diff --git a/docker-compose.yml b/docker-compose.yml index 766864f..666fda7 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -19,7 +19,8 @@ services: volumes: - ./certs:/etc/letsencrypt - ./html:/var/www/html -# command: certonly --webroot --webroot-path=/var/www/html --email prbigoon@gmail.com --agree-tos --no-eff-email -d git.evil-bird.ru + +# command: certonly --webroot --webroot-path=/var/www/html --email your.email@example --agree-tos --no-eff-email -d your.domain.example command: renew --webroot --webroot-path=/var/www/html entrypoint: /bin/sh -c "trap exit TERM; while :; do certbot renew --webroot --webroot-path=/var/www/html; sleep 12h & wait $${!}; done;" depends_on: diff --git a/html/stagged_nginx.conf b/html/stagged_nginx.conf index 9eabd87..58b3833 100644 --- a/html/stagged_nginx.conf +++ b/html/stagged_nginx.conf @@ -3,7 +3,7 @@ events {} http { server { listen 80; - server_name git.evil-bird.ru; + server_name your.domain.example; location /.well-known/acme-challenge/ { root /var/www/html; @@ -17,10 +17,10 @@ http { server { listen 443; # ssl; - server_name git.evil-bird.ru; + server_name your.domain.example; - # ssl_certificate /etc/letsencrypt/live/git.evil-bird.ru/fullchain.pem; - # ssl_certificate_key /etc/letsencrypt/live/git.evil-bird.ru/privkey.pem; + # ssl_certificate /etc/letsencrypt/live/your.domain.example/fullchain.pem; + # ssl_certificate_key /etc/letsencrypt/live/your.domain.example/privkey.pem; location / { root /var/www/html; diff --git a/nginx.conf b/nginx.conf index 0e7240d..c3ab9e9 100644 --- a/nginx.conf +++ b/nginx.conf @@ -3,10 +3,15 @@ events {} http { log_format main '$remote_addr - $remote_user [$time_local] "$request" ' '$status $body_bytes_sent "$http_referer" ' - '"$http_user_agent" "$http_x_forwarded_for"'; + '"$http_user_agent" "$http_x_forwarded_for" "$host"'; + + access_log /var/log/nginx/access.log main; + error_log /var/log/nginx/error.log; + + server { listen 80; - server_name git.evil-bird.ru; + server_name your.domain.example; location /.well-known/acme-challenge/ { root /var/www/html; @@ -19,13 +24,13 @@ http { server { listen 443 ssl; - server_name git.evil-bird.ru; + server_name your.domain.example; - ssl_certificate /etc/letsencrypt/live/git.evil-bird.ru/fullchain.pem; - ssl_certificate_key /etc/letsencrypt/live/git.evil-bird.ru/privkey.pem; + ssl_certificate /etc/letsencrypt/live/your.domain.example/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/your.domain.example/privkey.pem; location / { - proxy_pass http://10.10.1.10:3000; + proxy_pass http://; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;