| 1 | server {
|
|---|
| 2 | listen 80;
|
|---|
| 3 | listen [::]:80;
|
|---|
| 4 |
|
|---|
| 5 | server_name xxxxxx;
|
|---|
| 6 |
|
|---|
| 7 | return 301 https://$host$request_uri;
|
|---|
| 8 | }
|
|---|
| 9 |
|
|---|
| 10 | server {
|
|---|
| 11 | listen 443 ssl default_server;
|
|---|
| 12 | listen [::]:443 ssl default_server;
|
|---|
| 13 |
|
|---|
| 14 | error_page 400 /auth_required.html;
|
|---|
| 15 | error_page 401 /auth_required.html;
|
|---|
| 16 | error_page 403 404 =200 /custom_404.html;
|
|---|
| 17 | error_page 500 502 503 504 =200 /custom_50x.html;
|
|---|
| 18 |
|
|---|
| 19 | server_tokens off;
|
|---|
| 20 |
|
|---|
| 21 | server_name xxxxxx;
|
|---|
| 22 |
|
|---|
| 23 | root /var/www/html/;
|
|---|
| 24 |
|
|---|
| 25 | ssl_protocols TLSv1.2;
|
|---|
| 26 | ssl_certificate /services/etc/keys/config/internal-dev.cert;
|
|---|
| 27 | ssl_certificate_key /services/etc/keys/config/internal-dev.key;
|
|---|
| 28 | ssl_client_certificate /services/etc/keys/ca.cert;
|
|---|
| 29 | ssl_ciphers "ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:ECDH-RSA-AES256-GCM-SHA384:ECDH-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDH-RSA-AES128-GCM-SHA256:ECDH-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-CBC-SHA384:ECDHE-ECDSA-AES256-CBC-SHA384:ECDHE-RSA-AES256-CBC-SHA:ECDHE-ECDSA-AES256-CBC-SHA:ECDH-RSA-AES256-CBC-SHA384:ECDH-ECDSA-AES256-CBC-SHA384:ECDH-RSA-AES256-CBC-SHA:ECDH-ECDSA-AES256-CBC-SHA:ECDHE-RSA-AES128-CBC-SHA256:ECDHE-ECDSA-AES128-CBC-SHA256:ECDHE-RSA-AES128-CBC-SHA:ECDHE-ECDSA-AES128-CBC-SHA:ECDH-RSA-AES128-CBC-SHA256:ECDH-ECDSA-AES128-CBC-SHA256:ECDH-RSA-AES128-CBC-SHA:ECDH-ECDSA-AES128-CBC-SHA:ECDHE-RSA-AES128-GCM-SHA256:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4:!MEDIUM:!LOW:!SSLv2";
|
|---|
| 30 | ssl_prefer_server_ciphers on;
|
|---|
| 31 | ssl_session_cache shared:SSL:10m;
|
|---|
| 32 | ssl_verify_client on;
|
|---|
| 33 |
|
|---|
| 34 | location /xxxxxx {
|
|---|
| 35 | autoindex on;
|
|---|
| 36 | auth_basic "xxxxxx";
|
|---|
| 37 | auth_basic_user_file /services/etc/security/xxxxxx.passwd;
|
|---|
| 38 | }
|
|---|
| 39 |
|
|---|
| 40 | }
|
|---|
| 41 |
|
|---|
