diff --git a/data/nginx/sites/thelinuxpro_net.conf b/data/nginx/sites/thelinuxpro_net.conf index 0c6b448..24574f5 100644 --- a/data/nginx/sites/thelinuxpro_net.conf +++ b/data/nginx/sites/thelinuxpro_net.conf @@ -29,3 +29,35 @@ server { proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; } } + +server { + listen 80; + server_name git.thelinuxpro.net; + server_tokens off; + + location /.well-known/acme-challenge/ { + root /var/www/certbot; + } + + location / { + return 301 https://$host$request_uri; + } +} + +server { + listen 443 ssl; + server_name git.thelinuxpro.net; + server_tokens off; + + ssl_certificate /etc/letsencrypt/live/thelinuxpro.net/fullchain.pem; + ssl_certificate_key /etc/letsencrypt/live/thelinuxpro.net/privkey.pem; + include /etc/letsencrypt/options-ssl-nginx.conf; + ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; + + location / { + proxy_pass http://10.99.23.12:3000; + proxy_set_header Host $http_host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + } +} diff --git a/init-letsencrypt-thelinuxpro_net.sh b/init-letsencrypt-thelinuxpro_net.sh index 490d630..be27b78 100755 --- a/init-letsencrypt-thelinuxpro_net.sh +++ b/init-letsencrypt-thelinuxpro_net.sh @@ -5,7 +5,7 @@ if ! [ -x "$(command -v docker compose)" ]; then exit 1 fi -domains=(thelinuxpro.net www.thelinuxpro.net) +domains=(thelinuxpro.net git.thelinuxpro.net www.thelinuxpro.net) rsa_key_size=4096 data_path="./data/certbot" email="kkenny379@gmail.com" # Adding a valid address is strongly recommended