Update gipat

This commit is contained in:
2025-11-01 15:12:25 +00:00
parent 4708cb0f5b
commit 440e140618
9 changed files with 137 additions and 3 deletions

View File

@@ -0,0 +1,23 @@
map $http_upgrade $connection_upgrade {
default upgrade;
'' close;
}
server {
server_name home-kush.maksim-pankov.ru;
location / {
proxy_pass http://192.168.0.101:8123/;
proxy_set_header Host $host;
proxy_http_version 1.1;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $connection_upgrade;
}
listen 443 ssl; # managed by Certbot
ssl_certificate /etc/letsencrypt/live/home-kush.maksim-pankov.ru/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/home-kush.maksim-pankov.ru/privkey.pem; # managed by Certbot
}

View File

@@ -2,12 +2,17 @@ server {
server_name cloud.maksim-pankov.ru;
location / {
proxy_pass http://gipat:5002/;
sub_filter "http://gipat:5002/" "https://cloud.maksim-pankov.ru/";
sub_filter "http://gipat:5002/" "https://cloud.maksim-pankov.ru/";
proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Real-IP $remote_addr;
add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload" always;
client_max_body_size 0;
}
listen 443 ssl; # managed by Certbot
listen 443 ssl http2; # managed by Certbot
ssl_certificate /etc/letsencrypt/live/cloud.maksim-pankov.ru/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/cloud.maksim-pankov.ru/privkey.pem; # managed by Certbot
include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
@@ -25,4 +30,4 @@ server {
return 404; # managed by Certbot
}
}

View File

@@ -0,0 +1,38 @@
server {
server_name signaling.maksim-pankov.ru;
location / {
proxy_pass http://gipat:1988/;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Real-IP $remote_addr;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
# proxy_read_timeout 86400;
client_max_body_size 0;
}
listen 443 ssl; # managed by Certbot
ssl_certificate /etc/letsencrypt/live/signaling.maksim-pankov.ru/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/signaling.maksim-pankov.ru/privkey.pem; # managed by Certbot
include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
}
server {
if ($host = signaling.maksim-pankov.ru) {
return 301 https://$host$request_uri;
} # managed by Certbot
server_name signaling.maksim-pankov.ru;
listen 80;
return 404; # managed by Certbot
}