nathan/ptcoffee_django
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add ssl section for forwarded domain

Browse Source
This commit is contained in:
Nathan Chapman 2024-01-23 08:44:56 -07:00
parent 7710064a83
commit a122003265
1 changed files with 23 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

25
nginx/prod.conf
View File

@ -60,6 +60,27 @@ server {
server {
server_name porttownsendcoffee.com www.porttownsendcoffee.com;
return 301 http://ptcoffee.com;
listen 80;
server_name porttownsendcoffee.com www.porttownsendcoffee.com;
return 301 http://ptcoffee.com;
}
server {
listen 443 ssl;
server_name porttownsendcoffee.com www.porttownsendcoffee.com;
# SSL
ssl_certificate /etc/letsencrypt/live/porttownsendcoffee.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/porttownsendcoffee.com/privkey.pem;
ssl_session_cache shared:le_nginx_SSL:10m;
ssl_session_timeout 1440m;
ssl_session_tickets off;
ssl_protocols TLSv1.2 TLSv1.3;
ssl_prefer_server_ciphers off;
ssl_ciphers "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384";
return 301 https://ptcoffee.com;
}