mirror of
https://github.com/certbot/certbot.git
synced 2026-07-28 08:05:31 +02:00
68 lines
1.9 KiB
Plaintext
68 lines
1.9 KiB
Plaintext
server {
|
|
listen 80;
|
|
#listen [::]:80 default_server ipv6only=on;
|
|
root /var/www/random616_log/;
|
|
server_name random12800.example.org;
|
|
|
|
# pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
|
|
location ~ \.php$ {
|
|
fastcgi_split_path_info ^(.+\.php)(/.+)$;
|
|
# NOTE: You should have "cgi.fix_pathinfo = 0;" in php.ini
|
|
|
|
# With php5-fpm:
|
|
fastcgi_pass unix:/var/run/php5-fpm.sock;
|
|
fastcgi_index index.php;
|
|
include fastcgi_params;
|
|
}
|
|
|
|
# deny access to .htaccess files, if Apache's document root
|
|
# concurs with nginx's one
|
|
location ~ /\.ht {
|
|
deny all;
|
|
}
|
|
|
|
location /nginx_status {
|
|
stub_status on;
|
|
access_log off;
|
|
allow 127.0.0.1;
|
|
deny all;
|
|
}
|
|
|
|
access_log /var/log/nginx/random12543/access.log combined_plus;
|
|
error_log /var/log/nginx/random12543/error.log;
|
|
}
|
|
|
|
server {
|
|
listen 443 default_server;
|
|
#listen [::]:443 default_server ipv6only=on;
|
|
root /var/www/random616_log/;
|
|
server_name random12800.example.org;
|
|
|
|
# We created (will create) this SSL certificate ourselves, using our own CA. This way, we can control strictly which CA the XXX trusts.
|
|
# See ytec #6244
|
|
# However, we're working on a fix for high SSL overhead. We're hoping to be able to keep the connections open between log POSTs, like SSL can.
|
|
ssl on;
|
|
ssl_certificate /etc/ssl/public/random12800.example.org.crt;
|
|
ssl_certificate_key /etc/ssl/private/random12800.example.org.key;
|
|
|
|
# pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
|
|
location ~ \.php$ {
|
|
fastcgi_split_path_info ^(.+\.php)(/.+)$;
|
|
# NOTE: You should have "cgi.fix_pathinfo = 0;" in php.ini
|
|
|
|
# With php5-fpm:
|
|
fastcgi_pass unix:/var/run/php5-fpm.sock;
|
|
fastcgi_index index.php;
|
|
include fastcgi_params;
|
|
}
|
|
|
|
# deny access to .htaccess files, if Apache's document root
|
|
# concurs with nginx's one
|
|
location ~ /\.ht {
|
|
deny all;
|
|
}
|
|
|
|
access_log /var/log/nginx/random12543/access.log combined_plus;
|
|
error_log /var/log/nginx/random12543/error.log;
|
|
}
|