60 lines
1.6 KiB
Plaintext
60 lines
1.6 KiB
Plaintext
server {
|
|
listen 202.61.255.100:443 ssl http2;
|
|
|
|
server_name web.lib.radio.fm www.lib.radio.fm;
|
|
|
|
ssl_certificate /etc/ssl/radio/crt.crt;
|
|
ssl_certificate_key /etc/ssl/radio/private/key.key;
|
|
|
|
ssl_session_timeout 1d;
|
|
ssl_session_cache shared:MozSSL:10m; # about 40000 sessions
|
|
ssl_session_tickets off;
|
|
ssl_protocols TLSv1.2 TLSv1.3;
|
|
ssl_prefer_server_ciphers off;
|
|
add_header Strict-Transport-Security "max-age=63072000" always;
|
|
ssl_stapling on;
|
|
ssl_stapling_verify on;
|
|
ssl_trusted_certificate /etc/ssl/ca-bundle.pem;
|
|
resolver 127.0.0.4;
|
|
|
|
location / {
|
|
root /srv/www/radio;
|
|
index index.php;
|
|
}
|
|
|
|
location ~ [^/]\.php(/|$) {
|
|
root /srv/www/radio;
|
|
index index.php;
|
|
fastcgi_pass 172.168.100.3:9100;
|
|
include fastcgi_params;
|
|
fastcgi_param SCRIPT_FILENAME /srv/www/radio/$fastcgi_script_name;
|
|
fastcgi_index index.php;
|
|
}
|
|
}
|
|
server {
|
|
listen 202.61.255.100:443 ssl http2;
|
|
|
|
server_name lib.radio.am web.lib.radio.am www.lib.radio.am;
|
|
|
|
ssl_certificate /etc/ssl/radio/crt.crt;
|
|
ssl_certificate_key /etc/ssl/radio/private/key.key;
|
|
|
|
ssl_session_timeout 1d;
|
|
ssl_session_cache shared:MozSSL:10m; # about 40000 sessions
|
|
ssl_session_tickets off;
|
|
ssl_protocols TLSv1.2 TLSv1.3;
|
|
ssl_prefer_server_ciphers off;
|
|
add_header Strict-Transport-Security "max-age=63072000" always;
|
|
ssl_stapling on;
|
|
ssl_stapling_verify on;
|
|
ssl_trusted_certificate /etc/ssl/ca-bundle.pem;
|
|
resolver 127.0.0.4;
|
|
|
|
location / {
|
|
root /srv/www/icedrop-master;
|
|
index index.html;
|
|
add_header Access-Control-Allow-Origin '*' always;
|
|
}
|
|
}
|
|
|