mirror of
https://gitlab.com/MoonTestUse1/AdministrationItDepartmens.git
synced 2025-08-14 00:25:46 +02:00
вв
This commit is contained in:
@@ -2,16 +2,11 @@ version: '3.8'
|
|||||||
|
|
||||||
services:
|
services:
|
||||||
nginx:
|
nginx:
|
||||||
build:
|
image: nginx:alpine
|
||||||
context: .
|
|
||||||
dockerfile: docker/nginx/Dockerfile
|
|
||||||
ports:
|
ports:
|
||||||
- "80:80"
|
- "80:80"
|
||||||
- "443:443"
|
|
||||||
volumes:
|
volumes:
|
||||||
- ./docker/nginx:/etc/nginx/conf.d
|
- ./docker/nginx:/etc/nginx/conf.d
|
||||||
- ./letsencrypt:/etc/letsencrypt
|
|
||||||
- ./certbot-www:/var/www/certbot
|
|
||||||
depends_on:
|
depends_on:
|
||||||
- frontend
|
- frontend
|
||||||
- backend
|
- backend
|
||||||
|
|||||||
@@ -6,41 +6,10 @@ upstream frontend_upstream {
|
|||||||
server frontend:5173;
|
server frontend:5173;
|
||||||
}
|
}
|
||||||
|
|
||||||
# Редирект с HTTP на HTTPS
|
|
||||||
server {
|
server {
|
||||||
listen 80;
|
listen 80;
|
||||||
server_name itformhelp.ru www.itformhelp.ru;
|
server_name itformhelp.ru www.itformhelp.ru;
|
||||||
|
|
||||||
location /.well-known/acme-challenge/ {
|
|
||||||
root /var/www/certbot;
|
|
||||||
}
|
|
||||||
|
|
||||||
location / {
|
|
||||||
return 301 https://$host$request_uri;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
# Основной HTTPS сервер
|
|
||||||
server {
|
|
||||||
listen 443 ssl;
|
|
||||||
http2 on;
|
|
||||||
server_name itformhelp.ru www.itformhelp.ru;
|
|
||||||
|
|
||||||
ssl_certificate /etc/letsencrypt/live/itformhelp.ru/fullchain.pem;
|
|
||||||
ssl_certificate_key /etc/letsencrypt/live/itformhelp.ru/privkey.pem;
|
|
||||||
|
|
||||||
# Дополнительные настройки SSL
|
|
||||||
ssl_trusted_certificate /etc/letsencrypt/live/itformhelp.ru/chain.pem;
|
|
||||||
ssl_stapling on;
|
|
||||||
ssl_stapling_verify on;
|
|
||||||
resolver 8.8.8.8 8.8.4.4 valid=300s;
|
|
||||||
resolver_timeout 5s;
|
|
||||||
|
|
||||||
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
|
|
||||||
add_header X-Frame-Options SAMEORIGIN;
|
|
||||||
add_header X-Content-Type-Options nosniff;
|
|
||||||
add_header X-XSS-Protection "1; mode=block";
|
|
||||||
|
|
||||||
# Frontend proxy
|
# Frontend proxy
|
||||||
location / {
|
location / {
|
||||||
proxy_pass http://frontend_upstream;
|
proxy_pass http://frontend_upstream;
|
||||||
@@ -72,5 +41,5 @@ server {
|
|||||||
server {
|
server {
|
||||||
listen 80;
|
listen 80;
|
||||||
server_name 185.139.70.62;
|
server_name 185.139.70.62;
|
||||||
return 301 https://itformhelp.ru$request_uri;
|
return 301 http://itformhelp.ru$request_uri;
|
||||||
}
|
}
|
||||||
Reference in New Issue
Block a user