+server {
+ listen 80;
+ server_name localhost;
+ return 301 https://localhost$request_uri;
+}
+
+server {
+ listen 80;
+ server_name filesdomain;
+ return 301 https://filesdomain$request_uri;
+}
+
server{
- listen 80;
+ listen 443 ssl;
server_name localhost;
- # ssl on;
- # ssl_certificate /path/to/fullchain.pem;
- # ssl_certificate_key /path/to/privkey.pem;
- # ssl_protocols TLSv1.2 TLSv1.3;
- # ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH';
- # ssl_ecdh_curve secp384r1;
+ ssl on;
+ ssl_certificate /etc/nginx/ssl/fullchain.pem;
+ ssl_certificate_key /etc/nginx/ssl/privkey.pem;
+ ssl_protocols TLSv1.2 TLSv1.3;
+ ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH';
+ ssl_ecdh_curve secp384r1;
root /var/www/uguu/dist/;
autoindex on;
expires 30d;
}
- location ^~ /files/ {
- alias /var/www/files/;
- index index.html index.htm;
- autoindex off;
- include mime.types;
- types {
- text/plain php;
- }
- }
gzip on;
gzip_min_length 1000;
gzip_comp_level 6;
include fastcgi_params;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
}
-}
\ No newline at end of file
+}
+
+server {
+ listen 443 ssl;
+ server_name filesdomain;
+
+ ssl on;
+ ssl_certificate /etc/nginx/ssl/fullchain.pem;
+ ssl_certificate_key /etc/nginx/ssl/privkey.pem;
+ ssl_protocols TLSv1.2 TLSv1.3;
+ ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH';
+ ssl_ecdh_curve secp384r1;
+
+ root /var/www/files/;
+ autoindex off;
+ access_log off;
+ index index.html;
+}