02.api.letsencrypt.org/directory/5c3d0bee8c91381d486e2c8bf7d6ec09/regr.json similarity index 100% rename from accounts/acme-v02.api.letsencrypt.org/directory/5c3d0bee8c91381d486e2c8bf7d6ec09/regr.json rename to LetsNcrypt/accounts/acme-v02.api.letsencrypt.org/directory/5c3d0bee8c91381d486e2c8bf7d6ec09/regr.json diff --git a/archive/docker.grenu4.ru/cert1.pem b/LetsNcrypt/archive/docker.grenu4.ru/cert1.pem similarity index 100% rename from archive/docker.grenu4.ru/cert1.pem rename to LetsNcrypt/archive/docker.grenu4.ru/cert1.pem diff --git a/archive/docker.grenu4.ru/cert2.pem b/LetsNcrypt/archive/docker.grenu4.ru/cert2.pem similarity index 100% rename from archive/docker.grenu4.ru/cert2.pem rename to LetsNcrypt/archive/docker.grenu4.ru/cert2.pem diff --git a/archive/docker.grenu4.ru/chain1.pem b/LetsNcrypt/archive/docker.grenu4.ru/chain1.pem similarity index 100% rename from archive/docker.grenu4.ru/chain1.pem rename to LetsNcrypt/archive/docker.grenu4.ru/chain1.pem diff --git a/archive/docker.grenu4.ru/chain2.pem b/LetsNcrypt/archive/docker.grenu4.ru/chain2.pem similarity index 100% rename from archive/docker.grenu4.ru/chain2.pem rename to LetsNcrypt/archive/docker.grenu4.ru/chain2.pem diff --git a/archive/docker.grenu4.ru/fullchain1.pem b/LetsNcrypt/archive/docker.grenu4.ru/fullchain1.pem similarity index 100% rename from archive/docker.grenu4.ru/fullchain1.pem rename to LetsNcrypt/archive/docker.grenu4.ru/fullchain1.pem diff --git a/archive/docker.grenu4.ru/fullchain2.pem b/LetsNcrypt/archive/docker.grenu4.ru/fullchain2.pem similarity index 100% rename from archive/docker.grenu4.ru/fullchain2.pem rename to LetsNcrypt/archive/docker.grenu4.ru/fullchain2.pem diff --git a/archive/docker.grenu4.ru/privkey1.pem b/LetsNcrypt/archive/docker.grenu4.ru/privkey1.pem similarity index 100% rename from archive/docker.grenu4.ru/privkey1.pem rename to LetsNcrypt/archive/docker.grenu4.ru/privkey1.pem diff --git a/archive/docker.grenu4.ru/privkey2.pem b/LetsNcrypt/archive/docker.grenu4.ru/privkey2.pem similarity index 100% rename from archive/docker.grenu4.ru/privkey2.pem rename to LetsNcrypt/archive/docker.grenu4.ru/privkey2.pem diff --git a/archive/mail.grenu4.ru/cert1.pem b/LetsNcrypt/archive/mail.grenu4.ru/cert1.pem similarity index 100% rename from archive/mail.grenu4.ru/cert1.pem rename to LetsNcrypt/archive/mail.grenu4.ru/cert1.pem diff --git a/archive/mail.grenu4.ru/cert2.pem b/LetsNcrypt/archive/mail.grenu4.ru/cert2.pem similarity index 100% rename from archive/mail.grenu4.ru/cert2.pem rename to LetsNcrypt/archive/mail.grenu4.ru/cert2.pem diff --git a/archive/mail.grenu4.ru/chain1.pem b/LetsNcrypt/archive/mail.grenu4.ru/chain1.pem similarity index 100% rename from archive/mail.grenu4.ru/chain1.pem rename to LetsNcrypt/archive/mail.grenu4.ru/chain1.pem diff --git a/archive/mail.grenu4.ru/chain2.pem b/LetsNcrypt/archive/mail.grenu4.ru/chain2.pem similarity index 100% rename from archive/mail.grenu4.ru/chain2.pem rename to LetsNcrypt/archive/mail.grenu4.ru/chain2.pem diff --git a/archive/mail.grenu4.ru/fullchain1.pem b/LetsNcrypt/archive/mail.grenu4.ru/fullchain1.pem similarity index 100% rename from archive/mail.grenu4.ru/fullchain1.pem rename to LetsNcrypt/archive/mail.grenu4.ru/fullchain1.pem diff --git a/archive/mail.grenu4.ru/fullchain2.pem b/LetsNcrypt/archive/mail.grenu4.ru/fullchain2.pem similarity index 100% rename from archive/mail.grenu4.ru/fullchain2.pem rename to LetsNcrypt/archive/mail.grenu4.ru/fullchain2.pem diff --git a/archive/mail.grenu4.ru/privkey1.pem b/LetsNcrypt/archive/mail.grenu4.ru/privkey1.pem similarity index 100% rename from archive/mail.grenu4.ru/privkey1.pem rename to LetsNcrypt/archive/mail.grenu4.ru/privkey1.pem diff --git a/archive/mail.grenu4.ru/privkey2.pem b/LetsNcrypt/archive/mail.grenu4.ru/privkey2.pem similarity index 100% rename from archive/mail.grenu4.ru/privkey2.pem rename to LetsNcrypt/archive/mail.grenu4.ru/privkey2.pem diff --git a/archive/newtg.grenu4.ru/cert1.pem b/LetsNcrypt/archive/newtg.grenu4.ru/cert1.pem similarity index 100% rename from archive/newtg.grenu4.ru/cert1.pem rename to LetsNcrypt/archive/newtg.grenu4.ru/cert1.pem diff --git a/archive/newtg.grenu4.ru/chain1.pem b/LetsNcrypt/archive/newtg.grenu4.ru/chain1.pem similarity index 100% rename from archive/newtg.grenu4.ru/chain1.pem rename to LetsNcrypt/archive/newtg.grenu4.ru/chain1.pem diff --git a/archive/newtg.grenu4.ru/fullchain1.pem b/LetsNcrypt/archive/newtg.grenu4.ru/fullchain1.pem similarity index 100% rename from archive/newtg.grenu4.ru/fullchain1.pem rename to LetsNcrypt/archive/newtg.grenu4.ru/fullchain1.pem diff --git a/archive/newtg.grenu4.ru/privkey1.pem b/LetsNcrypt/archive/newtg.grenu4.ru/privkey1.pem similarity index 100% rename from archive/newtg.grenu4.ru/privkey1.pem rename to LetsNcrypt/archive/newtg.grenu4.ru/privkey1.pem diff --git a/archive/ns.grenu4.ru/cert1.pem b/LetsNcrypt/archive/ns.grenu4.ru/cert1.pem similarity index 100% rename from archive/ns.grenu4.ru/cert1.pem rename to LetsNcrypt/archive/ns.grenu4.ru/cert1.pem diff --git a/archive/ns.grenu4.ru/cert2.pem b/LetsNcrypt/archive/ns.grenu4.ru/cert2.pem similarity index 100% rename from archive/ns.grenu4.ru/cert2.pem rename to LetsNcrypt/archive/ns.grenu4.ru/cert2.pem diff --git a/archive/ns.grenu4.ru/chain1.pem b/LetsNcrypt/archive/ns.grenu4.ru/chain1.pem similarity index 100% rename from archive/ns.grenu4.ru/chain1.pem rename to LetsNcrypt/archive/ns.grenu4.ru/chain1.pem diff --git a/archive/ns.grenu4.ru/chain2.pem b/LetsNcrypt/archive/ns.grenu4.ru/chain2.pem similarity index 100% rename from archive/ns.grenu4.ru/chain2.pem rename to LetsNcrypt/archive/ns.grenu4.ru/chain2.pem diff --git a/archive/ns.grenu4.ru/fullchain1.pem b/LetsNcrypt/archive/ns.grenu4.ru/fullchain1.pem similarity index 100% rename from archive/ns.grenu4.ru/fullchain1.pem rename to LetsNcrypt/archive/ns.grenu4.ru/fullchain1.pem diff --git a/archive/ns.grenu4.ru/fullchain2.pem b/LetsNcrypt/archive/ns.grenu4.ru/fullchain2.pem similarity index 100% rename from archive/ns.grenu4.ru/fullchain2.pem rename to LetsNcrypt/archive/ns.grenu4.ru/fullchain2.pem diff --git a/archive/ns.grenu4.ru/privkey1.pem b/LetsNcrypt/archive/ns.grenu4.ru/privkey1.pem similarity index 100% rename from archive/ns.grenu4.ru/privkey1.pem rename to LetsNcrypt/archive/ns.grenu4.ru/privkey1.pem diff --git a/archive/ns.grenu4.ru/privkey2.pem b/LetsNcrypt/archive/ns.grenu4.ru/privkey2.pem similarity index 100% rename from archive/ns.grenu4.ru/privkey2.pem rename to LetsNcrypt/archive/ns.grenu4.ru/privkey2.pem diff --git a/archive/office.grenu4.ru/cert1.pem b/LetsNcrypt/archive/office.grenu4.ru/cert1.pem similarity index 100% rename from archive/office.grenu4.ru/cert1.pem rename to LetsNcrypt/archive/office.grenu4.ru/cert1.pem diff --git a/archive/office.grenu4.ru/cert2.pem b/LetsNcrypt/archive/office.grenu4.ru/cert2.pem similarity index 100% rename from archive/office.grenu4.ru/cert2.pem rename to LetsNcrypt/archive/office.grenu4.ru/cert2.pem diff --git a/archive/office.grenu4.ru/chain1.pem b/LetsNcrypt/archive/office.grenu4.ru/chain1.pem similarity index 100% rename from archive/office.grenu4.ru/chain1.pem rename to LetsNcrypt/archive/office.grenu4.ru/chain1.pem diff --git a/archive/office.grenu4.ru/chain2.pem b/LetsNcrypt/archive/office.grenu4.ru/chain2.pem similarity index 100% rename from archive/office.grenu4.ru/chain2.pem rename to LetsNcrypt/archive/office.grenu4.ru/chain2.pem diff --git a/archive/office.grenu4.ru/fullchain1.pem b/LetsNcrypt/archive/office.grenu4.ru/fullchain1.pem similarity index 100% rename from archive/office.grenu4.ru/fullchain1.pem rename to LetsNcrypt/archive/office.grenu4.ru/fullchain1.pem diff --git a/archive/office.grenu4.ru/fullchain2.pem b/LetsNcrypt/archive/office.grenu4.ru/fullchain2.pem similarity index 100% rename from archive/office.grenu4.ru/fullchain2.pem rename to LetsNcrypt/archive/office.grenu4.ru/fullchain2.pem diff --git a/archive/office.grenu4.ru/privkey1.pem b/LetsNcrypt/archive/office.grenu4.ru/privkey1.pem similarity index 100% rename from archive/office.grenu4.ru/privkey1.pem rename to LetsNcrypt/archive/office.grenu4.ru/privkey1.pem diff --git a/archive/office.grenu4.ru/privkey2.pem b/LetsNcrypt/archive/office.grenu4.ru/privkey2.pem similarity index 100% rename from archive/office.grenu4.ru/privkey2.pem rename to LetsNcrypt/archive/office.grenu4.ru/privkey2.pem diff --git a/cli.ini b/LetsNcrypt/cli.ini similarity index 100% rename from cli.ini rename to LetsNcrypt/cli.ini diff --git a/live/README b/LetsNcrypt/live/README similarity index 100% rename from live/README rename to LetsNcrypt/live/README diff --git a/live/docker.grenu4.ru/README b/LetsNcrypt/live/docker.grenu4.ru/README similarity index 100% rename from live/docker.grenu4.ru/README rename to LetsNcrypt/live/docker.grenu4.ru/README diff --git a/live/mail.grenu4.ru/README b/LetsNcrypt/live/mail.grenu4.ru/README similarity index 100% rename from live/mail.grenu4.ru/README rename to LetsNcrypt/live/mail.grenu4.ru/README diff --git a/live/newtg.grenu4.ru/README b/LetsNcrypt/live/newtg.grenu4.ru/README similarity index 100% rename from live/newtg.grenu4.ru/README rename to LetsNcrypt/live/newtg.grenu4.ru/README diff --git a/live/ns.grenu4.ru/README b/LetsNcrypt/live/ns.grenu4.ru/README similarity index 100% rename from live/ns.grenu4.ru/README rename to LetsNcrypt/live/ns.grenu4.ru/README diff --git a/live/office.grenu4.ru/README b/LetsNcrypt/live/office.grenu4.ru/README similarity index 100% rename from live/office.grenu4.ru/README rename to LetsNcrypt/live/office.grenu4.ru/README diff --git a/renewal/docker.grenu4.ru.conf b/LetsNcrypt/renewal/docker.grenu4.ru.conf similarity index 100% rename from renewal/docker.grenu4.ru.conf rename to LetsNcrypt/renewal/docker.grenu4.ru.conf diff --git a/renewal/mail.grenu4.ru.conf b/LetsNcrypt/renewal/mail.grenu4.ru.conf similarity index 100% rename from renewal/mail.grenu4.ru.conf rename to LetsNcrypt/renewal/mail.grenu4.ru.conf diff --git a/renewal/newtg.grenu4.ru.conf b/LetsNcrypt/renewal/newtg.grenu4.ru.conf similarity index 100% rename from renewal/newtg.grenu4.ru.conf rename to LetsNcrypt/renewal/newtg.grenu4.ru.conf diff --git a/renewal/ns.grenu4.ru.conf b/LetsNcrypt/renewal/ns.grenu4.ru.conf similarity index 100% rename from renewal/ns.grenu4.ru.conf rename to LetsNcrypt/renewal/ns.grenu4.ru.conf diff --git a/renewal/office.grenu4.ru.conf b/LetsNcrypt/renewal/office.grenu4.ru.conf similarity index 100% rename from renewal/office.grenu4.ru.conf rename to LetsNcrypt/renewal/office.grenu4.ru.conf diff --git a/nginx/conf.d/default_and_acme.conf b/nginx/conf.d/default_and_acme.conf new file mode 100644 index 0000000..53b3ebf --- /dev/null +++ b/nginx/conf.d/default_and_acme.conf @@ -0,0 +1,24 @@ +server { + listen 80 default_server; + + location /.well-known/acme-challenge { + root /usr/share/nginx/html; + } + + location / { + return 301 https://$host$request_uri; + } +} + +server { + listen 443 ssl default_server; + + ssl_certificate /etc/nginx/ssl/selfsigned.pem; + ssl_certificate_key /etc/nginx/ssl/selfsigned.key; + + server_tokens off; + + location / { + return 444; + } +} diff --git a/nginx/conf.d/docker_web.conf b/nginx/conf.d/docker_web.conf new file mode 100644 index 0000000..1bd7369 --- /dev/null +++ b/nginx/conf.d/docker_web.conf @@ -0,0 +1,31 @@ +map $http_upgrade $proxy_connection { + default upgrade; + "" close; +} + +server { + listen 443 ssl; + server_name docker.grenu4.ru; + + ssl_certificate /etc/letsencrypt/live/docker.grenu4.ru/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/docker.grenu4.ru/privkey.pem; + + access_log /var/log/nginx/docker.grenu4.ru_access.log main; + error_log /var/log/nginx/mail.grenu4.ru_error.log notice; + + location / { + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + proxy_pass http://195.122.225.17:9443; + + proxy_set_header Upgrade $http_upgrade; + proxy_set_header Connection $proxy_connection; + } + + location = /robots.txt { + add_header Content-Type text/plain; + return 200 "User-agent: *\nDisallow: /\n"; + } +} diff --git a/LETSnCrypt b/nginx/conf.d/docker_web.conf.save similarity index 100% rename from LETSnCrypt rename to nginx/conf.d/docker_web.conf.save diff --git a/nginx/conf.d/mail_web.conf b/nginx/conf.d/mail_web.conf new file mode 100644 index 0000000..3bd6c6a --- /dev/null +++ b/nginx/conf.d/mail_web.conf @@ -0,0 +1,31 @@ +map $http_upgrade $proxy_connection { + default upgrade; + "" close; +} + +server { + listen 443 ssl; + server_name mail.grenu4.ru; + + ssl_certificate /etc/letsencrypt/live/mail.grenu4.ru/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/mail.grenu4.ru/privkey.pem; + + access_log /var/log/nginx/mail.grenu4.ru_access.log main; + error_log /var/log/nginx/mail.grenu4.ru_error.log notice; + + location / { + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + proxy_pass http://127.0.0.1:8087; + + proxy_set_header Upgrade $http_upgrade; + proxy_set_header Connection $proxy_connection; + } + + location = /robots.txt { + add_header Content-Type text/plain; + return 200 "User-agent: *\nDisallow: /\n"; + } +} diff --git a/nginx/conf.d/nextcloud.conf b/nginx/conf.d/nextcloud.conf new file mode 100644 index 0000000..d15efd5 --- /dev/null +++ b/nginx/conf.d/nextcloud.conf @@ -0,0 +1,85 @@ + +map $http_upgrade $connection_upgrade { + default upgrade; + '' close; +} + +server { + listen 443 ssl; # for nginx v1.25.1+ + + access_log /var/log/nginx/ns.grenu4.ru_access.log main; + error_log /var/log/nginx/ns.grenu4.ru_error.log notice; + + http2 on; # uncomment to enable HTTP/2 - supported on nginx v1.25.1+ + http3 on; # uncomment to enable HTTP/3 / QUIC - supported on nginx v1.25.0+ + quic_retry on; # uncomment to enable HTTP/3 / QUIC - supported on nginx v1.25.0+ + add_header Alt-Svc 'h3=":443"; ma=86400'; # uncomment to enable HTTP/3 / QUIC - supported on nginx v1.25.0+ + listen 443 quic reuseport; # uncomment to enable HTTP/3 / QUIC - supported on nginx v1.25.0+ - please remove "reuseport" if there is already another quic listener on port 443 with enabled reuseport + # listen [::]:443 quic reuseport; # uncomment to enable HTTP/3 / QUIC - supported on nginx v1.25.0+ - please remove "reuseport" if there is already another quic listener on port 443 with enabled reuseport - keep comment to disable IPv6 + + server_name ns.grenu4.ru; + + location / { + proxy_pass http://127.0.0.1:11000$request_uri; + + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Port $server_port; + proxy_set_header X-Forwarded-Scheme $scheme; + proxy_set_header X-Forwarded-Proto $scheme; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header Accept-Encoding ""; + # proxy_set_header Host $host; + + client_body_buffer_size 512k; + proxy_read_timeout 86400s; + client_max_body_size 0; + + # Websocket + proxy_http_version 1.1; + proxy_set_header Upgrade $http_upgrade; + proxy_set_header Connection $connection_upgrade; + } + + ssl_certificate /etc/letsencrypt/live/ns.grenu4.ru/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/ns.grenu4.ru/privkey.pem; + + ssl_session_timeout 1d; + ssl_session_cache shared:MozSSL:10m; # about 40000 sessions + ssl_session_tickets off; + + ssl_protocols TLSv1.2 TLSv1.3; + ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CHACHA20-POLY1305; + ssl_prefer_server_ciphers on; + +} + +server { + listen 18443 ssl; + server_name ns.grenu4.ru; + + access_log /var/log/nginx/aio_ns.grenu4.ru_access.log main; + error_log /var/log/nginx/aio_ns.grenu4.ru_error.log notice; + + ssl_certificate /etc/letsencrypt/live/ns.grenu4.ru/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/ns.grenu4.ru/privkey.pem; + + allow 77.91.87.36; # vpn + allow 37.18.26.66; # mrakomaks kwork + allow 212.124.20.138; # mrakomaks kwork + deny all; + + proxy_read_timeout 300; + proxy_connect_timeout 300; + proxy_send_timeout 300; + + location / { + proxy_pass https://127.0.0.1:18080; + + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $remote_addr; + proxy_set_header X-Forwarded-Host $host; + proxy_set_header X-Forwarded-Protocol $scheme; + } + +} diff --git a/nginx/conf.d/onlyoffice.conf b/nginx/conf.d/onlyoffice.conf new file mode 100644 index 0000000..a85d783 --- /dev/null +++ b/nginx/conf.d/onlyoffice.conf @@ -0,0 +1,55 @@ +upstream docservice { + server 127.0.0.1:3333; +} + +map $http_host $this_host { + "" $host; + default $http_host; +} + +map $http_x_forwarded_proto $the_scheme { + default $http_x_forwarded_proto; + "" $scheme; +} + +map $http_x_forwarded_host $the_host { + default $http_x_forwarded_host; + "" $this_host; +} + +map $http_upgrade $proxy_connection { + default upgrade; + "" close; +} + +proxy_set_header Upgrade $http_upgrade; +proxy_set_header Connection $proxy_connection; +proxy_set_header X-Forwarded-Host $the_host; +proxy_set_header X-Forwarded-Proto $the_scheme; +proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + +server { + listen 0.0.0.0:443 ssl; + server_name office.grenu4.ru; + server_tokens off; + root /var/www/html; + + ssl_certificate /etc/letsencrypt/live/office.grenu4.ru/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/office.grenu4.ru/privkey.pem; + ssl_verify_client off; + + ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH"; + + ssl_protocols TLSv1 TLSv1.1 TLSv1.2; + ssl_session_cache builtin:1000 shared:OnSSL:10m; + + ssl_prefer_server_ciphers on; + + add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always; + add_header X-Content-Type-Options nosniff; + + location / { + proxy_pass http://docservice; + proxy_http_version 1.1; + } +} diff --git a/nginx/fastcgi_params b/nginx/fastcgi_params new file mode 100644 index 0000000..28decb9 --- /dev/null +++ b/nginx/fastcgi_params @@ -0,0 +1,25 @@ + +fastcgi_param QUERY_STRING $query_string; +fastcgi_param REQUEST_METHOD $request_method; +fastcgi_param CONTENT_TYPE $content_type; +fastcgi_param CONTENT_LENGTH $content_length; + +fastcgi_param SCRIPT_NAME $fastcgi_script_name; +fastcgi_param REQUEST_URI $request_uri; +fastcgi_param DOCUMENT_URI $document_uri; +fastcgi_param DOCUMENT_ROOT $document_root; +fastcgi_param SERVER_PROTOCOL $server_protocol; +fastcgi_param REQUEST_SCHEME $scheme; +fastcgi_param HTTPS $https if_not_empty; + +fastcgi_param GATEWAY_INTERFACE CGI/1.1; +fastcgi_param SERVER_SOFTWARE nginx/$nginx_version; + +fastcgi_param REMOTE_ADDR $remote_addr; +fastcgi_param REMOTE_PORT $remote_port; +fastcgi_param SERVER_ADDR $server_addr; +fastcgi_param SERVER_PORT $server_port; +fastcgi_param SERVER_NAME $server_name; + +# PHP only, required if PHP was built with --enable-force-cgi-redirect +fastcgi_param REDIRECT_STATUS 200; diff --git a/nginx/mime.types b/nginx/mime.types new file mode 100644 index 0000000..1c00d70 --- /dev/null +++ b/nginx/mime.types @@ -0,0 +1,99 @@ + +types { + text/html html htm shtml; + text/css css; + text/xml xml; + image/gif gif; + image/jpeg jpeg jpg; + application/javascript js; + application/atom+xml atom; + application/rss+xml rss; + + text/mathml mml; + text/plain txt; + text/vnd.sun.j2me.app-descriptor jad; + text/vnd.wap.wml wml; + text/x-component htc; + + image/avif avif; + image/png png; + image/svg+xml svg svgz; + image/tiff tif tiff; + image/vnd.wap.wbmp wbmp; + image/webp webp; + image/x-icon ico; + image/x-jng jng; + image/x-ms-bmp bmp; + + font/woff woff; + font/woff2 woff2; + + application/java-archive jar war ear; + application/json json; + application/mac-binhex40 hqx; + application/msword doc; + application/pdf pdf; + application/postscript ps eps ai; + application/rtf rtf; + application/vnd.apple.mpegurl m3u8; + application/vnd.google-earth.kml+xml kml; + application/vnd.google-earth.kmz kmz; + application/vnd.ms-excel xls; + application/vnd.ms-fontobject eot; + application/vnd.ms-powerpoint ppt; + application/vnd.oasis.opendocument.graphics odg; + application/vnd.oasis.opendocument.presentation odp; + application/vnd.oasis.opendocument.spreadsheet ods; + application/vnd.oasis.opendocument.text odt; + application/vnd.openxmlformats-officedocument.presentationml.presentation + pptx; + application/vnd.openxmlformats-officedocument.spreadsheetml.sheet + xlsx; + application/vnd.openxmlformats-officedocument.wordprocessingml.document + docx; + application/vnd.wap.wmlc wmlc; + application/wasm wasm; + application/x-7z-compressed 7z; + application/x-cocoa cco; + application/x-java-archive-diff jardiff; + application/x-java-jnlp-file jnlp; + application/x-makeself run; + application/x-perl pl pm; + application/x-pilot prc pdb; + application/x-rar-compressed rar; + application/x-redhat-package-manager rpm; + application/x-sea sea; + application/x-shockwave-flash swf; + application/x-stuffit sit; + application/x-tcl tcl tk; + application/x-x509-ca-cert der pem crt; + application/x-xpinstall xpi; + application/xhtml+xml xhtml; + application/xspf+xml xspf; + application/zip zip; + + application/octet-stream bin exe dll; + application/octet-stream deb; + application/octet-stream dmg; + application/octet-stream iso img; + application/octet-stream msi msp msm; + + audio/midi mid midi kar; + audio/mpeg mp3; + audio/ogg ogg; + audio/x-m4a m4a; + audio/x-realaudio ra; + + video/3gpp 3gpp 3gp; + video/mp2t ts; + video/mp4 mp4; + video/mpeg mpeg mpg; + video/quicktime mov; + video/webm webm; + video/x-flv flv; + video/x-m4v m4v; + video/x-mng mng; + video/x-ms-asf asx asf; + video/x-ms-wmv wmv; + video/x-msvideo avi; +} diff --git a/nginx/nginx.conf b/nginx/nginx.conf new file mode 100644 index 0000000..5e076aa --- /dev/null +++ b/nginx/nginx.conf @@ -0,0 +1,32 @@ + +user nginx; +worker_processes auto; + +error_log /var/log/nginx/error.log notice; +pid /var/run/nginx.pid; + + +events { + worker_connections 1024; +} + + +http { + include /etc/nginx/mime.types; + default_type application/octet-stream; + + log_format main '$remote_addr - $remote_user [$time_local] "$request" ' + '$status $body_bytes_sent "$http_referer" ' + '"$http_user_agent" "$http_x_forwarded_for"'; + + access_log /var/log/nginx/access.log main; + + sendfile on; + #tcp_nopush on; + + keepalive_timeout 65; + + #gzip on; + + include /etc/nginx/conf.d/*.conf; +} diff --git a/nginx/scgi_params b/nginx/scgi_params new file mode 100644 index 0000000..6d4ce4f --- /dev/null +++ b/nginx/scgi_params @@ -0,0 +1,17 @@ + +scgi_param REQUEST_METHOD $request_method; +scgi_param REQUEST_URI $request_uri; +scgi_param QUERY_STRING $query_string; +scgi_param CONTENT_TYPE $content_type; + +scgi_param DOCUMENT_URI $document_uri; +scgi_param DOCUMENT_ROOT $document_root; +scgi_param SCGI 1; +scgi_param SERVER_PROTOCOL $server_protocol; +scgi_param REQUEST_SCHEME $scheme; +scgi_param HTTPS $https if_not_empty; + +scgi_param REMOTE_ADDR $remote_addr; +scgi_param REMOTE_PORT $remote_port; +scgi_param SERVER_PORT $server_port; +scgi_param SERVER_NAME $server_name; diff --git a/nginx/ssl/selfsigned.key b/nginx/ssl/selfsigned.key new file mode 100644 index 0000000..683101c --- /dev/null +++ b/nginx/ssl/selfsigned.key @@ -0,0 +1,52 @@ +-----BEGIN PRIVATE KEY----- +MIIJQAIBADANBgkqhkiG9w0BAQEFAASCCSowggkmAgEAAoICAQCozxtz/Mzuih0s +OZKJ65UoEJBXUPdIRKjvF++6b0CxWEDXdudb1tLwX/ogmE2qX2oeYGSoWgKlynqF +V2eMALehsMj+/S0L+WZGxF9WmI/72YXb2WL/5AG/TBWmZeI1Zi5sSxj6/7mcjDBf +xZRVYzmq/HSO6md4P4wOGkciQsoJTZ+2PW6OugY83YzC1ZM4mrbVvYuBMGlXjgwa +Zr8EMlyyAhx6p+33kQYPFWYXVMrYxuYjaJL5QVpzK5EYS0/OsR1FdDpob9dqhwGe +DZWA0FfIQVlRX9sz5y3aBq4cIlrUPpAXE2WyO4DhZGVwM7ABzE7XKHWV0/82VjMM +XCbSOC1juCZowCWDOQxMlujZDB73Jf0RHUwpcfXOGONYMU1k2PoL/JyMpsYrUnbh +2aoPnP1tj9/HK+wZBxlo208bKZ+/FMzLl/sF1KGi1ZnYm9uShWqEJqTK7FK/4oGh +7vmUcBbIi+Bbpfe16+X/Bg/wdhoWmYCtikCIEwSKyWpDU6vWXQFLt6rDr2xXtoai +UrE5RUarF7easG+Cvtk38RKedizu67B0IUAO9DVBz8lSvf0a7/U6uutox3T3AIq8 +IX+zctXMzJlKvW0KRLafLv8p2im+iARe0TeowFWRKSzU3I5IQpfij7v82Vsk5G3p +/CQ9MmHv40fgGYHr/cUM5N2d7QlnRwIDAQABAoIB/z/2OXC5WO0JaARZzCx2Fw4X +OJndE9VOLrRpXWxGuzx3NBpv8znZLBPoSd4P1122yX65B2rCsD4heksL0zA5FVsu +oPn89BSVaytlPLqTE/tZcF7c/6X1vrO9IHbsI8oX7X8a9VwliS7H74xaUNoJvtAK +2B9OseXeLjMpwco5hFQCFYH3xOxPkA1/5NXuFtpbxOs35qQMs9149R0L0VTFwFmy +cxgGiSREzwboFMbCWhnJQ2onNYk8OglpeJC7+IFYmr62S2tG9VhnzzUT8JHeX2SB +XlZ2+5evALCb11zRp5jEG9SihOYDpdHBOK5K52XHBBiCPAuJSCpOfwkv4YXFw2xm +XkWF8rHxabAGACP7n6Q8ej/W3O212LYNC9A2cCEqojR1Dd3tsx5hZd1RqhlN6/qe +r7RDRi8T9P/Bng2ZFg+eOQzuADORP5MBnmTpxVqrhFW5FNY573n0teEqKLz2ix4M +i/QKWeAYrR1vVaWTTYst0p+ybM7FXcy4VvtvYSWcIP2LWGLnQeHzf7bptHzTTmAp +Ib+eV2laMVQ0uq98n2JWaU/PnFNLfhOhDsGU49Bw16QpXq+1PHfwVX7Oy4jkOgCr +9xVsMuI0OzoXdjUlB1+Uj8S6Sk/3+IdRT4MmhOd/GZZeH+CPFvDSmcoKjOb+WGrD +hln1I9vCvwBbQmJoNekCggEBAO4LJmbEJGMDtWY8m6cJcXekr6ruVCZelZltajii +gGMegjB2eKmShxRy2axtnksOQ2tWvaqtfTp5+WDB4ug+9lzh7YflK2daef+fkLLI +w3Mz/YlNBeFdjGRjVX9D0fWotsh4Ya8vcS7LP9WOH7zrbbnIz825yWC0VkUdOmLn +Q0d6lZ0qn76xV3DTx2BbPELHMpE4A5x85Ne0TLhmvAIMBHnan7ENGOXGem7nGhwK +36gUSDwdUBttrgZTviISqYMi/tZwM6KaPcRBYkn9p5GACz8E8U1EuZkMyAnhYfKi +1UePGGfH4WzzWEsEZ2YA4UTPNBhnP0dinbuHCVVUEwUQFBsCggEBALWK+L0W5bi3 +wEP4V9SNRrXyz3S1ieKeBp/FdoaFCnPX6zUIMRDR3he0NcowyH6+6V96/HF3fdbO +vMV1+FjDVWATVGxSNUxru/Ujc19mjpE7ypma6S3eO7JooTgvaxAerozeu7ajitDD +GKDOIsaCzIzvzys+J78MuD9Qdb2rSTcbj2DfVW22SZ5setl54TfTZNGx+WLis9MT +SS32EWN6/QYrNYA9KHMzvIAzBM0baenGVsYIjzq/j8Xz3fQaUgVxGsQZ5pN65dSb +sCpyNCW6zrVgKCIk+Qbd6Af3cbJp/C0q4KysNALtFBap3+cOZQyW7aYVG5bDa40u +zoGnQePDtEUCggEAdNN8EUuKIB4d1QNB0QTNb06f+F/nZL1e5mHQk+MM55h9hJNg +PLjxGpQTSJCz81oYtIFprG5g22YpgdcmKZ1dA9DN5rgOSTcaUN5bAaOOaOfHMq9e +h3CGCm7F8yOx08Ltkg2iw3uhLLoLph+ObAWPYHKxqeHYd2GKRXlGwmuFlXsQGoZk +yA35QCJv41ZjiNKCesrm2tJg7YxLauTguJB1Ueh+H0KySXLTe8JoCgM8KR1rJjWs +rwlxMyG+WrKWBwoRz+RZMyBH2B3Ow0l+B+aznkYqtyVXgUnIkzDOBWrtCaWs8KIk +fHghiQ+sP1+HL2IRyzhA0iQQDY0Eg6AzhXSSqQKCAQBD3187orHkK57QSqrbpq4H +HG5/XdfdR+OGHFdB17+eq90eCJ//f9ce2Zs6qp5q9IlfzyVObrQ3eTeOQ5rD5NOo +hdGMZffTSHwPHF/oDPnERqxqXUZMhcef3gpYbTID5tSvih54HBCsGCS/ChJqUUCU +eJvluOk3PlQsJ7K9ZKqM1dr3BshzqjE/76LGaBDRxFDvLTDlzYgZpB459sNtg+/R +PJpWBYd3+qHA9FIZNOSWKDcM9upFtpTUF2al+qkrq6usIVrZTJtcr5Bfbi8c5Aig +OwEGMvh/nrs/Lz3szD8hy+QP6pnPdj+KcZxqUDFrUYosC7wy04EEWbmPM68ormRZ +AoIBAAb6ql4dMcvvLBgRAnwOZ40Ddu5nw01mCedGcV6K5np1/Il7NX173hBlx6fj +AeGBp2lx4RYxmgJeDhTGeR5ajBSzcfoHnCbkacezn9C+IPUcjF+wBLn7ajPa6z3X +cFua+O9+xnH0Zfx7WwlAULakfTAzXwElUe1n80XtIFWHilUB3dQ9BKn2rInnFYrg +cyC+EnQpjNNxlkx6pk9pHlWgb+Rqn4t/cwsgpfCby2MR2Vp7R7h5AC1tyMvmRfkR +1nhzZI/+LHCUfhoIsH5aGr3gD9HmkDhylG9S3yu+3Xr10ATfiWV69Bf4Neu0wgSf +4LvMQKiAHJ5h+o0yN56wx8xaidg= +-----END PRIVATE KEY----- diff --git a/nginx/ssl/selfsigned.pem b/nginx/ssl/selfsigned.pem new file mode 100644 index 0000000..d162910 --- /dev/null +++ b/nginx/ssl/selfsigned.pem @@ -0,0 +1,34 @@ +-----BEGIN CERTIFICATE----- +MIIF1TCCA72gAwIBAgIUbXLgXyYE+q0YrsfSisbg4ZS3dXwwDQYJKoZIhvcNAQEL +BQAwejELMAkGA1UEBhMCTUwxEzARBgNVBAgMCk1yYWtvU3RhdGUxEjAQBgNVBAcM +CU1yYWtvQ2l0eTERMA8GA1UECgwIU2VjdXJpdHkxFjAUBgNVBAsMDUlUIERlcGFy +dG1lbnQxFzAVBgNVBAMMDm1yYWtvbWFrcy50ZWNoMB4XDTI0MTEwNTA4MjAzNFoX +DTM0MTEwMzA4MjAzNFowejELMAkGA1UEBhMCTUwxEzARBgNVBAgMCk1yYWtvU3Rh +dGUxEjAQBgNVBAcMCU1yYWtvQ2l0eTERMA8GA1UECgwIU2VjdXJpdHkxFjAUBgNV +BAsMDUlUIERlcGFydG1lbnQxFzAVBgNVBAMMDm1yYWtvbWFrcy50ZWNoMIICIjAN +BgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqM8bc/zM7oodLDmSieuVKBCQV1D3 +SESo7xfvum9AsVhA13bnW9bS8F/6IJhNql9qHmBkqFoCpcp6hVdnjAC3obDI/v0t +C/lmRsRfVpiP+9mF29li/+QBv0wVpmXiNWYubEsY+v+5nIwwX8WUVWM5qvx0jupn +eD+MDhpHIkLKCU2ftj1ujroGPN2MwtWTOJq21b2LgTBpV44MGma/BDJcsgIceqft +95EGDxVmF1TK2MbmI2iS+UFacyuRGEtPzrEdRXQ6aG/XaocBng2VgNBXyEFZUV/b +M+ct2gauHCJa1D6QFxNlsjuA4WRlcDOwAcxO1yh1ldP/NlYzDFwm0jgtY7gmaMAl +gzkMTJbo2Qwe9yX9ER1MKXH1zhjjWDFNZNj6C/ycjKbGK1J24dmqD5z9bY/fxyvs +GQcZaNtPGymfvxTMy5f7BdShotWZ2JvbkoVqhCakyuxSv+KBoe75lHAWyIvgW6X3 +tevl/wYP8HYaFpmArYpAiBMEislqQ1Or1l0BS7eqw69sV7aGolKxOUVGqxe3mrBv +gr7ZN/ESnnYs7uuwdCFADvQ1Qc/JUr39Gu/1OrrraMd09wCKvCF/s3LVzMyZSr1t +CkS2ny7/KdopvogEXtE3qMBVkSks1NyOSEKX4o+7/NlbJORt6fwkPTJh7+NH4BmB +6/3FDOTdne0JZ0cCAwEAAaNTMFEwHQYDVR0OBBYEFJuxinLOSkZphlBB4ZybDojV +XXWqMB8GA1UdIwQYMBaAFJuxinLOSkZphlBB4ZybDojVXXWqMA8GA1UdEwEB/wQF +MAMBAf8wDQYJKoZIhvcNAQELBQADggIBAEG9s5rqRbDNEd4jc3WDPYfaeeyODhYY +sULG7wtTwJ9PiIzAe+qZezrHwkC/R+xUguo3QDruN1qK1N2kZOMdCVkoENYFEBxn +prJ9hyACG6927RyDeAFE6SYz3LUA11aZk8LZ4y3B1iWWTrxscAn4XvaT29t6uAaj +8lhlMbomERgHK4JOwubbP5VpnG99TFkcAmAcJp5hD8nxrKo5boLBgJ5G7uxQrRYD +ZwXmRdwXWrrx7Gq7IZok+hWBtRMqiTUVSUS5yY26yqz0iDlGrU0rhh9zJ4X2Besk +XmFf1M8Yypa1rf+VpaxYGF8RxJp+Xskq/dUwoW19GDJRemD1zM4164mu7W7BArrQ +Qe/dzgdGr071TYjr1BJv9jEdSFjyTQ88uyrDmBoQJtsNGnSw+2oW6af/Dfkcjhp/ +y1Ff9L/R1vRhkJmLVbkcPf/KGCcAySW6fuK+owHzUp8g56JNFRwYpy8RhyoijTfh ++YsKMtJeP6pq7OADfmWveuWufLCz+zWzg1oaVESSo965to2NBTs1L7duAehtiHWI +ndSJ3DtNWlc9DKQQR9OKF8WPcpXlpVaYkJTbu6M2HHQ4weYJU+S1GaG+SMWXjuy8 +It92pRkkDpmv3nMhaHWylB1tVXAMUNAidoTjmYnZeNteGxkizRXiDrbjn1+iKL3r +eg6RBXu7I7Lb +-----END CERTIFICATE----- diff --git a/nginx/uwsgi_params b/nginx/uwsgi_params new file mode 100644 index 0000000..09c732c --- /dev/null +++ b/nginx/uwsgi_params @@ -0,0 +1,17 @@ + +uwsgi_param QUERY_STRING $query_string; +uwsgi_param REQUEST_METHOD $request_method; +uwsgi_param CONTENT_TYPE $content_type; +uwsgi_param CONTENT_LENGTH $content_length; + +uwsgi_param REQUEST_URI $request_uri; +uwsgi_param PATH_INFO $document_uri; +uwsgi_param DOCUMENT_ROOT $document_root; +uwsgi_param SERVER_PROTOCOL $server_protocol; +uwsgi_param REQUEST_SCHEME $scheme; +uwsgi_param HTTPS $https if_not_empty; + +uwsgi_param REMOTE_ADDR $remote_addr; +uwsgi_param REMOTE_PORT $remote_port; +uwsgi_param SERVER_PORT $server_port; +uwsgi_param SERVER_NAME $server_name;