Merge branch 'main' of http://thinkcentre.local:3000/ChK/appServerPortalUI
This commit is contained in:
@@ -18,4 +18,4 @@ controller.server.schooltech.ch = /var/www/certbot
|
|||||||
portainer.server.schooltech.ch = /var/www/certbot
|
portainer.server.schooltech.ch = /var/www/certbot
|
||||||
simulation3a29.server.schooltech.ch = /var/www/certbot
|
simulation3a29.server.schooltech.ch = /var/www/certbot
|
||||||
[acme_renewal_info]
|
[acme_renewal_info]
|
||||||
ari_retry_after = 2026-02-07T08:36:28
|
ari_retry_after = 2026-02-14T07:10:40
|
||||||
|
|||||||
@@ -35,6 +35,7 @@ server {
|
|||||||
ssl_certificate /etc/letsencrypt/live/server.schooltech.ch/fullchain.pem;
|
ssl_certificate /etc/letsencrypt/live/server.schooltech.ch/fullchain.pem;
|
||||||
ssl_certificate_key /etc/letsencrypt/live/server.schooltech.ch/privkey.pem;
|
ssl_certificate_key /etc/letsencrypt/live/server.schooltech.ch/privkey.pem;
|
||||||
ssl_protocols TLSv1.2 TLSv1.3;
|
ssl_protocols TLSv1.2 TLSv1.3;
|
||||||
|
ssl_prefer_server_ciphers on;
|
||||||
|
|
||||||
# Einfach Verbindung schließen für unbekannte Hosts
|
# Einfach Verbindung schließen für unbekannte Hosts
|
||||||
return 444;
|
return 444;
|
||||||
@@ -66,6 +67,9 @@ server {
|
|||||||
proxy_set_header X-Real-IP $remote_addr;
|
proxy_set_header X-Real-IP $remote_addr;
|
||||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||||
proxy_set_header X-Forwarded-Proto $scheme;
|
proxy_set_header X-Forwarded-Proto $scheme;
|
||||||
|
|
||||||
|
proxy_buffering off;
|
||||||
|
proxy_request_buffering off;
|
||||||
}
|
}
|
||||||
|
|
||||||
# ------------------------------------------------------------
|
# ------------------------------------------------------------
|
||||||
@@ -85,6 +89,10 @@ server {
|
|||||||
|
|
||||||
# Security
|
# Security
|
||||||
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
|
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
|
||||||
|
|
||||||
|
# SSL
|
||||||
|
tcp_nopush on;
|
||||||
|
tcp_nodelay on;
|
||||||
}
|
}
|
||||||
|
|
||||||
# ------------------------------------------------------------
|
# ------------------------------------------------------------
|
||||||
|
|||||||
Reference in New Issue
Block a user