Browse Source

Initial commit

Denis V. Dedkov 1 year ago
commit
c4a01f3331
9 changed files with 163 additions and 0 deletions
  1. 47 0
      acme.conf
  2. 18 0
      dended.ru.conf
  3. 13 0
      dm.dended.ru.conf
  4. 13 0
      docker.dended.ru.conf
  5. 14 0
      gogs.dended.ru.conf
  6. 13 0
      keenetic.dended.ru.conf
  7. 13 0
      kuma.dended.ru.conf
  8. 19 0
      noolite.dended.ru.conf
  9. 13 0
      zabbix.dended.ru.conf

+ 47 - 0
acme.conf

@@ -0,0 +1,47 @@
+user  angie;
+worker_processes  auto;
+worker_rlimit_nofile 65536;
+
+error_log  /var/log/angie/error.log notice;
+pid        /run/angie/angie.pid;
+
+events {
+    worker_connections  65536;
+}
+
+
+http {
+    include       /etc/angie/mime.types;
+    default_type  application/octet-stream;
+
+    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
+                      '$status $body_bytes_sent "$http_referer" '
+                      '"$http_user_agent" "$http_x_forwarded_for"';
+
+    log_format extended '$remote_addr - $remote_user [$time_local] "$request" '
+                        '$status $body_bytes_sent "$http_referer" rt="$request_time" '
+                        '"$http_user_agent" "$http_x_forwarded_for" '
+                        'h="$host" sn="$server_name" ru="$request_uri" u="$uri" '
+                        'ucs="$upstream_cache_status" ua="$upstream_addr" us="$upstream_status" '
+                        'uct="$upstream_connect_time" urt="$upstream_response_time"';
+
+    access_log  /var/log/angie/access.log  main;
+
+    sendfile        on;
+    #tcp_nopush     on;
+
+    keepalive_timeout  65;
+
+    gzip  on;
+
+    resolver 8.8.8.8 ipv6=off; # требуется для директивы 'acme_client'
+
+    acme_client dended https://acme-v02.api.letsencrypt.org/directory;
+
+    include /etc/angie/http.d/*.conf;
+}
+
+#stream {
+#    include /etc/angie/stream.d/*.conf;
+#}
+

+ 18 - 0
dended.ru.conf

@@ -0,0 +1,18 @@
+server {
+	root /var/www/html;
+
+	index index.html index.htm;
+
+	server_name dended.ru;
+        acme dended;
+
+        listen 443 ssl;
+
+        ssl_certificate $acme_cert_dended;
+        ssl_certificate_key $acme_cert_key_dended;
+}
+
+server {
+        listen 80;
+        return 301 https://$host$request_uri;
+}

+ 13 - 0
dm.dended.ru.conf

@@ -0,0 +1,13 @@
+server {
+       server_name dm.dended.ru;
+       acme dended;
+
+       location / {
+               proxy_pass http://192.168.1.94:5050;
+       }
+
+       listen 443 ssl;
+       ssl_certificate $acme_cert_dended;
+       ssl_certificate_key $acme_cert_key_dended;
+}
+

+ 13 - 0
docker.dended.ru.conf

@@ -0,0 +1,13 @@
+server {
+       server_name docker.dended.ru;
+       acme dended;
+
+       location / {
+               proxy_pass http://192.168.1.94:5000;
+       }
+
+       listen 443 ssl;
+       ssl_certificate $acme_cert_dended;
+       ssl_certificate_key $acme_cert_key_dended;
+}
+

+ 14 - 0
gogs.dended.ru.conf

@@ -0,0 +1,14 @@
+server {
+       server_name gogs.dended.ru;
+       client_max_body_size 50M;
+       acme dended;
+
+       location / {
+               proxy_pass http://192.168.1.77:3000;
+       }
+
+       listen 443 ssl;
+       ssl_certificate $acme_cert_dended;
+       ssl_certificate_key $acme_cert_key_dended;
+}
+

+ 13 - 0
keenetic.dended.ru.conf

@@ -0,0 +1,13 @@
+server {
+       server_name keenetic.dended.ru;
+       acme dended;
+
+       location / {
+               proxy_pass http://192.168.1.1;
+       }
+
+       listen 443 ssl;
+       ssl_certificate $acme_cert_dended;
+       ssl_certificate_key $acme_cert_key_dended;
+}
+

+ 13 - 0
kuma.dended.ru.conf

@@ -0,0 +1,13 @@
+server {
+       server_name kuma.dended.ru;
+       acme dended;
+
+       location / {
+               proxy_pass http://192.168.1.77:3001;
+       }
+
+       listen 443 ssl;
+       ssl_certificate $acme_cert_dended;
+       ssl_certificate_key $acme_cert_key_dended;
+}
+

+ 19 - 0
noolite.dended.ru.conf

@@ -0,0 +1,19 @@
+server {
+       server_name noolite.dended.ru;
+       acme dended;
+
+       location / {
+                proxy_pass http://192.168.1.94:8000;
+       }
+
+       location ~ /(noolite|static/channels.js) {
+                auth_basic "Restricted Area";
+                auth_basic_user_file /etc/nginx/auth.basic;
+                proxy_pass http://192.168.1.77:8080;
+      }
+
+      listen 443 ssl;
+      ssl_certificate $acme_cert_dended;
+      ssl_certificate_key $acme_cert_key_dended;
+}
+

+ 13 - 0
zabbix.dended.ru.conf

@@ -0,0 +1,13 @@
+server {
+       server_name zabbix.dended.ru;
+       acme dended;
+
+       location / {
+               proxy_pass http://192.168.1.94;
+       }
+
+       listen 443 ssl;
+       ssl_certificate $acme_cert_dended;
+       ssl_certificate_key $acme_cert_key_dended;
+}
+