NoPaste

NGINX Reverse Proxy Konfiguration für Typo3

von heisenberg

SNIPPET_TEXT:
  1. server {
  2.  
  3.     listen 1.2.3.4:80 default_server;
  4.     server_name domain.org www.domain.org;
  5.     return 301 https://www.domain.org$uri;
  6.  
  7. }
  8.  
  9. server {
  10.         listen 1.2.3.4:443 ssl;
  11.  
  12.         server_name               domain.org;
  13.         ssl_certificate           /etc/ssl/private/domain.org/bundle.pem;
  14.         ssl_certificate_key       /etc/ssl/private/domain.org/domain.org.key;
  15.  
  16.         ssl_session_cache  builtin:1000  shared:SSL:10m;
  17.         ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
  18.         ssl_ciphers HIGH:!aNULL:!eNULL:!EXPORT:!CAMELLIA:!DES:!MD5:!PSK:!RC4;
  19.         ssl_prefer_server_ciphers on;
  20.  
  21.         return 301 https://www.domain.org$uri;
  22.  
  23. }
  24.  
  25. server {
  26.         listen 1.2.3.4:443 ssl;
  27.  
  28.         server_name               www.domain.org;
  29.         ssl_certificate           /etc/ssl/private/www.domain.org/bundle.pem;
  30.         ssl_certificate_key       /etc/ssl/private/www.domain.org/domain.org.key;
  31.  
  32.         ssl_session_cache  builtin:1000  shared:SSL:10m;
  33.         ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
  34.         ssl_ciphers HIGH:!aNULL:!eNULL:!EXPORT:!CAMELLIA:!DES:!MD5:!PSK:!RC4;
  35.         ssl_prefer_server_ciphers on;
  36.  
  37.         location / {
  38.  
  39.             proxy_pass                          http://127.0.0.1:8080;
  40.             proxy_set_header  Host              $http_host;   # required for docker client's sake
  41.             proxy_set_header  X-Real-IP         $remote_addr; # pass on real client's IP
  42.             proxy_set_header  X-Forwarded-For   $proxy_add_x_forwarded_for;
  43.             proxy_set_header  X-Forwarded-Proto https;
  44.             proxy_read_timeout                  900;
  45.             proxy_http_version 1.1;
  46.             proxy_set_header Upgrade $http_upgrade;
  47.             proxy_set_header Connection "Upgrade";
  48.         }
  49.  
  50. }

Quellcode

Hier kannst du den Code kopieren und ihn in deinen bevorzugten Editor einfügen. PASTEBIN_DOWNLOAD_SNIPPET_EXPLAIN