| 1 | ##
|
|---|
| 2 |
|
|---|
| 3 | server {
|
|---|
| 4 | listen 9443 ssl http2 default_server;
|
|---|
| 5 | server_name _;
|
|---|
| 6 |
|
|---|
| 7 | ssl_certificate /etc/nginx/ssl/ssl.crt;
|
|---|
| 8 | ssl_certificate_key /etc/nginx/ssl/genrsa-des3_2048.key;
|
|---|
| 9 |
|
|---|
| 10 | ssl_session_cache shared:SSL:50m;
|
|---|
| 11 | ssl_session_timeout 5m;
|
|---|
| 12 |
|
|---|
| 13 | ssl_dhparam /etc/nginx/ssl/dhparam.pem;
|
|---|
| 14 |
|
|---|
| 15 | ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
|
|---|
| 16 |
|
|---|
| 17 | ssl_ciphers "ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4";
|
|---|
| 18 | ssl_prefer_server_ciphers on;
|
|---|
| 19 |
|
|---|
| 20 | root /usr/share/nginx/html/9443-default;
|
|---|
| 21 | location / {
|
|---|
| 22 | index index.html index.htm;
|
|---|
| 23 | }
|
|---|
| 24 | #error_page 404 /404.html;
|
|---|
| 25 | error_page 405 =200 $uri;
|
|---|
| 26 |
|
|---|
| 27 | error_page 500 502 503 504 /50x.html;
|
|---|
| 28 | location = /50x.html {
|
|---|
| 29 | root /usr/share/nginx/html;
|
|---|
| 30 | }
|
|---|
| 31 | }
|
|---|
| 32 |
|
|---|
| 33 | #
|
|---|
| 34 | server {
|
|---|
| 35 | listen 9443 ssl;
|
|---|
| 36 | server_name 192.168.1.77;
|
|---|
| 37 |
|
|---|
| 38 | ssl_certificate /etc/nginx/ssl/le-ec/0001_chain.pem;
|
|---|
| 39 | ssl_certificate_key /etc/nginx/ssl/le-ec/ec-private.key;
|
|---|
| 40 |
|
|---|
| 41 | ssl_session_cache shared:SSL:50m;
|
|---|
| 42 | ssl_session_timeout 5m;
|
|---|
| 43 |
|
|---|
| 44 | ssl_dhparam /etc/nginx/ssl/dhparam.pem;
|
|---|
| 45 |
|
|---|
| 46 | ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
|
|---|
| 47 |
|
|---|
| 48 | ssl_ciphers "ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4";
|
|---|
| 49 | ssl_prefer_server_ciphers on;
|
|---|
| 50 |
|
|---|
| 51 | root /usr/share/nginx/html/9443-77;
|
|---|
| 52 | location / {
|
|---|
| 53 | index index.html index.htm;
|
|---|
| 54 | }
|
|---|
| 55 | #error_page 404 /404.html;
|
|---|
| 56 | error_page 405 =200 $uri;
|
|---|
| 57 |
|
|---|
| 58 | error_page 500 502 503 504 /50x.html;
|
|---|
| 59 | location = /50x.html {
|
|---|
| 60 | root /usr/share/nginx/html;
|
|---|
| 61 | }
|
|---|
| 62 | }
|
|---|
| 63 |
|
|---|
| 64 | #
|
|---|
| 65 | server {
|
|---|
| 66 | listen 9443 ssl;
|
|---|
| 67 | server_name 127.0.0.1;
|
|---|
| 68 |
|
|---|
| 69 | ssl_certificate /etc/nginx/ssl/le-ec/0001_chain.pem;
|
|---|
| 70 | ssl_certificate_key /etc/nginx/ssl/le-ec/ec-private.key;
|
|---|
| 71 |
|
|---|
| 72 | ssl_session_cache shared:SSL:50m;
|
|---|
| 73 | ssl_session_timeout 5m;
|
|---|
| 74 |
|
|---|
| 75 | ssl_dhparam /etc/nginx/ssl/dhparam.pem;
|
|---|
| 76 |
|
|---|
| 77 | ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
|
|---|
| 78 |
|
|---|
| 79 | ssl_ciphers "ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4";
|
|---|
| 80 | ssl_prefer_server_ciphers on;
|
|---|
| 81 |
|
|---|
| 82 | root /usr/share/nginx/html/9443-lh;
|
|---|
| 83 | location / {
|
|---|
| 84 | index index.html index.htm;
|
|---|
| 85 | }
|
|---|
| 86 | #error_page 404 /404.html;
|
|---|
| 87 | error_page 405 =200 $uri;
|
|---|
| 88 |
|
|---|
| 89 | error_page 500 502 503 504 /50x.html;
|
|---|
| 90 | location = /50x.html {
|
|---|
| 91 | root /usr/share/nginx/html;
|
|---|
| 92 | }
|
|---|
| 93 | }
|
|---|
| 94 |
|
|---|
| 95 | #
|
|---|
| 96 | server {
|
|---|
| 97 | listen 9443 ssl;
|
|---|
| 98 | server_name example.com;
|
|---|
| 99 |
|
|---|
| 100 | ssl_certificate /etc/nginx/ssl/le-ec/0001_chain.pem;
|
|---|
| 101 | ssl_certificate_key /etc/nginx/ssl/le-ec/ec-private.key;
|
|---|
| 102 |
|
|---|
| 103 | ssl_session_cache shared:SSL:50m;
|
|---|
| 104 | ssl_session_timeout 5m;
|
|---|
| 105 |
|
|---|
| 106 | ssl_dhparam /etc/nginx/ssl/dhparam.pem;
|
|---|
| 107 |
|
|---|
| 108 | ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
|
|---|
| 109 |
|
|---|
| 110 | ssl_ciphers "ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4";
|
|---|
| 111 | ssl_prefer_server_ciphers on;
|
|---|
| 112 |
|
|---|
| 113 | root /usr/share/nginx/html/9443-dname;
|
|---|
| 114 | location / {
|
|---|
| 115 | index index.html index.htm;
|
|---|
| 116 | }
|
|---|
| 117 | #error_page 404 /404.html;
|
|---|
| 118 | error_page 405 =200 $uri;
|
|---|
| 119 |
|
|---|
| 120 | error_page 500 502 503 504 /50x.html;
|
|---|
| 121 | location = /50x.html {
|
|---|
| 122 | root /usr/share/nginx/html;
|
|---|
| 123 | }
|
|---|
| 124 | }
|
|---|
| 125 |
|
|---|