diff --git a/NginxConf/LEEME.md b/NginxConf/LEEME.md new file mode 100644 index 00000000..b9b06e0e --- /dev/null +++ b/NginxConf/LEEME.md @@ -0,0 +1,2 @@ +# Para instalar el certificado let's encrypt hay que llamar a certbot -t +# diff --git a/NginxConf/ddns-net.conf b/NginxConf/ddns-net.conf new file mode 100644 index 00000000..35da73c0 --- /dev/null +++ b/NginxConf/ddns-net.conf @@ -0,0 +1,34 @@ +server { + server_name reymota.ddns.net; + + location / { + proxy_pass http://127.0.0.1:30580/; + proxy_set_header X-Forwarded-Host $host; + proxy_set_header X-Forwarded-Server $host; + proxy_set_header X-Forwarded-Proto $scheme; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header Host $host; + client_max_body_size 64M; + proxy_read_timeout 300s; + } + + + listen 443 ssl; # managed by Certbot + ssl_certificate /etc/letsencrypt/live/reymota.ddns.net/fullchain.pem; # managed by Certbot + ssl_certificate_key /etc/letsencrypt/live/reymota.ddns.net/privkey.pem; # managed by Certbot + include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot + ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot + +} +server { + if ($host = reymota.ddns.net) { + return 301 https://$host$request_uri; + } # managed by Certbot + + + server_name reymota.ddns.net; + listen 80; + return 404; # managed by Certbot + + +} diff --git a/NginxConf/default b/NginxConf/default new file mode 100644 index 00000000..9117e378 --- /dev/null +++ b/NginxConf/default @@ -0,0 +1,91 @@ +## +# You should look at the following URL's in order to grasp a solid understanding +# of Nginx configuration files in order to fully unleash the power of Nginx. +# https://www.nginx.com/resources/wiki/start/ +# https://www.nginx.com/resources/wiki/start/topics/tutorials/config_pitfalls/ +# https://wiki.debian.org/Nginx/DirectoryStructure +# +# In most cases, administrators will remove this file from sites-enabled/ and +# leave it as reference inside of sites-available where it will continue to be +# updated by the nginx packaging team. +# +# This file will automatically load configuration files provided by other +# applications, such as Drupal or Wordpress. These applications will be made +# available underneath a path with that package name, such as /drupal8. +# +# Please see /usr/share/doc/nginx-doc/examples/ for more detailed examples. +## + +# Default server configuration +# +server { + listen 80 default_server; + listen [::]:80 default_server; + + # SSL configuration + # + # listen 443 ssl default_server; + # listen [::]:443 ssl default_server; + # + # Note: You should disable gzip for SSL traffic. + # See: https://bugs.debian.org/773332 + # + # Read up on ssl_ciphers to ensure a secure configuration. + # See: https://bugs.debian.org/765782 + # + # Self signed certs generated by the ssl-cert package + # Don't use them in a production server! + # + # include snippets/snakeoil.conf; + + root /var/www/html; + + # Add index.php to the list if you are using PHP + index index.html index.htm index.nginx-debian.html; + + server_name _; + + location / { + # First attempt to serve request as file, then + # as directory, then fall back to displaying a 404. + try_files $uri $uri/ =404; + } + + # pass PHP scripts to FastCGI server + # + #location ~ \.php$ { + # include snippets/fastcgi-php.conf; + # + # # With php-fpm (or other unix sockets): + # fastcgi_pass unix:/var/run/php/php7.4-fpm.sock; + # # With php-cgi (or other tcp sockets): + # fastcgi_pass 127.0.0.1:9000; + #} + + # deny access to .htaccess files, if Apache's document root + # concurs with nginx's one + # + #location ~ /\.ht { + # deny all; + #} +} + + +# Virtual Host configuration for example.com +# +# You can move that to a different file under sites-available/ and symlink that +# to sites-enabled/ to enable it. +# +#server { +# listen 80; +# listen [::]:80; +# +# server_name example.com; +# +# root /var/www/example.com; +# index index.html; +# +# location / { +# try_files $uri $uri/ =404; +# } +#} diff --git a/NginxConf/firefly-reymota.conf b/NginxConf/firefly-reymota.conf new file mode 100644 index 00000000..9664c07c --- /dev/null +++ b/NginxConf/firefly-reymota.conf @@ -0,0 +1,34 @@ +server { + server_name firefly.reymota.es; + + location / { + proxy_pass http://127.0.0.1:30880/; + proxy_set_header X-Forwarded-Host $host; + proxy_set_header X-Forwarded-Server $host; + proxy_set_header X-Forwarded-Proto $scheme; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header Host $host; + client_max_body_size 64M; + proxy_read_timeout 300s; + } + + + listen 443 ssl; # managed by Certbot + ssl_certificate /etc/letsencrypt/live/firefly.reymota.es/fullchain.pem; # managed by Certbot + ssl_certificate_key /etc/letsencrypt/live/firefly.reymota.es/privkey.pem; # managed by Certbot + include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot + ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot + +} +server { + if ($host = firefly.reymota.es) { + return 301 https://$host$request_uri; + } # managed by Certbot + + + server_name firefly.reymota.es; + listen 80; + return 404; # managed by Certbot + + +} diff --git a/NginxConf/miweb.conf b/NginxConf/miweb.conf new file mode 100644 index 00000000..19d079da --- /dev/null +++ b/NginxConf/miweb.conf @@ -0,0 +1,34 @@ +server { + server_name reymota.duckdns.org; + + location / { + proxy_pass http://127.0.0.1:8080/; + proxy_set_header X-Forwarded-Host $host; + proxy_set_header X-Forwarded-Server $host; + proxy_set_header X-Forwarded-Proto $scheme; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header Host $host; + client_max_body_size 64M; + proxy_read_timeout 300s; + } + + + listen 443 ssl; # managed by Certbot + ssl_certificate /etc/letsencrypt/live/reymota.duckdns.org/fullchain.pem; # managed by Certbot + ssl_certificate_key /etc/letsencrypt/live/reymota.duckdns.org/privkey.pem; # managed by Certbot + include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot + ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot + +} +server { + if ($host = reymota.duckdns.org) { + return 301 https://$host$request_uri; + } # managed by Certbot + + + server_name reymota.duckdns.org; + listen 80; + return 404; # managed by Certbot + + +} diff --git a/NginxConf/plantilla.conf b/NginxConf/plantilla.conf new file mode 100644 index 00000000..9f42b246 --- /dev/null +++ b/NginxConf/plantilla.conf @@ -0,0 +1,20 @@ +server { + ## + # Aquí va el nombre del servidor + ## + server_name firefly.reymota.es; + + location / { + ## + # El puerto tiene que ser el del servicio por el que la aplicación escucha + ## + proxy_pass http://127.0.0.1:30880/; + proxy_set_header X-Forwarded-Host $host; + proxy_set_header X-Forwarded-Server $host; + proxy_set_header X-Forwarded-Proto $scheme; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header Host $host; + client_max_body_size 64M; + proxy_read_timeout 300s; + } +}