Files
opensourcepos/docker/data/nginx/nginx.tmpl
Jerry Hsu 24687756c1 fix Let's Encrypt fail on host install using docker
nginx container keep crashing while installing due to
wrong configuration file and ssl_certificate path mismatch.

- replace ssl_certificate path to match custom domain
- use correct URL to download files from certbot repo
2020-09-01 21:43:55 +08:00

70 lines
1.9 KiB
Cheetah

worker_processes auto;
events {
worker_connections 1024;
}
http {
error_log /etc/nginx/error_log.log warn;
server {
listen 80;
server_name ${WEB_DOMAIN};
server_tokens off;
location /.well-known/acme-challenge/ {
root /var/www/certbot;
}
location / {
return 301 https://${ESC}host${ESC}request_uri;
}
}
server {
listen 443 ssl;
server_name ${WEB_DOMAIN};
server_tokens off;
client_max_body_size 10M;
ssl_certificate /etc/letsencrypt/live/${WEB_DOMAIN}/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/${WEB_DOMAIN}/privkey.pem;
include /etc/letsencrypt/options-ssl-nginx.conf;
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
location / {
proxy_pass http://ospos:80;
proxy_redirect off;
proxy_set_header Host ${ESC}host;
proxy_set_header X-Real-IP ${ESC}remote_addr;
proxy_set_header X-Forwarded-For ${ESC}proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Host ${ESC}server_name;
proxy_set_header X-Forwarded-Proto ${ESC}scheme;
}
}
server {
listen 8000 ssl;
server_name ${WEB_DOMAIN};
server_tokens off;
ssl_certificate /etc/letsencrypt/live/${WEB_DOMAIN}/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/${WEB_DOMAIN}/privkey.pem;
include /etc/letsencrypt/options-ssl-nginx.conf;
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
location / {
proxy_pass http://phpmyadmin:80;
proxy_redirect off;
proxy_set_header Host ${ESC}host;
proxy_set_header X-Real-IP ${ESC}remote_addr;
proxy_set_header X-Forwarded-For ${ESC}proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Host ${ESC}server_name;
proxy_set_header X-Forwarded-Proto ${ESC}scheme;
}
}
}